diff --git a/changes/17692-enrollment-state-3.md b/changes/17692-enrollment-state-3.md
new file mode 100644
index 0000000000..5703a31fd2
--- /dev/null
+++ b/changes/17692-enrollment-state-3.md
@@ -0,0 +1 @@
+- Fix a bug where valid MDM enrollments would show up as unmanaged (EnrollmentState 3)
diff --git a/server/service/osquery_utils/queries.go b/server/service/osquery_utils/queries.go
index e65124e4e8..b7b3d6409f 100644
--- a/server/service/osquery_utils/queries.go
+++ b/server/service/osquery_utils/queries.go
@@ -506,7 +506,7 @@ var extraDetailQueries = map[string]DetailQuery{
 		    -- coalesce to 'unknown' and keep that state in the list
 		    -- in order to account for hosts that might not have this
 		    -- key, and servers
-                    WHERE COALESCE(e.state, '0') IN ('0', '1', '2')
+                    WHERE COALESCE(e.state, '0') IN ('0', '1', '2', '3')
                     LIMIT 1;
 		`,
 		DirectIngestFunc: directIngestMDMWindows,