First enroll the device > create a compliance policy for unmanaged device > put it through conditional access.
Migration takes time! let's not hurry.