Repository navigation
Look up every MDM connection at once. The connection popup gains All Connections when more than one is configured — a choice per session, never the default. The lookup then reads every connection, a Connection column names the one each device's working record is on, and a Finding column, beside the serial number, reports what the records and the Apple assignment say about each other. Two entries addressing the same server are read once.
Find the stale records. A device assigned to one connection whose record lives on another is a mismatch; records left behind beside the working one are stale; a record for a device unassigned in Apple is reported as such; and a case the signals cannot settle is marked unverified rather than guessed. The assigned connection is identified from data every lookup can read — Apple's assignment, each ADE token's identity and device list, and each record's own enrollment — with nothing to configure. Records that did not enroll through Automated Device Enrollment are flagged in their own right.
Clean them up. Each extra record appears in the inspector with its state and that product's removal, and a multi-selection offers Remove Stale Records: every settled stale record goes through its own connection after one confirmation stating how many go where. Unverified rows are never bulk-removed, and a mismatch is not a removal candidate — its one record is where the device lives.
Actions follow the records. An action on a device reaches the connection its record is on, whatever the toolbar shows, and the activity log names that connection. A bulk selection whose records span connections says so instead of acting.
Asset tag. Reported from Jamf Pro and Jamf School: shown in the inspector, available as a column, and filterable — the filter's None entry finds the devices that still need tagging. It can be set or cleared from the inspector, one device at a time. Intune's API carries no asset tag.
One change to existing behavior. Lookups now start in a single Apple organization; All Organizations remains in the popup, chosen per session rather than being the default when several are configured.