1,637 questions

Sort by: Updated
2 answers One of the answers was accepted by the question author.

Upgraded from Business Standard to Premium - how to add devices

I updated our Microsoft Business Standard account to Business Premium and am having difficulty connecting our devices. Can someone please assist. I assumed that the devices that were already with the Standard account would also show in the Premium. …

Microsoft Security | Intune | Enrollment
asked 2026-10-29T16:13:03.6433333+00:00
Barbara MacArthur 20 Reputation points
accepted 2026-11-03T14:11:09.47+00:00
Barbara MacArthur 20 Reputation points
1 answer

I believe my personal PC has been mistakenly linked to Azure / MDM / Intune

Hello guys! First of all i want to say sorry for posting this here, after months of chatting with Microsoft support agents i just don't see any other option. I believe my PC is enrolled mistakenly into a tenant somehow because it always changes edition…

Microsoft Security | Intune | Enrollment
asked 2026-10-29T19:59:20.2+00:00
Alex Derril 0 Reputation points
edited an answer 2026-11-03T09:41:11.37+00:00
Marius Vaičeliūnas 230 Reputation points
1 answer

Call of Duty Secure Attestation fails — Intel PTT AIK enrollment HTTP 400

Hello Support Team, My system has an ASUS PRIME Z790-P WIFI motherboard, Intel Core i7-14700F, and BIOS version 1836. TPM 2.0 is ready for use, Secure Boot is enabled, and Windows is running in UEFI mode. However, Call of Duty Secure Attestation fails…

Microsoft Security | Intune | Enrollment
asked 2026-10-22T15:11:23.9266667+00:00
Vaydr 0 Reputation points
answered 2026-10-22T15:13:18.62+00:00

AI answer

1 answer

IOS Enrollment Policys - User affinity with modern auth, does not work with Company Portal VPP

IOS Enrollment Policys - User affinity with modern auth, does not work with Company Portal VPP I am trying to test the newer iOS Enrollment Policies using User Affinity with Modern Authentication instead of the older Enrollment Profiles. One thing I've…

Microsoft Security | Intune | Enrollment
asked 2026-07-28T02:53:21.45+00:00
GT 5 Reputation points
edited a comment 2026-10-21T17:36:36.26+00:00
JuliaMarvin 23,690 Reputation points Volunteer Moderator
0 answers

Unable to add Work/School account on Windows 11 Pro - Error -895156188 (0xCAA50024) due to custom registry tweaks

Hello, I am experiencing an issue on Windows 11 Pro where employees are unable to sign in to a work or school account via Settings > Accounts > Access work or school. The system blocks the account from being added, prevents the company from…

Microsoft Security | Intune | Enrollment
asked 2026-06-23T21:27:02.5133333+00:00
Mike_647 26 Reputation points
commented 2026-10-20T20:02:17.32+00:00
Akshay Shah 0 Reputation points
1 answer

Azure AIK enrollment returns HTTP 404 for Intel PTT EK CA "ODCA 2 CSME MTP PCH SVN 01 PTT CA" — blocks Call of Duty (RICOCHET) attestation

TPM 2.0 and Secure Boot are both fully enabled and pass every local check, but AIK enrollment fails server-side with HTTP 404 because the Azure AIK authority for this Intel PTT EK issuer does not exist. This blocks Call of Duty (RICOCHET) from…

Microsoft Security | Intune | Enrollment
asked 2026-10-17T23:02:52.7933333+00:00
#LI CHENHUI# 0 Reputation points
edited the question 2026-10-19T07:11:43.1866667+00:00
Daphne Huynh (WICLOUD CORPORATION) 2,540 Reputation points Microsoft External Staff Moderator
1 answer

Packaging interactive software for the company portal without user interaction

Hello, I want to make software available via the company portal that requires interaction. For example, that you specify an installation path, etc. An example software would be Docker Desktop. The installation always fails although it is at 100%.…

Microsoft Security | Intune | Configuration
Microsoft Security | Intune | Application management
Microsoft Security | Intune | Enrollment
Microsoft Security | Intune | Other
asked 2024-09-05T13:54:30.46+00:00
Anonymous
commented 2026-10-09T19:40:27.6533333+00:00
Atoofa Shaikh | TechEUC 0 Reputation points
0 answers

AIK enrollment HTTP 400 – Intel PTT EK certificate rejected by Azure AIK service

Hello, Windows TPM AIK certificate enrollment fails server-side on my PC. The TPM reports Ready For Attestation: True, and Secure Boot is enabled in UEFI mode with standard keys. Error (Event 87, CertificateServicesClient-CertEnroll), repeated 56 times,…

Microsoft Security | Intune | Enrollment
asked 2026-10-06T23:24:51+00:00
Faisal Abdullah 0 Reputation points
1 answer

Entra ID Free: what happens to already joined and Intune-enrolled PCs if I reset the MDM user scope to "None" after Intune licenses were removed?

I have a Microsoft 365 nonprofit tenant on the Microsoft Entra ID Free plan, with users on Business Basic. Previously I had higher-tier licenses (Business Premium) included in the nonprofit offer, which have now been removed. With those licenses I joined…

Microsoft Security | Intune | Enrollment
asked 2026-10-01T12:28:07.1233333+00:00
Luigi D'Acunto 0 Reputation points
edited an answer 2026-10-06T20:45:17.16+00:00
Rauh, Alexander 330 Reputation points
1 answer

Company portal stuck in login error

I need Microsoft company portal for school and for work. I tried to add my school account and now every time I open the app it just says "error account is set up under work email tried to login under school email" and won't let me back out or…

Microsoft Security | Intune | Enrollment
asked 2026-10-06T15:49:49.58+00:00
Amelia Anglesey 0 Reputation points
answered 2026-10-06T15:50:03.1066667+00:00

AI answer

0 answers

Azure AIK trust pool

Same failure on another platform. Device: MSI Katana 17 HX, BIOS E17L7IMS.108. TPM: Intel PTT 2.0, manufacturer version 600.18.1042.2872, spec 1.38. EK issuer: CN=CSME ADL PTT 01SVN (NotBefore 23/06/2021, NotAfter 01/01/2050). EK cert is present locally…

Microsoft Security | Intune | Enrollment
asked 2026-10-01T22:44:10.3433333+00:00
wahren watson 0 Reputation points
0 answers

Azure AIK enrollment returns HTTP 400 (0x80190190) for EK signed by "CSME ADL PTT 01SVN" — Intel PTT CA appears missing from AIK trust pool

My desktop fails Windows AIK certificate enrollment on every attempt, blocking TPM attestation for consumer applications. System: MSI PRO Z790-P WIFI (Z790 chipset, Raptor Lake), TPM 2.0 via Intel PTT, Windows 11 (fully updated), Secure Boot enforcing…

Microsoft Security | Intune | Enrollment
asked 2026-07-20T02:02:07.6133333+00:00
Nick Derbawka 5 Reputation points
commented 2026-10-01T22:30:01.86+00:00
wahren watson 0 Reputation points
0 answers

GSA macOS client: Disable button in Connections window can't be hidden; Compliant Network CA only blocks new M365 sign-ins, not other traffic

We've deployed GSA (Internet Access + TLS inspection) to macOS via Intune and have two open questions: 1. Can't hide/gate the "Disable" button in the new Connections window Since client v1.1.26060207, "Disable" appears in two places:…

Microsoft Security | Intune | Enrollment
asked 2026-09-30T13:20:59.66+00:00
Maha Atif 0 Reputation points
1 answer

How to remove organization from managing my device

Hi, I was logging into Microsoft Excel on my personal laptop for work when I accidentally pressed the "Allow my organization to manage my device." How can remove the access for my employer to access my personal computer? I don't want the…

Microsoft Security | Intune | Enrollment
asked 2026-09-23T07:57:28.4466667+00:00
Dana Beretta (NHS Lothian) 0 Reputation points
answered 2026-09-23T07:57:43.2733333+00:00

AI answer

1 answer

Compliant macOS device still blocked by Conditional Access from accessing SharePoint

Description: I'm trying to access my company's SharePoint site from a macOS device (MacBook Pro, M2, 2022) that I've enrolled as BYOD via Microsoft Intune Company Portal. Current status: Company Portal shows the device as "In compliance" …

Microsoft Security | Intune | Enrollment
asked 2026-09-17T17:04:36.0966667+00:00
Ivanya Amadea Clara Sianipar 0 Reputation points
answered 2026-09-18T00:59:31.9466667+00:00
takeig 0 Reputation points
1 answer

Intune device enrolment for Hybrid AD joined machine

Facing issues while enrolling a machine(Hybrid join) to Intune via GPO, however the machine shows the MDM URL's correctly checked through dsregcmd /status. Still the machine is not enrolling over Intune Portal. Checked the Hybrid join-SCP…

Microsoft Security | Intune | Enrollment
asked 2026-09-07T08:58:23.89+00:00
Gaurav Nigota 0 Reputation points
edited an answer 2026-09-17T00:39:56.28+00:00
Anthony Porter 310 Reputation points
3 answers

Azure AIK enrollment fails 0x80190190 - Intel ODCA 2 CSME MTP PCH SVN 01 PTT CA missing from trust pool - blocking Call of Duty

Azure AIK enrollment fails with HTTP 400 / 0x80190190 ("No valid TPM EK/Platform certificate provided in the TPM identity request message") on Intel CSME MTP PTT platform, blocking TPM attestation for Call of Duty (RICOCHET Anti-Cheat, Season…

Microsoft Security | Intune | Enrollment
asked 2026-08-02T22:06:36.86+00:00
javier 0 Reputation points
commented 2026-09-11T08:30:51.1+00:00
麒麟 白 15 Reputation points
2 answers

Switching Automatic Enrollment MDM User Scope from None to All

Hi, I'm trying to setup OOBE on some laptops for the first time and I have everything working except it won't let me change the MDM User Scope from 'None' to 'All'. Just to be clear, I can actually click on All, but the save button remains greyed out. …

Microsoft Security | Intune | Enrollment
asked 2026-04-24T17:18:05.0866667+00:00
Michael Anglen 0 Reputation points
answered 2026-09-08T21:09:52.3133333+00:00
Jackson Hellemn 0 Reputation points
1 answer

Intune Let's keep your account secure

Hi, Background, we are a college who are using MFA for staff using MS Authenticator and Temporary Access Pass codes. Currently have activated Authentication methods (in Migration Complete mode) - Policies and using Microsoft Authenticator and Temporary…

Microsoft Security | Intune | Enrollment
asked 2026-09-01T00:31:36.46+00:00
Anthony Hill 6 Reputation points
answered 2026-09-01T00:31:52.1666667+00:00

AI answer

1 answer

Intune Certificate enrollment

Hi, users are able to enrollment intune auto enroll certificate through internet, when they are trying to connect their devices through intranet or corporate network they are not able to enroll certificate and dont have that option not sure whats…

Microsoft Security | Intune | Enrollment
asked 2026-08-28T03:12:02.7533333+00:00
Sanjit Kumar 0 Reputation points
edited an answer 2026-08-30T20:11:40.49+00:00
Zoha Fatima 675 Reputation points