Hi Mike
This device may not have been set up correctly or may not be in Supervised mode via DEP.
Because it is just one device you have the option of either raising a Support ticket - which will take time to troubleshoot as log files will be needed. Otherwise you could just unenroll and re-enroll the device - I think given the circumstances this will be the most efficient course of action.
Best
------------------------------
Eamonn O'Mahony
Technical Client Success Manager
IBM Security
Dublin, Ireland
------------------------------