Registering devices with Intune for management and policy enforcement
Upgraded from Business Standard to Premium - how to add devices
I updated our Microsoft Business Standard account to Business Premium and am having difficulty connecting our devices. Can someone please assist. I assumed that the devices that were already with the Standard account would also show in the Premium. …
Microsoft Security | Intune | Enrollment
I believe my personal PC has been mistakenly linked to Azure / MDM / Intune
Hello guys! First of all i want to say sorry for posting this here, after months of chatting with Microsoft support agents i just don't see any other option. I believe my PC is enrolled mistakenly into a tenant somehow because it always changes edition…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Call of Duty Secure Attestation fails — Intel PTT AIK enrollment HTTP 400
Hello Support Team, My system has an ASUS PRIME Z790-P WIFI motherboard, Intel Core i7-14700F, and BIOS version 1836. TPM 2.0 is ready for use, Secure Boot is enabled, and Windows is running in UEFI mode. However, Call of Duty Secure Attestation fails…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
AI answer
IOS Enrollment Policys - User affinity with modern auth, does not work with Company Portal VPP
IOS Enrollment Policys - User affinity with modern auth, does not work with Company Portal VPP I am trying to test the newer iOS Enrollment Policies using User Affinity with Modern Authentication instead of the older Enrollment Profiles. One thing I've…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Unable to add Work/School account on Windows 11 Pro - Error -895156188 (0xCAA50024) due to custom registry tweaks
Hello, I am experiencing an issue on Windows 11 Pro where employees are unable to sign in to a work or school account via Settings > Accounts > Access work or school. The system blocks the account from being added, prevents the company from…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Azure AIK enrollment returns HTTP 404 for Intel PTT EK CA "ODCA 2 CSME MTP PCH SVN 01 PTT CA" — blocks Call of Duty (RICOCHET) attestation
TPM 2.0 and Secure Boot are both fully enabled and pass every local check, but AIK enrollment fails server-side with HTTP 404 because the Azure AIK authority for this Intel PTT EK issuer does not exist. This blocks Call of Duty (RICOCHET) from…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Packaging interactive software for the company portal without user interaction
Hello, I want to make software available via the company portal that requires interaction. For example, that you specify an installation path, etc. An example software would be Docker Desktop. The installation always fails although it is at 100%.…
Microsoft Security | Intune | Configuration
Setting up and managing device configurations using Intune
Microsoft Security | Intune | Application management
Managing apps and software deployment through Microsoft Intune
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Microsoft Security | Intune | Other
Other Intune-related topics, including unsupported scenarios and platform-specific behaviors
AIK enrollment HTTP 400 – Intel PTT EK certificate rejected by Azure AIK service
Hello, Windows TPM AIK certificate enrollment fails server-side on my PC. The TPM reports Ready For Attestation: True, and Secure Boot is enabled in UEFI mode with standard keys. Error (Event 87, CertificateServicesClient-CertEnroll), repeated 56 times,…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Entra ID Free: what happens to already joined and Intune-enrolled PCs if I reset the MDM user scope to "None" after Intune licenses were removed?
I have a Microsoft 365 nonprofit tenant on the Microsoft Entra ID Free plan, with users on Business Basic. Previously I had higher-tier licenses (Business Premium) included in the nonprofit offer, which have now been removed. With those licenses I joined…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Company portal stuck in login error
I need Microsoft company portal for school and for work. I tried to add my school account and now every time I open the app it just says "error account is set up under work email tried to login under school email" and won't let me back out or…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
AI answer
Azure AIK trust pool
Same failure on another platform. Device: MSI Katana 17 HX, BIOS E17L7IMS.108. TPM: Intel PTT 2.0, manufacturer version 600.18.1042.2872, spec 1.38. EK issuer: CN=CSME ADL PTT 01SVN (NotBefore 23/06/2021, NotAfter 01/01/2050). EK cert is present locally…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Azure AIK enrollment returns HTTP 400 (0x80190190) for EK signed by "CSME ADL PTT 01SVN" — Intel PTT CA appears missing from AIK trust pool
My desktop fails Windows AIK certificate enrollment on every attempt, blocking TPM attestation for consumer applications. System: MSI PRO Z790-P WIFI (Z790 chipset, Raptor Lake), TPM 2.0 via Intel PTT, Windows 11 (fully updated), Secure Boot enforcing…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
GSA macOS client: Disable button in Connections window can't be hidden; Compliant Network CA only blocks new M365 sign-ins, not other traffic
We've deployed GSA (Internet Access + TLS inspection) to macOS via Intune and have two open questions: 1. Can't hide/gate the "Disable" button in the new Connections window Since client v1.1.26060207, "Disable" appears in two places:…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
How to remove organization from managing my device
Hi, I was logging into Microsoft Excel on my personal laptop for work when I accidentally pressed the "Allow my organization to manage my device." How can remove the access for my employer to access my personal computer? I don't want the…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
AI answer
Compliant macOS device still blocked by Conditional Access from accessing SharePoint
Description: I'm trying to access my company's SharePoint site from a macOS device (MacBook Pro, M2, 2022) that I've enrolled as BYOD via Microsoft Intune Company Portal. Current status: Company Portal shows the device as "In compliance" …
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Intune device enrolment for Hybrid AD joined machine
Facing issues while enrolling a machine(Hybrid join) to Intune via GPO, however the machine shows the MDM URL's correctly checked through dsregcmd /status. Still the machine is not enrolling over Intune Portal. Checked the Hybrid join-SCP…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Azure AIK enrollment fails 0x80190190 - Intel ODCA 2 CSME MTP PCH SVN 01 PTT CA missing from trust pool - blocking Call of Duty
Azure AIK enrollment fails with HTTP 400 / 0x80190190 ("No valid TPM EK/Platform certificate provided in the TPM identity request message") on Intel CSME MTP PTT platform, blocking TPM attestation for Call of Duty (RICOCHET Anti-Cheat, Season…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Switching Automatic Enrollment MDM User Scope from None to All
Hi, I'm trying to setup OOBE on some laptops for the first time and I have everything working except it won't let me change the MDM User Scope from 'None' to 'All'. Just to be clear, I can actually click on All, but the save button remains greyed out. …
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Intune Let's keep your account secure
Hi, Background, we are a college who are using MFA for staff using MS Authenticator and Temporary Access Pass codes. Currently have activated Authentication methods (in Migration Complete mode) - Policies and using Microsoft Authenticator and Temporary…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
AI answer
Intune Certificate enrollment
Hi, users are able to enrollment intune auto enroll certificate through internet, when they are trying to connect their devices through intranet or corporate network they are not able to enroll certificate and dont have that option not sure whats…
Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement