Monday, April 27, 2015

Home / Microsoft Intune and Device Registration Error

Microsoft Intune and Device Registration Error

The device registration errors in Microsoft Intune can be misleading.  Here are some common errors you may encounter during the device registration and enrollment process. 

Error #1

Device not added

This service is not supported

Error: MdmAuthorityNotDefined

IMG_0002

 

This service is not supported, MdmAuthorityNotDefined, A connection to the server could not be established etc errors during an Apple device enrollment.  In my case, it was a test device. I have used this device with different user account, Intune subscription etc. 

Possible solution / workaround

  1. In my case, this was due to duplicate/already enrolled device information in Intune.  Everything started working once I removed the existing device entry from Intune. 
  2. You will get the same error message, if you have an existing Management Profile in your device.  

image

Error #2

Profile Installation Failed

A connection to the server could not be established

IMG_0003

 

Possible solution / workaround

  1. Remove existing device from Intune
  2. Remove existing Management Profile

image

Error #3:

Service not supported

This Service is not supported

Error: MdmAuthorityNotDefniend

 

image

Possible issue / Workgroup

  1. Make sure this user is part of the Intune collection.  You can see the current configuration from SCCM->Intune subscription properties.

 

image

clip_image002

 

Error #4

Profile Installation Failed

The new MDM payload does not match the old payload.

 

image

 

Possible solution / workaround

  1. Remove existing Management Profile the device

image

Error #5

Profile Installation Failed

A connection to the server could not be established. 

image

Possible solution / workaround

  1. Remove existing Management Profile the device

image

 

Error #6

Device Failed to enroll

We encountered an error while attempting to add your device.  this can happen because one or more of the management profiles were not accepted, or we encountered an issue processing the request.  If a retry does not solve the issue, contact your IT department for assistance. 

image

Possible solution / workaround

  1. Remove existing Management Profile the device

image

 

Error #7

Could not sign in. You will need to sign in again. If you need this message again, please contact your IT admin.

image

Possible solution / workaround

  1. Device is currently enrolled using another Intune authority. See Error #8 also. 

Error #8

This app is a device administrator and must be deactivated before uninstalling.  

image

Possible solution / workaround

  1. Go to Settings –> Security –> Phone Administrator and uncheck the Company Portal application.

image

 

http://www.amazon.com/dp/1849687447/?tag=packtpubli-20

SS

Santhosh Sivarajan

Microsoft MVP · Identity & Cybersecurity Architect

Santhosh has 30+ years of hands-on enterprise experience in Identity and Access Management, Microsoft Entra ID, Active Directory, Microsoft 365 and Zero Trust architecture. He is the author of two books on Windows Server and security, and leads consulting, assessments and training at SAG Business Group.

4 comments:

It is company easily reachable in all worlds. Sap Fiori

I think you can make a Good business deal with that.
Marianna Fazylova

Thank you Santhosh! This article got me out of a jam I was in. More evidence I've been away from the desktop world too long (getting lost in Oracle and LDAP...).

Post a Comment

Popular Posts
Workstation Trust Relationship Issue Issue: You receive the following error message, when you try to login to the domain.  The security database on the server does not have ... ADMT Service Account - Permission and Configuration The ADMT service account needs to have proper permission in source and target domains.  You don’t need to use 2 separate accounts.  You can ... My First Peek into Microsoft Exchange 2010 By Santhosh Sivarajan Before I really dive into Exchange 2010, I thought I would install and play with it first. I took some screen shots and notes during the ins... ObjectSID and Active Directory What is an objectSID in Active Directory? When a new object is created in Active Directory, Domain Controller assigns a unique value used ... AD Group Report - List Group Members in Active Directory–PowerShell Script Updated Script - http://portal.sivarajan.com/2011/10/search-ad-collect-local-admin-group.html Script #1 This script... Add Users to a Group–PowerShell Script Purpose – Add users to a group from an input file – PowerShell V2 Script.  Input file – Input file (Users.csv) contains samAccountName in... User Account Migration and Merging – Part I (ADMT) Part I - User Account Migration and Merging Using ADMT Part II - User Account Migration and Merging Using QMM pre-creating user account ... User Account Migration and Merging – Part II (Quest Migration Manager) Part I - User Account Migration and Merging Using ADMT Part II - User Account Migration and Merging Using QMM Pre-creating user account in... Delete Stale or Inactive Computer Accounts from Active Directory Here is an easy way to identify and delete inactive or stale computers in an Active Directory environment.  Using the dsquery command you c... Converting PowerShell (PS1) to EXE / Standalone Application As we know, there many applications available to convert a PowerShell file to a standalone executable file.  Based on my experience, PowerSh...