If a Windows 10/11 device was already joined to Azure AD or Entra ID before the enablement of the device automatic enrollment, then the device has to be manually enrolled by one of the following methods:
This is a straightforward option for smaller deployments or scenarios where IT can configure devices individually.
https://learn.microsoft.com/en-us/mem/intune/user-help/sign-in-to-the-company-portal