Login to Azure Active Directory (AAD) and find the Mobility (MDM and MAM) and Click on Microsoft Intune.

Below screen shows, how to enable automatic enrollment from Azure Active Directory.

Select All to enroll All users or Devices, Select some to enroll a specific group in Intune console from Azure AD.

Settings will save automatically.

Now login to MEM console click on Devices then select Windows enrollment and then click on Automatic Enrollment.

verify the below settings.

Select some option if you want to enroll device from a specific group.

I have selected few groups as showing below.

Machine will enroll in to Intune if it is part of any of these group.

Now validate you CNAME from here.