Some devices show "Can be onboarded" even though they are already onboarded

Hi,

I'm seeing something strange in Microsoft Defender for Endpoint.

I have 17 devices (mostly Windows clients and a few Windows Servers) that show "Can be onboarded" in the Defender portal.

The strange part is that these devices are already onboarded.

I checked a few of them and found:

• Sense service is running.
• OnboardingState = 1.
• OrgId is present.
• LastConnected is updating.
• The devices are Active in the portal and Last Seen is recent.
• They appear in Advanced Hunting and are sending telemetry.
• No duplicate device records.

The rest of our devices are working normally. Only these 18 have this issue.

Has anyone seen this before? Is this just a portal display issue or something on Microsoft's backend?

Any ideas would be appreciated.

Thanks.