{ "name": "Intune error library", "url": "https://www.oeltayeb.com/intune-errors.html", "count": 602, "errors": [ { "error": "0x8018002b", "where": "DeviceManagement-Enterprise-Diagnostics-Provider", "group": "Enrollment", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html", "also": [ "-2145910741", "2149056555" ] }, { "error": "0x80180003", "where": "Access work or school / OOBE", "group": "Enrollment", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html", "also": [ "-2145910781", "2149056515" ] }, { "error": "0x80180013", "where": "Access work or school / OOBE", "group": "Enrollment", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html", "also": [ "-2145910765", "2149056531" ] }, { "error": "0x80180018", "where": "Access work or school / OOBE", "group": "Enrollment", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html", "also": [ "-2145910760", "2149056536" ] }, { "error": "2149056522", "where": "Task Scheduler operational log", "group": "Enrollment", "guide": "Intune device not checking in: diagnosing a Windows device that stopped syncing", "url": "https://www.oeltayeb.com/articles/intune-device-not-checking-in-sync-troubleshooting.html", "also": [ "0x8018000A" ] }, { "error": "Auto MDM Enroll: Failed", "where": "DeviceManagement-Enterprise-Diagnostics-Provider", "group": "Enrollment", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html" }, { "error": "Company Portal Temporarily Unavailable", "where": "Company Portal", "group": "Enrollment", "guide": "Company Portal for Windows: Sync fails, device not enrolled or assigned to someone else", "url": "https://www.oeltayeb.com/articles/company-portal-sync-errors-device-not-enrolled-troubleshooting.html" }, { "error": "DeviceCapReached", "where": "Company Portal", "group": "Enrollment", "guide": "Company Portal for Windows: Sync fails, device not enrolled or assigned to someone else", "url": "https://www.oeltayeb.com/articles/company-portal-sync-errors-device-not-enrolled-troubleshooting.html" }, { "error": "Event ID 7016 (Task Scheduler)", "where": "Task Scheduler operational log", "group": "Enrollment", "guide": "Intune device not checking in: diagnosing a Windows device that stopped syncing", "url": "https://www.oeltayeb.com/articles/intune-device-not-checking-in-sync-troubleshooting.html" }, { "error": "It looks like you're not connected.", "where": "Access work or school", "group": "Enrollment", "guide": "Company Portal for Windows: Sync fails, device not enrolled or assigned to someone else", "url": "https://www.oeltayeb.com/articles/company-portal-sync-errors-device-not-enrolled-troubleshooting.html" }, { "error": "Looks like the MDM Terms of Use endpoint is not correctly configured", "where": "Access work or school / OOBE", "group": "Enrollment", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html" }, { "error": "The sync could not be initiated (0x80072f9a)", "where": "Access work or school", "group": "Enrollment", "guide": "Intune device not checking in: diagnosing a Windows device that stopped syncing", "url": "https://www.oeltayeb.com/articles/intune-device-not-checking-in-sync-troubleshooting.html", "also": [ "-2147012710", "2147954586" ] }, { "error": "There was an error with your license", "where": "Access work or school / OOBE", "group": "Enrollment", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html" }, { "error": "This device is already assigned to someone in your organization. Contact company support about becoming the primary device user.", "where": "Company Portal (Windows)", "group": "Enrollment", "guide": "Company Portal for Windows: Sync fails, device not enrolled or assigned to someone else", "url": "https://www.oeltayeb.com/articles/company-portal-sync-errors-device-not-enrolled-troubleshooting.html" }, { "error": "This user isn't authorized to enroll", "where": "Access work or school / OOBE", "group": "Enrollment", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html" }, { "error": "We couldn't auto-discover a management endpoint matching the username entered.", "where": "Access work or school", "group": "Enrollment", "guide": "Company Portal for Windows: Sync fails, device not enrolled or assigned to someone else", "url": "https://www.oeltayeb.com/articles/company-portal-sync-errors-device-not-enrolled-troubleshooting.html" }, { "error": "Your device is already being managed by an organization", "where": "Access work or school", "group": "Enrollment", "guide": "Company Portal for Windows: Sync fails, device not enrolled or assigned to someone else", "url": "https://www.oeltayeb.com/articles/company-portal-sync-errors-device-not-enrolled-troubleshooting.html" }, { "error": "0x87D1041C", "where": "AppWorkload.log", "group": "Autopilot", "guide": "Enrollment Status Page timing out during Autopilot: a step-by-step troubleshooting guide", "url": "https://www.oeltayeb.com/articles/enrollment-status-page-timeout-troubleshooting.html", "also": [ "-2016345060", "2278622236" ] }, { "error": "0x800706FD", "where": "DeviceManagement-Enterprise-Diagnostics-Provider", "group": "Autopilot", "guide": "Pre-provisioning hybrid join fails when a policy needs a domain controller (0x800706FD)", "url": "https://www.oeltayeb.com/articles/autopilot-pre-provisioning-hybrid-join-policy-conflict-domain-controller.html", "also": [ "-2147023107", "2147944189" ] }, { "error": "0x800706FD", "where": "DeviceManagement-Enterprise-Diagnostics-Provider", "group": "Autopilot", "guide": "Windows Autopilot known issues in 2026: what's open, what's fixed and how to stay informed", "url": "https://www.oeltayeb.com/articles/windows-autopilot-known-issues-2026-roundup.html", "also": [ "-2147023107", "2147944189" ] }, { "error": "0x80004005", "where": "Autopilot / OOBE (Enrollment Status Page)", "group": "Autopilot", "guide": "Hybrid join Autopilot deployments time out with 0x80004005: the 2026 known issue and the fix", "url": "https://www.oeltayeb.com/articles/autopilot-hybrid-join-timeout-0x80004005-2026.html", "also": [ "-2147467259", "2147500037" ] }, { "error": "0x80004005", "where": "Autopilot / OOBE (Enrollment Status Page)", "group": "Autopilot", "guide": "Windows Autopilot known issues in 2026: what's open, what's fixed and how to stay informed", "url": "https://www.oeltayeb.com/articles/windows-autopilot-known-issues-2026-roundup.html", "also": [ "-2147467259", "2147500037" ] }, { "error": "0x80180014", "where": "Autopilot / OOBE (Enrollment Status Page)", "group": "Autopilot", "guide": "Windows Autopilot error 0x80180014 when redeploying a device: cause and fix", "url": "https://www.oeltayeb.com/articles/autopilot-error-0x80180014-reenrollment.html", "also": [ "-2145910764", "2149056532" ] }, { "error": "Another installation is in progress, please try again later", "where": "AppWorkload.log", "group": "Autopilot", "guide": "Enrollment Status Page timing out during Autopilot: a step-by-step troubleshooting guide", "url": "https://www.oeltayeb.com/articles/enrollment-status-page-timeout-troubleshooting.html" }, { "error": "Cannot start service ODJConnectorSvc", "where": "Intune Connector for AD (configuration)", "group": "Autopilot", "guide": "Intune Connector for AD fails with SeLogonAsServicePrivilege when you bring your own gMSA", "url": "https://www.oeltayeb.com/articles/intune-connector-active-directory-gmsa-selogonasservice-error.html" }, { "error": "DeviceNotSupported", "where": "MDM enrollment ETW trace", "group": "Autopilot", "guide": "Windows Autopilot error 0x80180014 when redeploying a device: cause and fix", "url": "https://www.oeltayeb.com/articles/autopilot-error-0x80180014-reenrollment.html" }, { "error": "Enrollment blocked for AP device by SDM One Time Limit Check", "where": "MDM enrollment ETW trace", "group": "Autopilot", "guide": "Windows Autopilot error 0x80180014 when redeploying a device: cause and fix", "url": "https://www.oeltayeb.com/articles/autopilot-error-0x80180014-reenrollment.html" }, { "error": "ERROR_NOT_SUPPORTED (0x80070032)", "where": "Autopilot Reset", "group": "Autopilot", "guide": "Windows Autopilot known issues in 2026: what's open, what's fixed and how to stay informed", "url": "https://www.oeltayeb.com/articles/windows-autopilot-known-issues-2026-roundup.html", "also": [ "-2147024846", "2147942450" ] }, { "error": "Event ID 2800 (DeviceManagement-Enterprise-Diagnostics-Provider)", "where": "Event Viewer", "group": "Autopilot", "guide": "Enrollment Status Page timing out during Autopilot: a step-by-step troubleshooting guide", "url": "https://www.oeltayeb.com/articles/enrollment-status-page-timeout-troubleshooting.html" }, { "error": "Export of device link information timed out", "where": "Autopilot / OOBE (Export device information)", "group": "Autopilot", "guide": "Windows Autopilot device preparation: known issues and how to troubleshoot a failed run", "url": "https://www.oeltayeb.com/articles/windows-autopilot-device-preparation-known-issues-troubleshooting.html" }, { "error": "Failed to update security group device preparation setting", "where": "Intune admin center (Device preparation policy)", "group": "Autopilot", "guide": "Windows Autopilot device preparation: known issues and how to troubleshoot a failed run", "url": "https://www.oeltayeb.com/articles/windows-autopilot-device-preparation-known-issues-troubleshooting.html" }, { "error": "InvalidZtdHardwareHash", "where": "Intune admin center (Autopilot device import)", "group": "Autopilot", "guide": "Windows Autopilot from scratch: register devices, build a user-driven profile and assign it", "url": "https://www.oeltayeb.com/articles/windows-autopilot-setup-hardware-hash-deployment-profile.html" }, { "error": "MDM PolicyManager: Merge string, Area: (UserRights), Policy: (DenyLocalLogOn), Result:(0x800706FD)", "where": "DeviceManagement-Enterprise-Diagnostics-Provider", "group": "Autopilot", "guide": "Pre-provisioning hybrid join fails when a policy needs a domain controller (0x800706FD)", "url": "https://www.oeltayeb.com/articles/autopilot-pre-provisioning-hybrid-join-policy-conflict-domain-controller.html", "also": [ "-2147023107", "2147944189" ] }, { "error": "MSA not valid", "where": "Intune Connector for AD (configuration)", "group": "Autopilot", "guide": "Windows Autopilot known issues in 2026: what's open, what's fixed and how to stay informed", "url": "https://www.oeltayeb.com/articles/windows-autopilot-known-issues-2026-roundup.html" }, { "error": "SeLogonAsServicePrivilegeMissing", "where": "Intune Connector for AD (configuration)", "group": "Autopilot", "guide": "Intune Connector for AD fails with SeLogonAsServicePrivilege when you bring your own gMSA", "url": "https://www.oeltayeb.com/articles/intune-connector-active-directory-gmsa-selogonasservice-error.html" }, { "error": "System.Security.Principal.WindowsIdentity.KerbS4ULogon(String upn, SafeAccessTokenHandle& safeTokenHandle)", "where": "Intune Connector for AD (UI / setup logs)", "group": "Autopilot", "guide": "Intune Connector for AD fails with SeLogonAsServicePrivilege when you bring your own gMSA", "url": "https://www.oeltayeb.com/articles/intune-connector-active-directory-gmsa-selogonasservice-error.html" }, { "error": "The service did not start due to a logon failure", "where": "Intune Connector for AD (configuration)", "group": "Autopilot", "guide": "Intune Connector for AD fails with SeLogonAsServicePrivilege when you bring your own gMSA", "url": "https://www.oeltayeb.com/articles/intune-connector-active-directory-gmsa-selogonasservice-error.html" }, { "error": "The trust relationship between this workstation and the primary domain failed.", "where": "DeviceManagement-Enterprise-Diagnostics-Provider", "group": "Autopilot", "guide": "Pre-provisioning hybrid join fails when a policy needs a domain controller (0x800706FD)", "url": "https://www.oeltayeb.com/articles/autopilot-pre-provisioning-hybrid-join-policy-conflict-domain-controller.html" }, { "error": "There was a problem with the device security group", "where": "Intune admin center (Device preparation policy)", "group": "Autopilot", "guide": "Windows Autopilot device preparation: known issues and how to troubleshoot a failed run", "url": "https://www.oeltayeb.com/articles/windows-autopilot-device-preparation-known-issues-troubleshooting.html" }, { "error": "Your organization does not support this version of Windows. (0x80180014)", "where": "Access work or school (Entra join)", "group": "Autopilot", "guide": "Windows Autopilot error 0x80180014 when redeploying a device: cause and fix", "url": "https://www.oeltayeb.com/articles/autopilot-error-0x80180014-reenrollment.html", "also": [ "-2145910764", "2149056532" ] }, { "error": "ZtdDeviceAlreadyAssigned", "where": "Intune admin center (Autopilot device import)", "group": "Autopilot", "guide": "Windows Autopilot from scratch: register devices, build a user-driven profile and assign it", "url": "https://www.oeltayeb.com/articles/windows-autopilot-setup-hardware-hash-deployment-profile.html" }, { "error": "ZtdDeviceAssignedToAnotherTenant", "where": "Intune admin center (Autopilot device import)", "group": "Autopilot", "guide": "Windows Autopilot from scratch: register devices, build a user-driven profile and assign it", "url": "https://www.oeltayeb.com/articles/windows-autopilot-setup-hardware-hash-deployment-profile.html" }, { "error": "ZtdDeviceDuplicated", "where": "Intune admin center (Autopilot device import)", "group": "Autopilot", "guide": "Windows Autopilot from scratch: register devices, build a user-driven profile and assign it", "url": "https://www.oeltayeb.com/articles/windows-autopilot-setup-hardware-hash-deployment-profile.html" }, { "error": "0x8A15001B The Microsoft Store client is blocked by policy", "where": "WinGet / Intune install status", "group": "Apps & scripts", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html", "also": [ "-1978335205", "2316632091" ] }, { "error": "0x8A15001C The Microsoft Store app is blocked by policy", "where": "WinGet / Intune install status", "group": "Apps & scripts", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html", "also": [ "-1978335204", "2316632092" ] }, { "error": "0x8A15003A Operation is blocked by Group Policy", "where": "WinGet / Intune install status", "group": "Apps & scripts", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html", "also": [ "-1978335174", "2316632122" ] }, { "error": "0x8A15005E The server certificate did not match any of the expected values.", "where": "WinGet / Intune install status", "group": "Apps & scripts", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html", "also": [ "-1978335138", "2316632158" ] }, { "error": "0x8A150008 Downloading installer failed", "where": "WinGet / Intune install status", "group": "Apps & scripts", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html", "also": [ "-1978335224", "2316632072" ] }, { "error": "0x8A150101 Application is currently running. Exit the application then try again.", "where": "WinGet / Intune install status", "group": "Apps & scripts", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html", "also": [ "-1978334975", "2316632321" ] }, { "error": "0x87D1041C", "where": "Intune admin center (Device install status)", "group": "Apps & scripts", "guide": "Win32 app error 0x87D1041C: the app installed but Intune can't detect it", "url": "https://www.oeltayeb.com/articles/win32-app-0x87d1041c-not-detected.html", "also": [ "-2016345060", "2278622236" ] }, { "error": "0x87D1041C", "where": "Intune admin center (Device install status)", "group": "Apps & scripts", "guide": "Packaging a Win32 app for Intune: .intunewin, install commands, detection and requirement rules", "url": "https://www.oeltayeb.com/articles/package-win32-app-intunewin-content-prep-tool.html", "also": [ "-2016345060", "2278622236" ] }, { "error": "0x87D1041C", "where": "Intune admin center (Device install status)", "group": "Apps & scripts", "guide": "Win32 app supersedence and dependencies in Intune: upgrade chains that don't break", "url": "https://www.oeltayeb.com/articles/intune-win32-app-supersedence-dependencies.html", "also": [ "-2016345060", "2278622236" ] }, { "error": "1603 Fatal error during installation.", "where": "Installer exit code (AppWorkload.log)", "group": "Apps & scripts", "guide": "Win32 app errors in Intune: 0x87D30065 downloads, exit code 1603 and Delivery Optimization", "url": "https://www.oeltayeb.com/articles/intune-win32-app-download-install-errors-0x87d30065.html" }, { "error": "1618", "where": "AppWorkload.log (installer return code)", "group": "Apps & scripts", "guide": "Packaging a Win32 app for Intune: .intunewin, install commands, detection and requirement rules", "url": "https://www.oeltayeb.com/articles/package-win32-app-intunewin-content-prep-tool.html" }, { "error": "1618 Another installation is already in progress.", "where": "Installer exit code (AppWorkload.log)", "group": "Apps & scripts", "guide": "Win32 app errors in Intune: 0x87D30065 downloads, exit code 1603 and Delivery Optimization", "url": "https://www.oeltayeb.com/articles/intune-win32-app-download-install-errors-0x87d30065.html" }, { "error": "1641", "where": "AppWorkload.log (installer return code)", "group": "Apps & scripts", "guide": "Packaging a Win32 app for Intune: .intunewin, install commands, detection and requirement rules", "url": "https://www.oeltayeb.com/articles/package-win32-app-intunewin-content-prep-tool.html" }, { "error": "3010", "where": "AppWorkload.log (installer return code)", "group": "Apps & scripts", "guide": "Packaging a Win32 app for Intune: .intunewin, install commands, detection and requirement rules", "url": "https://www.oeltayeb.com/articles/package-win32-app-intunewin-content-prep-tool.html" }, { "error": "Failed to retrieve content information. (0x87D30065)", "where": "Intune admin center (app install status)", "group": "Apps & scripts", "guide": "Win32 app errors in Intune: 0x87D30065 downloads, exit code 1603 and Delivery Optimization", "url": "https://www.oeltayeb.com/articles/intune-win32-app-download-install-errors-0x87d30065.html", "also": [ "-2016214939", "2278752357" ] }, { "error": "Outlook pasted from your clipboard", "where": "Device (Android 12+ toast notification)", "group": "Apps & scripts", "guide": "Current Intune known issues that aren't your fault: Company Portal, Store apps, compliance messages", "url": "https://www.oeltayeb.com/articles/intune-known-issues-company-portal-apps-remediation-message-2026.html" }, { "error": "Report-only: Failure", "where": "Microsoft Entra sign-in log", "group": "Apps & scripts", "guide": "App protection policies not applying to Outlook mobile: a troubleshooting checklist", "url": "https://www.oeltayeb.com/articles/app-protection-policy-not-applying-outlook-mobile.html" }, { "error": "Requirements Not Met", "where": "Company Portal", "group": "Apps & scripts", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html" }, { "error": "The application was not detected after installation completed successfully (0x87D1041C)", "where": "Intune admin center (Device install status)", "group": "Apps & scripts", "guide": "Win32 app error 0x87D1041C: the app installed but Intune can't detect it", "url": "https://www.oeltayeb.com/articles/win32-app-0x87d1041c-not-detected.html", "also": [ "-2016345060", "2278622236" ] }, { "error": "The application was not detected after installation completed successfully (0x87D1041C)", "where": "Intune admin center (app install status)", "group": "Apps & scripts", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html", "also": [ "-2016345060", "2278622236" ] }, { "error": "To access your service, app, or website, you might need to sign in to Microsoft Edge using username@domain.com", "where": "Microsoft Edge (sign-in prompt)", "group": "Apps & scripts", "guide": "Intune app protection for Windows (MAM in Edge): setup, Conditional Access and errors", "url": "https://www.oeltayeb.com/articles/intune-mam-windows-edge-app-protection-errors.html" }, { "error": "0x87D1FDE8 Remediation failed", "where": "Intune admin center (profile status)", "group": "Policies & compliance", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html", "also": [ "-2016281112", "2278686184" ] }, { "error": "0x87D1FDE9 Not applicable for this device", "where": "Intune admin center (profile status)", "group": "Policies & compliance", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html", "also": [ "-2016281111", "2278686185" ] }, { "error": "0x87D1FDEB Data type conversion failed", "where": "Intune admin center (custom profile)", "group": "Policies & compliance", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html", "also": [ "-2016281109", "2278686187" ] }, { "error": "0x87D101F4 Syncml (500): The recipient encountered an unexpected condition which prevented it from fulfilling the request", "where": "Intune admin center (profile status)", "group": "Policies & compliance", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html", "also": [ "-2016345612", "2278621684" ] }, { "error": "0x87D10196 Syncml (406): The requested command failed because an optional feature in the request was not supported.", "where": "Intune admin center (profile status)", "group": "Policies & compliance", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html", "also": [ "-2016345706", "2278621590" ] }, { "error": "0x800705B4", "where": "Autopilot / OOBE (self-deploying mode)", "group": "Policies & compliance", "guide": "Windows kiosk and Shared PC with Intune: single-app, multi-app and shared devices", "url": "https://www.oeltayeb.com/articles/windows-kiosk-shared-pc-intune-configuration.html", "also": [ "-2147023436", "2147943860" ] }, { "error": "65000", "where": "Intune admin center (per-setting status)", "group": "Policies & compliance", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html" }, { "error": "65007 Script returned failure", "where": "Intune device compliance reports", "group": "Policies & compliance", "guide": "Custom compliance in Intune: writing the discovery script and JSON rules", "url": "https://www.oeltayeb.com/articles/intune-custom-compliance-policy-json-script.html" }, { "error": "65008 Setting missing in the script result", "where": "Intune device compliance reports", "group": "Policies & compliance", "guide": "Custom compliance in Intune: writing the discovery script and JSON rules", "url": "https://www.oeltayeb.com/articles/intune-custom-compliance-policy-json-script.html" }, { "error": "65009 Invalid JSON for the discovered setting", "where": "Intune device compliance reports", "group": "Policies & compliance", "guide": "Custom compliance in Intune: writing the discovery script and JSON rules", "url": "https://www.oeltayeb.com/articles/intune-custom-compliance-policy-json-script.html" }, { "error": "65010 Invalid datatype for the discovered setting", "where": "Intune device compliance reports", "group": "Policies & compliance", "guide": "Custom compliance in Intune: writing the discovery script and JSON rules", "url": "https://www.oeltayeb.com/articles/intune-custom-compliance-policy-json-script.html" }, { "error": "-2016281112 (Remediation failed)", "where": "Intune admin center (profile status)", "group": "Policies & compliance", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html", "also": [ "0x87D1FDE8" ] }, { "error": "ADMX file referenced not found NamespaceMissing:Microsoft.Policies.Windows. Please upload it first.", "where": "Intune admin center (Import ADMX)", "group": "Policies & compliance", "guide": "Importing custom ADMX templates into Intune: upload errors, dependencies and fixes", "url": "https://www.oeltayeb.com/articles/intune-import-custom-admx-templates-errors.html" }, { "error": "Error code 0x80070005", "where": "OneDrive (Known Folder Move dialog)", "group": "Policies & compliance", "guide": "OneDrive Known Folder Move with Intune: silent sign-in, silent move and stuck folders", "url": "https://www.oeltayeb.com/articles/onedrive-known-folder-move-intune-deployment-troubleshooting.html", "also": [ "-2147024891", "2147942405" ] }, { "error": "Error executing Checkup", "where": "journalctl -t mstunnel_monitor", "group": "Policies & compliance", "guide": "Microsoft Tunnel for Intune: installation, mst-cli, health checks and connection errors", "url": "https://www.oeltayeb.com/articles/microsoft-tunnel-gateway-setup-troubleshooting.html" }, { "error": "Event ID 1001 (CertificateConnectors)", "where": "Event Viewer (Intune CertificateConnectors)", "group": "Policies & compliance", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html" }, { "error": "Event ID 1052 (CertificateConnectors)", "where": "Event Viewer (Intune CertificateConnectors)", "group": "Policies & compliance", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html" }, { "error": "Event ID 4001 (CertificateConnectors)", "where": "Event Viewer (Intune CertificateConnectors)", "group": "Policies & compliance", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html" }, { "error": "Event ID 4005 (CertificateConnectors)", "where": "Event Viewer (Intune CertificateConnectors)", "group": "Policies & compliance", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html" }, { "error": "Event ID 4007 (CertificateConnectors)", "where": "Event Viewer (Intune CertificateConnectors)", "group": "Policies & compliance", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html" }, { "error": "Event ID 5002 (CertificateConnectors)", "where": "Event Viewer (Intune CertificateConnectors)", "group": "Policies & compliance", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html" }, { "error": "Failed to parse version-info.json for version information.", "where": "journalctl -t mstunnel-agent", "group": "Policies & compliance", "guide": "Microsoft Tunnel for Intune: installation, mst-cli, health checks and connection errors", "url": "https://www.oeltayeb.com/articles/microsoft-tunnel-gateway-setup-troubleshooting.html" }, { "error": "Failure starting service mstunnel-agent", "where": "journalctl -t mstunnel_monitor", "group": "Policies & compliance", "guide": "Microsoft Tunnel for Intune: installation, mst-cli, health checks and connection errors", "url": "https://www.oeltayeb.com/articles/microsoft-tunnel-gateway-setup-troubleshooting.html" }, { "error": "Failure starting service mstunnel-server", "where": "journalctl -t mstunnel_monitor", "group": "Policies & compliance", "guide": "Microsoft Tunnel for Intune: installation, mst-cli, health checks and connection errors", "url": "https://www.oeltayeb.com/articles/microsoft-tunnel-gateway-setup-troubleshooting.html" }, { "error": "File exceeds the maximum file size", "where": "OneDrive (Known Folder Move dialog)", "group": "Policies & compliance", "guide": "OneDrive Known Folder Move with Intune: silent sign-in, silent move and stuck folders", "url": "https://www.oeltayeb.com/articles/onedrive-known-folder-move-intune-deployment-troubleshooting.html" }, { "error": "File exceeds the maximum path length in Windows", "where": "OneDrive (Known Folder Move dialog)", "group": "Policies & compliance", "guide": "OneDrive Known Folder Move with Intune: silent sign-in, silent move and stuck folders", "url": "https://www.oeltayeb.com/articles/onedrive-known-folder-move-intune-deployment-troubleshooting.html" }, { "error": "Folder contains a reparse point", "where": "OneDrive (Known Folder Move dialog)", "group": "Policies & compliance", "guide": "OneDrive Known Folder Move with Intune: silent sign-in, silent move and stuck folders", "url": "https://www.oeltayeb.com/articles/onedrive-known-folder-move-intune-deployment-troubleshooting.html" }, { "error": "GatewayTimeout", "where": "Browser (SCEP server URL)", "group": "Policies & compliance", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html" }, { "error": "Has a compliance policy assigned", "where": "Default Device Compliance Policy", "group": "Policies & compliance", "guide": "Noncompliant on the Default Device Compliance Policy? The three built-in checks explained", "url": "https://www.oeltayeb.com/articles/default-device-compliance-policy-noncompliant.html" }, { "error": "HTTP Error 403.0 – Forbidden", "where": "Browser (SCEP server URL)", "group": "Policies & compliance", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html" }, { "error": "Important folders aren't in the default locations", "where": "OneDrive (Known Folder Move dialog)", "group": "Policies & compliance", "guide": "OneDrive Known Folder Move with Intune: silent sign-in, silent move and stuck folders", "url": "https://www.oeltayeb.com/articles/onedrive-known-folder-move-intune-deployment-troubleshooting.html" }, { "error": "Last check-in: Unhealthy", "where": "Intune admin center (Tunnel health check)", "group": "Policies & compliance", "guide": "Microsoft Tunnel for Intune: installation, mst-cli, health checks and connection errors", "url": "https://www.oeltayeb.com/articles/microsoft-tunnel-gateway-setup-troubleshooting.html" }, { "error": "main: tun.c:655: Can't open /dev/net/tun: Operation not permitted", "where": "journalctl -t ocserv (Tunnel server)", "group": "Policies & compliance", "guide": "Microsoft Tunnel for Intune: installation, mst-cli, health checks and connection errors", "url": "https://www.oeltayeb.com/articles/microsoft-tunnel-gateway-setup-troubleshooting.html" }, { "error": "MDM ConfigurationManager: Command failure status.", "where": "DeviceManagement-Enterprise-Diagnostics-Provider", "group": "Policies & compliance", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html" }, { "error": "No compliance policies have been assigned", "where": "Company Portal", "group": "Policies & compliance", "guide": "Noncompliant on the Default Device Compliance Policy? The three built-in checks explained", "url": "https://www.oeltayeb.com/articles/default-device-compliance-policy-noncompliant.html" }, { "error": "Object reference not set to an instance of an object", "where": "Intune admin center (Import ADMX)", "group": "Policies & compliance", "guide": "Importing custom ADMX templates into Intune: upload errors, dependencies and fixes", "url": "https://www.oeltayeb.com/articles/intune-import-custom-admx-templates-errors.html" }, { "error": "System.Text.Json.JsonException: The JSON value could not be converted to System.DateTime", "where": "journalctl -t mstunnel-agent", "group": "Policies & compliance", "guide": "Microsoft Tunnel for Intune: installation, mst-cli, health checks and connection errors", "url": "https://www.oeltayeb.com/articles/microsoft-tunnel-gateway-setup-troubleshooting.html" }, { "error": "The file name isn't allowed in OneDrive", "where": "OneDrive (Known Folder Move dialog)", "group": "Policies & compliance", "guide": "OneDrive Known Folder Move with Intune: silent sign-in, silent move and stuck folders", "url": "https://www.oeltayeb.com/articles/onedrive-known-folder-move-intune-deployment-troubleshooting.html" }, { "error": "The folder isn't selected for syncing", "where": "OneDrive (Known Folder Move dialog)", "group": "Policies & compliance", "guide": "OneDrive Known Folder Move with Intune: silent sign-in, silent move and stuck folders", "url": "https://www.oeltayeb.com/articles/onedrive-known-folder-move-intune-deployment-troubleshooting.html" }, { "error": "TLS certificate revocation: Warning", "where": "Intune admin center (Tunnel health check)", "group": "Policies & compliance", "guide": "Microsoft Tunnel for Intune: installation, mst-cli, health checks and connection errors", "url": "https://www.oeltayeb.com/articles/microsoft-tunnel-gateway-setup-troubleshooting.html" }, { "error": "0x801C000E Registration quota reached.", "where": "Windows Hello PIN setup", "group": "Security", "guide": "Windows Hello for Business provisioning errors in Intune: 0x801C03ED, Event 360 and more", "url": "https://www.oeltayeb.com/articles/windows-hello-for-business-provisioning-errors-intune.html", "also": [ "-2145648626", "2149318670" ] }, { "error": "0x801C03ED Multi-factor authentication is required for a 'ProvisionKey' operation, but wasn't performed.", "where": "Windows Hello PIN setup", "group": "Security", "guide": "Windows Hello for Business provisioning errors in Intune: 0x801C03ED, Event 360 and more", "url": "https://www.oeltayeb.com/articles/windows-hello-for-business-provisioning-errors-intune.html", "also": [ "-2145647635", "2149319661" ] }, { "error": "0x801C03F2 Windows Hello key registration failed.", "where": "Windows Hello PIN setup", "group": "Security", "guide": "Windows Hello for Business provisioning errors in Intune: 0x801C03ED, Event 360 and more", "url": "https://www.oeltayeb.com/articles/windows-hello-for-business-provisioning-errors-intune.html", "also": [ "-2145647630", "2149319666" ] }, { "error": "0x801C044D Authorization token doesn't contain device ID.", "where": "Windows Hello PIN setup", "group": "Security", "guide": "Windows Hello for Business provisioning errors in Intune: 0x801C03ED, Event 360 and more", "url": "https://www.oeltayeb.com/articles/windows-hello-for-business-provisioning-errors-intune.html", "also": [ "-2145647539", "2149319757" ] }, { "error": "0x80090029 TPM isn't set up.", "where": "Windows Hello PIN setup", "group": "Security", "guide": "Windows Hello for Business provisioning errors in Intune: 0x801C03ED, Event 360 and more", "url": "https://www.oeltayeb.com/articles/windows-hello-for-business-provisioning-errors-intune.html", "also": [ "-2146893783", "2148073513" ] }, { "error": "0x80090035 Policy requires TPM and the device doesn't have TPM.", "where": "Windows Hello PIN setup", "group": "Security", "guide": "Windows Hello for Business provisioning errors in Intune: 0x801C03ED, Event 360 and more", "url": "https://www.oeltayeb.com/articles/windows-hello-for-business-provisioning-errors-intune.html", "also": [ "-2146893771", "2148073525" ] }, { "error": "0xC00000BB Your PIN or this option is temporarily unavailable.", "where": "Windows sign-in with PIN", "group": "Security", "guide": "Windows Hello for Business provisioning errors in Intune: 0x801C03ED, Event 360 and more", "url": "https://www.oeltayeb.com/articles/windows-hello-for-business-provisioning-errors-intune.html", "also": [ "-1073741637", "3221225659" ] }, { "error": "65000", "where": "Intune admin center (Secure Boot profile)", "group": "Security", "guide": "Rolling out the 2023 Secure Boot certificates with Intune before the last 2011 CA expires", "url": "https://www.oeltayeb.com/articles/secure-boot-certificate-expiration-intune-rollout.html" }, { "error": "65000", "where": "Intune admin center (Secure Boot profile)", "group": "Security", "guide": "Secure Boot certificate update not applying: registry values, event IDs and the Intune report", "url": "https://www.oeltayeb.com/articles/secure-boot-certificate-update-not-applying-troubleshooting.html" }, { "error": "DeviceDiagnosticDataNotReceived", "where": "Intune admin center (Secure Boot status report)", "group": "Security", "guide": "Secure Boot certificate update not applying: registry values, event IDs and the Intune report", "url": "https://www.oeltayeb.com/articles/secure-boot-certificate-update-not-applying-troubleshooting.html" }, { "error": "Error: Unknown HResult Error code: 0x80072f8f", "where": "Event Viewer (BitLocker-API, event 846)", "group": "Security", "guide": "BitLocker recovery key not in Microsoft Entra ID (event 846): escrow failures and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-recovery-key-not-escrowed-entra-intune.html", "also": [ "-2147012721", "2147954575" ] }, { "error": "Error: Unknown HResult Error code: 0x80072f9a", "where": "Event Viewer (BitLocker-API, events 846, 851)", "group": "Security", "guide": "BitLocker recovery key not in Microsoft Entra ID (event 846): escrow failures and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-recovery-key-not-escrowed-entra-intune.html", "also": [ "-2147012710", "2147954586" ] }, { "error": "Event ID 40 (SENSE)", "where": "Event Viewer (SENSE Operational)", "group": "Security", "guide": "Windows 11 24H2 won't onboard to Defender for Endpoint: the missing Sense client (KB5043950)", "url": "https://www.oeltayeb.com/articles/windows-11-24h2-defender-for-endpoint-sense-client-missing-intune.html" }, { "error": "Event ID 778 (BitLocker-API)", "where": "Event Viewer (BitLocker-API Management)", "group": "Security", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "Event ID 846 (BitLocker-API)", "where": "Event Viewer (BitLocker-API Management)", "group": "Security", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "Event ID 851 (BitLocker-API)", "where": "Event Viewer (BitLocker-API Management)", "group": "Security", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "Event ID 853 (BitLocker-API)", "where": "Event Viewer (BitLocker-API Management)", "group": "Security", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "Event ID 854 (BitLocker-API)", "where": "Event Viewer (BitLocker-API Management)", "group": "Security", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "Event ID 1032", "where": "Event Viewer (System log)", "group": "Security", "guide": "Rolling out the 2023 Secure Boot certificates with Intune before the last 2011 CA expires", "url": "https://www.oeltayeb.com/articles/secure-boot-certificate-expiration-intune-rollout.html" }, { "error": "Event ID 1801 (TPM-WMI)", "where": "Event Viewer (System log)", "group": "Security", "guide": "Rolling out the 2023 Secure Boot certificates with Intune before the last 2011 CA expires", "url": "https://www.oeltayeb.com/articles/secure-boot-certificate-expiration-intune-rollout.html" }, { "error": "Event ID 1802", "where": "Event Viewer (System log)", "group": "Security", "guide": "Rolling out the 2023 Secure Boot certificates with Intune before the last 2011 CA expires", "url": "https://www.oeltayeb.com/articles/secure-boot-certificate-expiration-intune-rollout.html" }, { "error": "Event ID 10005 (LAPS)", "where": "Event Viewer (LAPS Operational)", "group": "Security", "guide": "Deploying Windows LAPS with Intune and backing up passwords to Microsoft Entra ID", "url": "https://www.oeltayeb.com/articles/windows-laps-intune-entra-backup.html" }, { "error": "Event ID 10013 (LAPS)", "where": "Event Viewer (LAPS Operational)", "group": "Security", "guide": "Deploying Windows LAPS with Intune and backing up passwords to Microsoft Entra ID", "url": "https://www.oeltayeb.com/articles/windows-laps-intune-entra-backup.html" }, { "error": "Event ID 10025 (LAPS)", "where": "Event Viewer (LAPS Operational)", "group": "Security", "guide": "Deploying Windows LAPS with Intune and backing up passwords to Microsoft Entra ID", "url": "https://www.oeltayeb.com/articles/windows-laps-intune-entra-backup.html" }, { "error": "Event ID 10028 (LAPS)", "where": "Event Viewer (LAPS Operational)", "group": "Security", "guide": "Deploying Windows LAPS with Intune and backing up passwords to Microsoft Entra ID", "url": "https://www.oeltayeb.com/articles/windows-laps-intune-entra-backup.html" }, { "error": "Event ID 10032 (LAPS)", "where": "Event Viewer (LAPS Operational)", "group": "Security", "guide": "Deploying Windows LAPS with Intune and backing up passwords to Microsoft Entra ID", "url": "https://www.oeltayeb.com/articles/windows-laps-intune-entra-backup.html" }, { "error": "Event ID 10059 (LAPS)", "where": "Event Viewer (LAPS Operational)", "group": "Security", "guide": "Deploying Windows LAPS with Intune and backing up passwords to Microsoft Entra ID", "url": "https://www.oeltayeb.com/articles/windows-laps-intune-entra-backup.html" }, { "error": "Failed to backup BitLocker Drive Encryption recovery information for volume C: to your Azure AD.", "where": "Event Viewer (BitLocker-API, event 846)", "group": "Security", "guide": "BitLocker recovery key not in Microsoft Entra ID (event 846): escrow failures and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-recovery-key-not-escrowed-entra-intune.html" }, { "error": "Failed to backup BitLocker Drive Encryption recovery information for volume C: to your Microsoft Entra ID.", "where": "Event Viewer (BitLocker-API, event 846)", "group": "Security", "guide": "BitLocker recovery key not in Microsoft Entra ID (event 846): escrow failures and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-recovery-key-not-escrowed-entra-intune.html" }, { "error": "No BitLocker key found for this device", "where": "Intune admin center (Recovery keys)", "group": "Security", "guide": "BitLocker recovery key not in Microsoft Entra ID (event 846): escrow failures and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-recovery-key-not-escrowed-entra-intune.html" }, { "error": "The BitLocker volume C: was reverted to an unprotected state.", "where": "Event Viewer (BitLocker-API, event 778)", "group": "Security", "guide": "BitLocker recovery key not in Microsoft Entra ID (event 846): escrow failures and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-recovery-key-not-escrowed-entra-intune.html" }, { "error": "the trust relationship between this workstation and the primary domain failed", "where": "Windows sign-in screen", "group": "Security", "guide": "Domain trust failures after KB5124008: Machine Identity Isolation explained for Intune admins", "url": "https://www.oeltayeb.com/articles/machine-identity-isolation-domain-trust-sign-in-failures-september-2026.html" }, { "error": "UEFI variable 'SecureBoot' could not be read", "where": "Event Viewer (BitLocker-API Management)", "group": "Security", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "Windows Hello for Business provisioning will not be launched.", "where": "Event ID 360 (User Device Registration/Admin)", "group": "Security", "guide": "Windows Hello for Business provisioning errors in Intune: 0x801C03ED, Event 360 and more", "url": "https://www.oeltayeb.com/articles/windows-hello-for-business-provisioning-errors-intune.html" }, { "error": "Canceled: Not Supported", "where": "Intune (Windows Feature Update Report)", "group": "Updates", "guide": "Windows 11 feature update not offered by Intune? A troubleshooting checklist", "url": "https://www.oeltayeb.com/articles/windows-11-feature-update-not-offered-intune.html" }, { "error": "Code 10", "where": "Device Manager (USB Audio Class 1.0 device)", "group": "Updates", "guide": "Rolling out Windows 11 26H2 with Intune: feature update policy, known issues, safeguard holds", "url": "https://www.oeltayeb.com/articles/windows-11-26h2-rollout-with-intune-feature-update-policy.html" }, { "error": "0x87D13B7D", "where": "Intune admin center (Managed Apps)", "group": "Apple", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016330883", "2278636413" ] }, { "error": "0x87D13B7E", "where": "Intune admin center (Managed Apps)", "group": "Apple", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016330882", "2278636414" ] }, { "error": "0x87D13B94", "where": "Intune admin center (Managed Apps)", "group": "Apple", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016330860", "2278636436" ] }, { "error": "0x87D13B95", "where": "Intune admin center (Managed Apps)", "group": "Apple", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016330859", "2278636437" ] }, { "error": "0x87D13B99", "where": "Intune admin center (Managed Apps)", "group": "Apple", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016330855", "2278636441" ] }, { "error": "0x87D13BA9", "where": "Intune admin center (Managed Apps)", "group": "Apple", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016330839", "2278636457" ] }, { "error": "0x87D1313D", "where": "Intune admin center (Managed Apps)", "group": "Apple", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016333507", "2278633789" ] }, { "error": "0x87D3012F The app couldn't be installed due to an internal error.", "where": "Intune admin center (app install status)", "group": "Apple", "guide": "macOS PKG and DMG apps failing in Intune: 0x87D30137, 0x87D3013E and agent log fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-pkg-dmg-app-deployment-errors.html", "also": [ "-2016214737", "2278752559" ] }, { "error": "0x87D3013B The app couldn't be installed to the Applications directory.", "where": "Intune admin center (app install status)", "group": "Apple", "guide": "macOS PKG and DMG apps failing in Intune: 0x87D30137, 0x87D3013E and agent log fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-pkg-dmg-app-deployment-errors.html", "also": [ "-2016214725", "2278752571" ] }, { "error": "0x87D3013E The DMG file doesn't contain any supported app.", "where": "Intune admin center (app install status)", "group": "Apple", "guide": "macOS PKG and DMG apps failing in Intune: 0x87D30137, 0x87D3013E and agent log fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-pkg-dmg-app-deployment-errors.html", "also": [ "-2016214722", "2278752574" ] }, { "error": "0x87D11388", "where": "Intune admin center (Managed Apps)", "group": "Apple", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016341112", "2278626184" ] }, { "error": "0x87D30131 The app couldn't be downloaded.", "where": "Intune admin center (app install status)", "group": "Apple", "guide": "macOS PKG and DMG apps failing in Intune: 0x87D30137, 0x87D3013E and agent log fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-pkg-dmg-app-deployment-errors.html", "also": [ "-2016214735", "2278752561" ] }, { "error": "0x87D30135 The app couldn't be installed due to a device error.", "where": "Intune admin center (app install status)", "group": "Apple", "guide": "macOS PKG and DMG apps failing in Intune: 0x87D30137, 0x87D3013E and agent log fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-pkg-dmg-app-deployment-errors.html", "also": [ "-2016214731", "2278752565" ] }, { "error": "0x87D30137 The device doesn't meet the minimum OS requirement set by the admin.", "where": "Intune admin center (app install status)", "group": "Apple", "guide": "macOS PKG and DMG apps failing in Intune: 0x87D30137, 0x87D3013E and agent log fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-pkg-dmg-app-deployment-errors.html", "also": [ "-2016214729", "2278752567" ] }, { "error": "0x87D30139 The DMG file couldn't be mounted for installation.", "where": "Intune admin center (app install status)", "group": "Apple", "guide": "macOS PKG and DMG apps failing in Intune: 0x87D30137, 0x87D3013E and agent log fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-pkg-dmg-app-deployment-errors.html", "also": [ "-2016214727", "2278752569" ] }, { "error": "2016214710 The preinstall script provided by the admin failed.", "where": "Intune admin center (app install status)", "group": "Apple", "guide": "macOS PKG and DMG apps failing in Intune: 0x87D30137, 0x87D3013E and agent log fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-pkg-dmg-app-deployment-errors.html" }, { "error": "2016214828 The number of log files exceeded the allowed limit of 25 files.", "where": "Collect logs (macOS script)", "group": "Apple", "guide": "macOS shell scripts and custom attributes not running in Intune: agent logs and fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-shell-scripts-custom-attributes-not-running.html" }, { "error": "2016214831 The provided log file path must exist.", "where": "Collect logs (macOS script)", "group": "Apple", "guide": "macOS shell scripts and custom attributes not running in Intune: agent logs and fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-shell-scripts-custom-attributes-not-running.html" }, { "error": "2016214834 Log file size cannot exceed 60 MB.", "where": "Collect logs (macOS script)", "group": "Apple", "guide": "macOS shell scripts and custom attributes not running in Intune: agent logs and fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-shell-scripts-custom-attributes-not-running.html" }, { "error": "-2016341107 / 0x87d1138d", "where": "Intune admin center (FileVault policy status)", "group": "Apple", "guide": "FileVault in Intune: enabling encryption, escrowing recovery keys and fixing 0x87D1138D", "url": "https://www.oeltayeb.com/articles/intune-macos-filevault-recovery-key-escrow.html", "also": [ "2278626189" ] }, { "error": "Access denied", "where": "Intune admin center (Enrollment program tokens)", "group": "Apple", "guide": "Apple ADE devices missing in Intune or stuck without an enrollment policy", "url": "https://www.oeltayeb.com/articles/apple-ade-devices-not-syncing-intune.html" }, { "error": "Awaiting final configuration", "where": "Setup Assistant (iOS/iPadOS)", "group": "Apple", "guide": "Apple ADE devices missing in Intune or stuck without an enrollment policy", "url": "https://www.oeltayeb.com/articles/apple-ade-devices-not-syncing-intune.html" }, { "error": "bad interpreter", "where": "Terminal (manual test run)", "group": "Apple", "guide": "macOS shell scripts and custom attributes not running in Intune: agent logs and fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-shell-scripts-custom-attributes-not-running.html" }, { "error": "command not found", "where": "Terminal (manual test run)", "group": "Apple", "guide": "macOS shell scripts and custom attributes not running in Intune: agent logs and fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-shell-scripts-custom-attributes-not-running.html" }, { "error": "Error 10001", "where": "Intune admin center (Platform SSO policy)", "group": "Apple", "guide": "Platform SSO for macOS with Intune: setup, registration and troubleshooting", "url": "https://www.oeltayeb.com/articles/intune-macos-platform-sso-setup-troubleshooting.html" }, { "error": "Error 10002", "where": "Intune admin center (Platform SSO policy)", "group": "Apple", "guide": "Platform SSO for macOS with Intune: setup, registration and troubleshooting", "url": "https://www.oeltayeb.com/articles/intune-macos-platform-sso-setup-troubleshooting.html" }, { "error": "Expired or invalid token", "where": "Intune admin center (Enrollment program tokens)", "group": "Apple", "guide": "Apple ADE devices missing in Intune or stuck without an enrollment policy", "url": "https://www.oeltayeb.com/articles/apple-ade-devices-not-syncing-intune.html" }, { "error": "FileVault needs the user to approve their management profile in macOS Catalina and higher.", "where": "Intune encryption report (Status details)", "group": "Apple", "guide": "FileVault in Intune: enabling encryption, escrowing recovery keys and fixing 0x87D1138D", "url": "https://www.oeltayeb.com/articles/intune-macos-filevault-recovery-key-escrow.html" }, { "error": "IT393575", "where": "Microsoft 365 admin center (Service health)", "group": "Apple", "guide": "Macs unexpectedly unenrolled from Intune: the MDM certificate renewal issue and how to recover", "url": "https://www.oeltayeb.com/articles/macos-devices-unenrolled-mdm-certificate-renewal-intune.html" }, { "error": "No new software available.", "where": "Terminal (softwareupdate --list)", "group": "Apple", "guide": "macOS and iOS updates not installing in Intune: DDM settings, deadlines and fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-ddm-software-updates-not-installing.html" }, { "error": "Operation not permitted", "where": "Terminal (manual test run)", "group": "Apple", "guide": "macOS shell scripts and custom attributes not running in Intune: agent logs and fixes", "url": "https://www.oeltayeb.com/articles/intune-macos-shell-scripts-custom-attributes-not-running.html" }, { "error": "Terms and conditions not accepted", "where": "Intune admin center (Enrollment program tokens)", "group": "Apple", "guide": "Apple ADE devices missing in Intune or stuck without an enrollment policy", "url": "https://www.oeltayeb.com/articles/apple-ade-devices-not-syncing-intune.html" }, { "error": "The device is already encrypted. Device user must decrypt the device to continue.", "where": "Intune encryption report (Status details)", "group": "Apple", "guide": "FileVault in Intune: enabling encryption, escrowing recovery keys and fixing 0x87D1138D", "url": "https://www.oeltayeb.com/articles/intune-macos-filevault-recovery-key-escrow.html" }, { "error": "The recovery key hasn't been retrieved and stored yet. Most likely, the device hasn't been unlocked, or it hasn't checked in.", "where": "Intune encryption report (Status details)", "group": "Apple", "guide": "FileVault in Intune: enabling encryption, escrowing recovery keys and fixing 0x87D1138D", "url": "https://www.oeltayeb.com/articles/intune-macos-filevault-recovery-key-escrow.html" }, { "error": "The user is deferring encryption or is currently in the process of encryption.", "where": "Intune encryption report (Status details)", "group": "Apple", "guide": "FileVault in Intune: enabling encryption, escrowing recovery keys and fixing 0x87D1138D", "url": "https://www.oeltayeb.com/articles/intune-macos-filevault-recovery-key-escrow.html" }, { "error": "Your Apple ID does not support the expected services on this device", "where": "Device (iOS/iPadOS)", "group": "Apple", "guide": "Account-driven User Enrollment for iOS/iPadOS BYOD with Intune: setup and user flow", "url": "https://www.oeltayeb.com/articles/intune-ios-account-driven-user-enrollment-byod.html" }, { "error": "AADSTS53000 (DeviceNotCompliant)", "where": "Microsoft Entra sign-in log", "group": "Android & Linux", "guide": "Android fully managed and COPE enrollment errors in Intune: tokens, QR codes and sign-in", "url": "https://www.oeltayeb.com/articles/android-fully-managed-cope-enrollment-errors-intune.html" }, { "error": "AADSTS53000: Device is not in required device state: compliant", "where": "Microsoft Edge / Microsoft Entra sign-in log", "group": "Android & Linux", "guide": "Linux devices in Intune (Ubuntu, RHEL): enrollment, compliance and common errors", "url": "https://www.oeltayeb.com/articles/intune-linux-ubuntu-rhel-enrollment-compliance-errors.html" }, { "error": "Company Portal Temporarily Unavailable", "where": "Company Portal (Android)", "group": "Android & Linux", "guide": "Android Enterprise work profile enrollment failures: what to check", "url": "https://www.oeltayeb.com/articles/android-work-profile-enrollment-failures.html" }, { "error": "Contact your IT admin. This phone will be erased.", "where": "Device (Android kiosk)", "group": "Android & Linux", "guide": "Android Enterprise dedicated devices: Managed Home Screen kiosks and shared device sign-in", "url": "https://www.oeltayeb.com/articles/android-enterprise-dedicated-devices-managed-home-screen.html" }, { "error": "Couldn't set up your device. For help, contact your IT admin.", "where": "Android setup screen", "group": "Android & Linux", "guide": "Android fully managed and COPE enrollment errors in Intune: tokens, QR codes and sign-in", "url": "https://www.oeltayeb.com/articles/android-fully-managed-cope-enrollment-errors-intune.html" }, { "error": "DeviceCapReached", "where": "Company Portal (Android)", "group": "Android & Linux", "guide": "Android Enterprise work profile enrollment failures: what to check", "url": "https://www.oeltayeb.com/articles/android-work-profile-enrollment-failures.html" }, { "error": "Something went wrong", "where": "Microsoft Intune app (device registration)", "group": "Android & Linux", "guide": "Android fully managed and COPE enrollment errors in Intune: tokens, QR codes and sign-in", "url": "https://www.oeltayeb.com/articles/android-fully-managed-cope-enrollment-errors-intune.html" }, { "error": "Unable to derive key material as unable to find the derivation key for alias", "where": "journalctl (microsoft-identity-device-broker)", "group": "Android & Linux", "guide": "Linux devices in Intune (Ubuntu, RHEL): enrollment, compliance and common errors", "url": "https://www.oeltayeb.com/articles/intune-linux-ubuntu-rhel-enrollment-compliance-errors.html" }, { "error": "1000 com.apple.AuthenticationServices.AuthorizationError", "where": "Mac sign-in (SSO extension)", "group": "Jamf", "guide": "Platform SSO and the Microsoft Enterprise SSO plug-in on Jamf Pro-managed Macs", "url": "https://www.oeltayeb.com/articles/jamf-pro-platform-sso-enterprise-sso-plugin.html" }, { "error": "1001 Unexpected", "where": "Mac sign-in (SSO extension)", "group": "Jamf", "guide": "Platform SSO and the Microsoft Enterprise SSO plug-in on Jamf Pro-managed Macs", "url": "https://www.oeltayeb.com/articles/jamf-pro-platform-sso-enterprise-sso-plugin.html" }, { "error": "1012 NSURLErrorDomain error", "where": "Mac sign-in (SSO extension)", "group": "Jamf", "guide": "Platform SSO and the Microsoft Enterprise SSO plug-in on Jamf Pro-managed Macs", "url": "https://www.oeltayeb.com/articles/jamf-pro-platform-sso-enterprise-sso-plugin.html" }, { "error": "[activated waiting for user]", "where": "Terminal (systemextensionsctl list)", "group": "Jamf", "guide": "Deploy Microsoft Defender for Endpoint on Macs with Jamf Pro (and fix mdatp health errors)", "url": "https://www.oeltayeb.com/articles/jamf-pro-deploy-defender-for-endpoint-macos.html" }, { "error": "AADSTS50011 InvalidReplyTo", "where": "Jamf Connect login window", "group": "Jamf", "guide": "Jamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-connect-microsoft-entra-id-setup-aadsts-errors.html" }, { "error": "AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application", "where": "Microsoft Entra sign-in page", "group": "Jamf", "guide": "Jamf Pro SSO with Microsoft Entra ID (SAML): setup, failover login and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-entra-id-sso-saml-admin-self-service.html" }, { "error": "AADSTS50020: User account '...' from identity provider '...' does not exist in tenant '...' and cannot access the application", "where": "Microsoft Entra sign-in page", "group": "Jamf", "guide": "Jamf Pro SSO with Microsoft Entra ID (SAML): setup, failover login and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-entra-id-sso-saml-admin-self-service.html" }, { "error": "AADSTS50076 UserStrongAuthClientAuthNRequired", "where": "Microsoft Entra sign-in log (Interrupted)", "group": "Jamf", "guide": "Jamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-connect-microsoft-entra-id-setup-aadsts-errors.html" }, { "error": "AADSTS50105 EntitlementGrantsNotFound", "where": "Jamf Connect login window", "group": "Jamf", "guide": "Jamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-connect-microsoft-entra-id-setup-aadsts-errors.html" }, { "error": "AADSTS50105: The signed in user is not assigned to a role for the application", "where": "Microsoft Entra sign-in page / sign-in log", "group": "Jamf", "guide": "Jamf Pro SSO with Microsoft Entra ID (SAML): setup, failover login and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-entra-id-sso-saml-admin-self-service.html" }, { "error": "AADSTS50126 InvalidUserNameOrPassword", "where": "Jamf Connect / Microsoft Entra sign-in log", "group": "Jamf", "guide": "Jamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-connect-microsoft-entra-id-setup-aadsts-errors.html" }, { "error": "AADSTS53000 DeviceNotCompliant", "where": "Jamf Connect login window", "group": "Jamf", "guide": "Jamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-connect-microsoft-entra-id-setup-aadsts-errors.html" }, { "error": "AADSTS53000: Device is not in required device state: compliant.", "where": "Browser / Microsoft 365 app sign-in", "group": "Jamf", "guide": "AADSTS53000 on a Jamf-managed Mac: compliant in Jamf Pro, blocked by Conditional Access", "url": "https://www.oeltayeb.com/articles/jamf-pro-conditional-access-noncompliant-mac-blocked-53000.html" }, { "error": "AADSTS53000: Device is not in required device state: compliant.", "where": "Safari on a Jamf-managed iPhone", "group": "Jamf", "guide": "Jamf Pro iPhone and iPad with Intune: device compliance and app protection (IntuneMAMUPN)", "url": "https://www.oeltayeb.com/articles/jamf-pro-ios-device-compliance-intune-app-protection.html" }, { "error": "AADSTS53001 (DeviceNotDomainJoined)", "where": "Microsoft Entra sign-in log", "group": "Jamf", "guide": "AADSTS53000 on a Jamf-managed Mac: compliant in Jamf Pro, blocked by Conditional Access", "url": "https://www.oeltayeb.com/articles/jamf-pro-conditional-access-noncompliant-mac-blocked-53000.html" }, { "error": "AADSTS53003 BlockedByConditionalAccess", "where": "Jamf Connect login window", "group": "Jamf", "guide": "Jamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-connect-microsoft-entra-id-setup-aadsts-errors.html" }, { "error": "AADSTS53003: Access has been blocked by Conditional Access policies", "where": "Microsoft Entra sign-in log", "group": "Jamf", "guide": "Jamf Pro SSO with Microsoft Entra ID (SAML): setup, failover login and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-entra-id-sso-saml-admin-self-service.html" }, { "error": "AADSTS65001 DelegationDoesNotExist", "where": "Jamf Connect login window", "group": "Jamf", "guide": "Jamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-connect-microsoft-entra-id-setup-aadsts-errors.html" }, { "error": "AADSTS65004 UserDeclinedConsent", "where": "Microsoft consent page", "group": "Jamf", "guide": "Jamf Pro with Entra ID as cloud identity provider: setup, group lookups and Graph errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-entra-id-cloud-identity-provider-setup-errors.html" }, { "error": "AADSTS700016: Application with identifier '...' was not found in the directory '...'", "where": "Microsoft Entra sign-in page", "group": "Jamf", "guide": "Jamf Pro SSO with Microsoft Entra ID (SAML): setup, failover login and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-entra-id-sso-saml-admin-self-service.html" }, { "error": "AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'.", "where": "Entra sign-in log / ROPG test", "group": "Jamf", "guide": "Jamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-connect-microsoft-entra-id-setup-aadsts-errors.html" }, { "error": "Access denied", "where": "Intune ADE token sync", "group": "Jamf", "guide": "Migrating Macs and iPhones from Jamf Pro to Intune: ADE reassignment and a cut-over plan", "url": "https://www.oeltayeb.com/articles/migrate-macs-iphones-from-jamf-pro-to-intune.html" }, { "error": "Account not onboarded", "where": "Company Portal", "group": "Jamf", "guide": "Mac registration fails from Jamf Self Service: Company Portal, jamfAAD and Entra ID errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-device-registration-company-portal-jamfaad-errors.html" }, { "error": "AccountNotOnboarded", "where": "Company Portal", "group": "Jamf", "guide": "Set up Jamf Pro Device Compliance with Microsoft Entra ID and Intune, step by step", "url": "https://www.oeltayeb.com/articles/jamf-pro-device-compliance-entra-id-setup.html" }, { "error": "AccountNotOnboarded", "where": "Company Portal", "group": "Jamf", "guide": "Mac registration fails from Jamf Self Service: Company Portal, jamfAAD and Entra ID errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-device-registration-company-portal-jamfaad-errors.html" }, { "error": "AccountNotOnboarded", "where": "Company Portal (macOS)", "group": "Jamf", "guide": "Jamf Device Compliance connector in Intune: partner status, permissions and sync errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-intune-partner-connector-status-errors.html" }, { "error": "Authorization_RequestDenied. Insufficient privileges to complete the operation.", "where": "Microsoft Graph (HTTP 403 response)", "group": "Jamf", "guide": "Jamf Pro with Entra ID as cloud identity provider: setup, group lookups and Graph errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-entra-id-cloud-identity-provider-setup-errors.html" }, { "error": "Compliant: N/A", "where": "Microsoft Entra admin center (Devices)", "group": "Jamf", "guide": "Jamf Device Compliance connector in Intune: partner status, permissions and sync errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-intune-partner-connector-status-errors.html" }, { "error": "Conditional Access Inventory State: Unresponsive", "where": "Jamf Pro (legacy integration)", "group": "Jamf", "guide": "Jamf Device Compliance connector in Intune: partner status, permissions and sync errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-intune-partner-connector-status-errors.html" }, { "error": "Device Compliance Integration - Registration Status: Not Registered", "where": "Jamf Pro (smart group criterion)", "group": "Jamf", "guide": "Jamf Device Compliance connector in Intune: partner status, permissions and sync errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-intune-partner-connector-status-errors.html" }, { "error": "Device is already enrolled", "where": "Company Portal", "group": "Jamf", "guide": "Mac registration fails from Jamf Self Service: Company Portal, jamfAAD and Entra ID errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-device-registration-company-portal-jamfaad-errors.html" }, { "error": "Device is not in required device state: {state}. Conditional Access policy requires a compliant device, and the device is not compliant.", "where": "Microsoft Entra sign-in log", "group": "Jamf", "guide": "AADSTS53000 on a Jamf-managed Mac: compliant in Jamf Pro, blocked by Conditional Access", "url": "https://www.oeltayeb.com/articles/jamf-pro-conditional-access-noncompliant-mac-blocked-53000.html" }, { "error": "Error Domain=PlugInKit Code=16 \"other version in use: ...\"", "where": "sysdiagnose (unified log)", "group": "Jamf", "guide": "Platform SSO and the Microsoft Enterprise SSO plug-in on Jamf Pro-managed Macs", "url": "https://www.oeltayeb.com/articles/jamf-pro-platform-sso-enterprise-sso-plugin.html" }, { "error": "Expired or invalid token", "where": "Intune ADE token sync", "group": "Jamf", "guide": "Migrating Macs and iPhones from Jamf Pro to Intune: ADE reassignment and a cut-over plan", "url": "https://www.oeltayeb.com/articles/migrate-macs-iphones-from-jamf-pro-to-intune.html" }, { "error": "full disk access has not been granted", "where": "Terminal (mdatp health)", "group": "Jamf", "guide": "Deploy Microsoft Defender for Endpoint on Macs with Jamf Pro (and fix mdatp health errors)", "url": "https://www.oeltayeb.com/articles/jamf-pro-deploy-defender-for-endpoint-macos.html" }, { "error": "JamfAAD wants to access key \"Microsoft Workplace Join Key\" in your keychain", "where": "macOS keychain prompt", "group": "Jamf", "guide": "Mac registration fails from Jamf Self Service: Company Portal, jamfAAD and Entra ID errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-device-registration-company-portal-jamfaad-errors.html" }, { "error": "Microsoft Defender needs attention", "where": "Defender app (macOS)", "group": "Jamf", "guide": "Deploy Microsoft Defender for Endpoint on Macs with Jamf Pro (and fix mdatp health errors)", "url": "https://www.oeltayeb.com/articles/jamf-pro-deploy-defender-for-endpoint-macos.html" }, { "error": "Microsoft Teams wants to sign using key \"Microsoft Workplace Join Key\" in your keychain", "where": "macOS keychain prompt", "group": "Jamf", "guide": "Mac registration fails from Jamf Self Service: Company Portal, jamfAAD and Entra ID errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-device-registration-company-portal-jamfaad-errors.html" }, { "error": "Microsoft Teams wants to sign using key \"Microsoft Workplace Join Key\" in your keychain.", "where": "macOS keychain prompt", "group": "Jamf", "guide": "AADSTS53000 on a Jamf-managed Mac: compliant in Jamf Pro, blocked by Conditional Access", "url": "https://www.oeltayeb.com/articles/jamf-pro-conditional-access-noncompliant-mac-blocked-53000.html" }, { "error": "Need admin approval", "where": "Microsoft consent page", "group": "Jamf", "guide": "Jamf Pro with Entra ID as cloud identity provider: setup, group lookups and Graph errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-entra-id-cloud-identity-provider-setup-errors.html" }, { "error": "network event provider not running", "where": "Terminal (mdatp health)", "group": "Jamf", "guide": "Deploy Microsoft Defender for Endpoint on Macs with Jamf Pro (and fix mdatp health errors)", "url": "https://www.oeltayeb.com/articles/jamf-pro-deploy-defender-for-endpoint-macos.html" }, { "error": "no active event provider", "where": "Terminal (mdatp health)", "group": "Jamf", "guide": "Deploy Microsoft Defender for Endpoint on Macs with Jamf Pro (and fix mdatp health errors)", "url": "https://www.oeltayeb.com/articles/jamf-pro-deploy-defender-for-endpoint-macos.html" }, { "error": "No license found", "where": "Defender menu bar / mdatp health", "group": "Jamf", "guide": "Deploy Microsoft Defender for Endpoint on Macs with Jamf Pro (and fix mdatp health errors)", "url": "https://www.oeltayeb.com/articles/jamf-pro-deploy-defender-for-endpoint-macos.html" }, { "error": "no WPJ key found", "where": "Jamf Pro policy log (migration script)", "group": "Jamf", "guide": "Migrating from the legacy Jamf macOS Intune integration to Jamf Pro Device Compliance", "url": "https://www.oeltayeb.com/articles/jamf-pro-macos-intune-integration-migration-device-compliance.html" }, { "error": "NoEnrollmentPolicy (No enrollment policy found)", "where": "iOS/iPadOS enrollment", "group": "Jamf", "guide": "Migrating Macs and iPhones from Jamf Pro to Intune: ADE reassignment and a cut-over plan", "url": "https://www.oeltayeb.com/articles/migrate-macs-iphones-from-jamf-pro-to-intune.html" }, { "error": "Partner device management status: Terminated", "where": "Intune admin center (legacy connector)", "group": "Jamf", "guide": "Jamf Device Compliance connector in Intune: partner status, permissions and sync errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-intune-partner-connector-status-errors.html" }, { "error": "Portal launched without WPJ only arg while account is under partner management", "where": "Company Portal log", "group": "Jamf", "guide": "Mac registration fails from Jamf Self Service: Company Portal, jamfAAD and Entra ID errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-device-registration-company-portal-jamfaad-errors.html" }, { "error": "Profile Installation Failed. Connection to the server could not be established.", "where": "iPhone/iPad enrollment", "group": "Jamf", "guide": "Migrating Macs and iPhones from Jamf Pro to Intune: ADE reassignment and a cut-over plan", "url": "https://www.oeltayeb.com/articles/migrate-macs-iphones-from-jamf-pro-to-intune.html" }, { "error": "Profile Installation Failed. The new MDM payload does not match the old payload.", "where": "iPhone/iPad enrollment", "group": "Jamf", "guide": "Migrating Macs and iPhones from Jamf Pro to Intune: ADE reassignment and a cut-over plan", "url": "https://www.oeltayeb.com/articles/migrate-macs-iphones-from-jamf-pro-to-intune.html" }, { "error": "Registration-only command line flag (-r) can only be used when partner management is enabled in Intune", "where": "Company Portal", "group": "Jamf", "guide": "Mac registration fails from Jamf Self Service: Company Portal, jamfAAD and Entra ID errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-device-registration-company-portal-jamfaad-errors.html" }, { "error": "Sign in with your Microsoft account to get started.", "where": "Defender app (macOS)", "group": "Jamf", "guide": "Deploy Microsoft Defender for Endpoint on Macs with Jamf Pro (and fix mdatp health errors)", "url": "https://www.oeltayeb.com/articles/jamf-pro-deploy-defender-for-endpoint-macos.html" }, { "error": "Sign-in error code 530003: Device is required to be managed to access this resource.", "where": "Microsoft Entra sign-in log", "group": "Jamf", "guide": "Platform SSO and the Microsoft Enterprise SSO plug-in on Jamf Pro-managed Macs", "url": "https://www.oeltayeb.com/articles/jamf-pro-platform-sso-enterprise-sso-plugin.html" }, { "error": "Terms and conditions not accepted", "where": "Intune ADE token sync", "group": "Jamf", "guide": "Migrating Macs and iPhones from Jamf Pro to Intune: ADE reassignment and a cut-over plan", "url": "https://www.oeltayeb.com/articles/migrate-macs-iphones-from-jamf-pro-to-intune.html" }, { "error": "0x87D1FDE8", "where": "Intune admin center (per-setting status)", "group": "Integrations", "guide": "Cisco, GlobalProtect, Zscaler and F5 VPN profiles in Intune: per-app VPN and errors", "url": "https://www.oeltayeb.com/articles/intune-vpn-profiles-cisco-paloalto-zscaler-f5-errors.html", "also": [ "-2016281112", "2278686184" ] }, { "error": "4009: the device does not support the OTA API", "where": "Intune admin center (FOTA device report)", "group": "Integrations", "guide": "Zebra devices with Intune: LifeGuard OTA firmware updates, OEMConfig and errors to watch", "url": "https://www.oeltayeb.com/articles/intune-zebra-lifeguard-ota-oemconfig.html" }, { "error": "2016281112 (Remediation Failed)", "where": "Intune admin center (VPN profile status)", "group": "Integrations", "guide": "Cisco, GlobalProtect, Zscaler and F5 VPN profiles in Intune: per-app VPN and errors", "url": "https://www.oeltayeb.com/articles/intune-vpn-profiles-cisco-paloalto-zscaler-f5-errors.html" }, { "error": "AADSTS50105", "where": "Microsoft Entra sign-in log", "group": "Integrations", "guide": "Federating Apple Business Manager with Microsoft Entra ID: Managed Apple Accounts and sync", "url": "https://www.oeltayeb.com/articles/apple-business-manager-federated-authentication-entra-managed-apple-accounts.html" }, { "error": "AADSTS53000", "where": "Microsoft Entra sign-in log", "group": "Integrations", "guide": "Third-party compliance partners in Intune (Workspace ONE, Ivanti, Citrix): setup and fixes", "url": "https://www.oeltayeb.com/articles/intune-device-compliance-partners-workspace-one-ivanti-citrix.html" }, { "error": "AADSTS53000 (DeviceNotCompliant)", "where": "Microsoft Entra sign-in log", "group": "Integrations", "guide": "Android zero-touch enrollment with Intune: reseller setup, DPC extras and common errors", "url": "https://www.oeltayeb.com/articles/intune-android-zero-touch-enrollment-reseller-dpc-extras.html" }, { "error": "AADSTS53003 (BlockedByConditionalAccess)", "where": "Microsoft Entra sign-in log", "group": "Integrations", "guide": "Federating Apple Business Manager with Microsoft Entra ID: Managed Apple Accounts and sync", "url": "https://www.oeltayeb.com/articles/apple-business-manager-federated-authentication-entra-managed-apple-accounts.html" }, { "error": "AADSTS53003 (BlockedByConditionalAccess)", "where": "Microsoft Entra sign-in log", "group": "Integrations", "guide": "Android zero-touch enrollment with Intune: reseller setup, DPC extras and common errors", "url": "https://www.oeltayeb.com/articles/intune-android-zero-touch-enrollment-reseller-dpc-extras.html" }, { "error": "AADSTS700016: Application with identifier '...' was not found in the directory", "where": "Third-party CA log (Entra token request)", "group": "Integrations", "guide": "Intune SCEP with third-party CAs (DigiCert, Entrust, Sectigo, SCEPman): setup and errors", "url": "https://www.oeltayeb.com/articles/intune-third-party-ca-scep-digicert-entrust-scepman.html" }, { "error": "AADSTS7000215: Invalid client secret provided.", "where": "Service Graph Connector outbound HTTP log", "group": "Integrations", "guide": "Intune ServiceNow connector: setup, incidents in the Troubleshooting pane and errors", "url": "https://www.oeltayeb.com/articles/intune-servicenow-integration-connector.html" }, { "error": "AADSTS7000215: Invalid client secret provided.", "where": "Third-party CA log (Entra token request)", "group": "Integrations", "guide": "Intune SCEP with third-party CAs (DigiCert, Entrust, Sectigo, SCEPman): setup and errors", "url": "https://www.oeltayeb.com/articles/intune-third-party-ca-scep-digicert-entrust-scepman.html" }, { "error": "AADSTS7000222: The provided client secret keys for app '...' are expired.", "where": "Third-party CA log (Entra token request)", "group": "Integrations", "guide": "Intune SCEP with third-party CAs (DigiCert, Entrust, Sectigo, SCEPman): setup and errors", "url": "https://www.oeltayeb.com/articles/intune-third-party-ca-scep-digicert-entrust-scepman.html" }, { "error": "Compliant: N/A", "where": "Microsoft Entra admin center (Devices)", "group": "Integrations", "guide": "Third-party compliance partners in Intune (Workspace ONE, Ivanti, Citrix): setup and fixes", "url": "https://www.oeltayeb.com/articles/intune-device-compliance-partners-workspace-one-ivanti-citrix.html" }, { "error": "Couldn't use the admin app due to a checksum error", "where": "Android setup screen", "group": "Integrations", "guide": "Android zero-touch enrollment with Intune: reseller setup, DPC extras and common errors", "url": "https://www.oeltayeb.com/articles/intune-android-zero-touch-enrollment-reseller-dpc-extras.html" }, { "error": "Error: Unable to make a connection to Intune via Graph API call. Please check your credential configuration.", "where": "ServiceNow (Service Graph Connector import)", "group": "Integrations", "guide": "Intune ServiceNow connector: setup, incidents in the Troubleshooting pane and errors", "url": "https://www.oeltayeb.com/articles/intune-servicenow-integration-connector.html" }, { "error": "Failed to create", "where": "Intune admin center (FOTA deployments)", "group": "Integrations", "guide": "Zebra devices with Intune: LifeGuard OTA firmware updates, OEMConfig and errors to watch", "url": "https://www.oeltayeb.com/articles/intune-zebra-lifeguard-ota-oemconfig.html" }, { "error": "Failed to resolve table or column expression named 'IntuneDevices'", "where": "Log Analytics query", "group": "Integrations", "guide": "Intune diagnostic settings: send audit and device logs to Sentinel, Splunk or any SIEM", "url": "https://www.oeltayeb.com/articles/intune-diagnostic-settings-siem-splunk-sentinel-event-hub.html" }, { "error": "IntuneScepServiceException", "where": "Third-party SCEP server log", "group": "Integrations", "guide": "Intune SCEP with third-party CAs (DigiCert, Entrust, Sectigo, SCEPman): setup and errors", "url": "https://www.oeltayeb.com/articles/intune-third-party-ca-scep-digicert-entrust-scepman.html" }, { "error": "Max allowed device threat level", "where": "App protection policy (conditional launch)", "group": "Integrations", "guide": "Intune MTD connectors (Lookout, Zimperium, Check Point): setup, threat levels and errors", "url": "https://www.oeltayeb.com/articles/intune-mobile-threat-defense-connectors-lookout-zimperium-checkpoint.html" }, { "error": "Need admin approval", "where": "Microsoft sign-in (consent screen)", "group": "Integrations", "guide": "Federating Apple Business Manager with Microsoft Entra ID: Managed Apple Accounts and sync", "url": "https://www.oeltayeb.com/articles/apple-business-manager-federated-authentication-entra-managed-apple-accounts.html" }, { "error": "No 'Access-Control-Allow-Origin' header is present on the requested resource", "where": "Browser developer tools (Console)", "group": "Integrations", "guide": "Intune ServiceNow connector: setup, incidents in the Troubleshooting pane and errors", "url": "https://www.oeltayeb.com/articles/intune-servicenow-integration-connector.html" }, { "error": "NOTAPPLICABLE", "where": "Intune admin center (FOTA device report)", "group": "Integrations", "guide": "Zebra devices with Intune: LifeGuard OTA firmware updates, OEMConfig and errors to watch", "url": "https://www.oeltayeb.com/articles/intune-zebra-lifeguard-ota-oemconfig.html" }, { "error": "partnerState: error", "where": "Microsoft Graph (mobileThreatDefenseConnectors)", "group": "Integrations", "guide": "Intune MTD connectors (Lookout, Zimperium, Check Point): setup, threat levels and errors", "url": "https://www.oeltayeb.com/articles/intune-mobile-threat-defense-connectors-lookout-zimperium-checkpoint.html" }, { "error": "partnerState: notSetUp", "where": "Microsoft Graph (mobileThreatDefenseConnectors)", "group": "Integrations", "guide": "Intune MTD connectors (Lookout, Zimperium, Check Point): setup, threat levels and errors", "url": "https://www.oeltayeb.com/articles/intune-mobile-threat-defense-connectors-lookout-zimperium-checkpoint.html" }, { "error": "partnerState: unresponsive", "where": "Microsoft Graph (mobileThreatDefenseConnectors)", "group": "Integrations", "guide": "Intune MTD connectors (Lookout, Zimperium, Check Point): setup, threat levels and errors", "url": "https://www.oeltayeb.com/articles/intune-mobile-threat-defense-connectors-lookout-zimperium-checkpoint.html" }, { "error": "Require the device to be at or under the Device Threat Level", "where": "Intune admin center (device compliance)", "group": "Integrations", "guide": "Intune MTD connectors (Lookout, Zimperium, Check Point): setup, threat levels and errors", "url": "https://www.oeltayeb.com/articles/intune-mobile-threat-defense-connectors-lookout-zimperium-checkpoint.html" }, { "error": "Serious Software Error", "where": "Samsung COPE device (Android 15 / One UI 7)", "group": "Integrations", "guide": "Samsung Knox Mobile Enrollment and Knox Service Plugin with Intune: setup and errors", "url": "https://www.oeltayeb.com/articles/intune-samsung-knox-mobile-enrollment-knox-service-plugin.html" }, { "error": "429 Too Many Requests", "where": "Graph response (Retry-After header)", "group": "Administration", "guide": "Intune automation with Microsoft Graph: fixing 401, 403 and 429 throttling errors", "url": "https://www.oeltayeb.com/articles/intune-graph-api-powershell-errors-403-429.html" }, { "error": "503 Service Unavailable", "where": "Graph response (mobileApps listing)", "group": "Administration", "guide": "Intune automation with Microsoft Graph: fixing 401, 403 and 429 throttling errors", "url": "https://www.oeltayeb.com/articles/intune-graph-api-powershell-errors-403-429.html" }, { "error": "AADSTS65001: The user or administrator has not consented to use the application", "where": "Connect-MgGraph sign-in", "group": "Administration", "guide": "Intune automation with Microsoft Graph: fixing 401, 403 and 429 throttling errors", "url": "https://www.oeltayeb.com/articles/intune-graph-api-powershell-errors-403-429.html" }, { "error": "Application is not authorized to perform this operation", "where": "Graph response (403 Forbidden)", "group": "Administration", "guide": "Intune automation with Microsoft Graph: fixing 401, 403 and 429 throttling errors", "url": "https://www.oeltayeb.com/articles/intune-graph-api-powershell-errors-403-429.html" }, { "error": "Azure network connection isn't healthy", "where": "Intune admin center (All Cloud PCs)", "group": "Administration", "guide": "Windows 365 Cloud PC provisioning failed: finding the cause, fixing the ANC and retrying", "url": "https://www.oeltayeb.com/articles/windows-365-cloud-pc-provisioning-failed-troubleshooting.html" }, { "error": "Device set to be hidden from admin by Device Cleanup Rule", "where": "Intune admin center (Audit logs)", "group": "Administration", "guide": "Keeping Intune tidy: device cleanup rules and stale device hygiene", "url": "https://www.oeltayeb.com/articles/intune-device-cleanup-rules.html" }, { "error": "Domain join failed", "where": "Intune admin center (All Cloud PCs)", "group": "Administration", "guide": "Windows 365 Cloud PC provisioning failed: finding the cause, fixing the ANC and retrying", "url": "https://www.oeltayeb.com/articles/windows-365-cloud-pc-provisioning-failed-troubleshooting.html" }, { "error": "Error code: ERROR_NOT_SUPPORTED (0x80070032)", "where": "Autopilot Reset (device logs)", "group": "Administration", "guide": "Intune wipe, retire, Fresh Start and Autopilot Reset: what each removes and why they fail", "url": "https://www.oeltayeb.com/articles/intune-device-actions-wipe-retire-fresh-start-errors.html", "also": [ "-2147024846", "2147942450" ] }, { "error": "Group deleted from Microsoft Entra ID", "where": "Intune admin center (Deployments)", "group": "Administration", "guide": "Intune deployments (preview): stage Win32 apps and policies across deployment rings", "url": "https://www.oeltayeb.com/articles/intune-phased-deployments-preview-rings.html" }, { "error": "HTTP 429", "where": "Microsoft Graph API response", "group": "Administration", "guide": "Automating Intune device reports with Microsoft Graph PowerShell", "url": "https://www.oeltayeb.com/articles/export-intune-device-inventory-graph-powershell.html" }, { "error": "Insufficient privileges to complete the operation.", "where": "Graph 403 (Authorization_RequestDenied)", "group": "Administration", "guide": "Intune automation with Microsoft Graph: fixing 401, 403 and 429 throttling errors", "url": "https://www.oeltayeb.com/articles/intune-graph-api-powershell-errors-403-429.html" }, { "error": "Intune enrollment failed", "where": "Intune admin center (All Cloud PCs)", "group": "Administration", "guide": "Windows 365 Cloud PC provisioning failed: finding the cause, fixing the ANC and retrying", "url": "https://www.oeltayeb.com/articles/windows-365-cloud-pc-provisioning-failed-troubleshooting.html" }, { "error": "InvalidAuthenticationToken", "where": "Graph response (401 Unauthorized)", "group": "Administration", "guide": "Intune automation with Microsoft Graph: fixing 401, 403 and 429 throttling errors", "url": "https://www.oeltayeb.com/articles/intune-graph-api-powershell-errors-403-429.html" }, { "error": "License not found / User not found / Provisioning policy not found", "where": "Intune admin center (All Cloud PCs)", "group": "Administration", "guide": "Windows 365 Cloud PC provisioning failed: finding the cause, fixing the ANC and retrying", "url": "https://www.oeltayeb.com/articles/windows-365-cloud-pc-provisioning-failed-troubleshooting.html" }, { "error": "Microsoft Entra hybrid join failed", "where": "Intune admin center (All Cloud PCs)", "group": "Administration", "guide": "Windows 365 Cloud PC provisioning failed: finding the cause, fixing the ANC and retrying", "url": "https://www.oeltayeb.com/articles/windows-365-cloud-pc-provisioning-failed-troubleshooting.html" }, { "error": "Microsoft Entra ID service connection point misconfigured", "where": "Intune admin center (All Cloud PCs)", "group": "Administration", "guide": "Windows 365 Cloud PC provisioning failed: finding the cause, fixing the ANC and retrying", "url": "https://www.oeltayeb.com/articles/windows-365-cloud-pc-provisioning-failed-troubleshooting.html" }, { "error": "Not enough IP addresses available", "where": "Intune admin center (All Cloud PCs)", "group": "Administration", "guide": "Windows 365 Cloud PC provisioning failed: finding the cause, fixing the ANC and retrying", "url": "https://www.oeltayeb.com/articles/windows-365-cloud-pc-provisioning-failed-troubleshooting.html" }, { "error": "Remote Help isn't enabled", "where": "Remote Help app", "group": "Administration", "guide": "Remote Help in Intune: licensing, setup, helper roles, deployment and troubleshooting", "url": "https://www.oeltayeb.com/articles/remote-help-intune-setup-troubleshooting.html" }, { "error": "Request disallowed by policy", "where": "Intune admin center (All Cloud PCs)", "group": "Administration", "guide": "Windows 365 Cloud PC provisioning failed: finding the cause, fixing the ANC and retrying", "url": "https://www.oeltayeb.com/articles/windows-365-cloud-pc-provisioning-failed-troubleshooting.html" }, { "error": "0x801C000E device registration quota reached (reported by admins)", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html", "also": [ "-2145648626", "2149318670" ] }, { "error": "0x801c001d DSREG_AUTOJOIN_ADCONFIG_READ_FAILED: the service connection point couldn't be read", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Configuring Microsoft Entra hybrid join: SCP, targeted deployment and validation", "url": "https://www.oeltayeb.com/articles/configure-microsoft-entra-hybrid-join-scp-targeted-deployment.html", "also": [ "-2145648611", "2149318685" ] }, { "error": "0x801c001f DSREG_AUTOJOIN_DISC_WAIT_TIMEOUT: discovery timed out", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145648609", "2149318687" ] }, { "error": "0x801c0002 DSREG_E_DEVICE_AUTHENTICATION_ERROR: AuthenticationError from the registration service", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145648638", "2149318658" ] }, { "error": "0x801c003a DSREG_DISCOVERY_TENANT_NOT_FOUND: wrong tenant ID in the SCP or no active subscription", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Configuring Microsoft Entra hybrid join: SCP, targeted deployment and validation", "url": "https://www.oeltayeb.com/articles/configure-microsoft-entra-hybrid-join-scp-targeted-deployment.html", "also": [ "-2145648582", "2149318714" ] }, { "error": "0x801c003d DSREG_AUTOJOIN_USERREALM_DISCOVERY_FAILED: realm discovery failed", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145648579", "2149318717" ] }, { "error": "0x801c03f2 DSREG_E_DIRECTORY_FAILURE: DirectoryError, the device object isn't found", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Troubleshooting Microsoft Entra hybrid join with dsregcmd /status", "url": "https://www.oeltayeb.com/articles/hybrid-join-troubleshooting-dsregcmd.html", "also": [ "-2145647630", "2149319666" ] }, { "error": "0x801c0006 DSREG_E_DEVICE_INTERNALSERVICE_ERROR: error response from the registration service", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145648634", "2149318662" ] }, { "error": "0x801c0021 DSREG_AUTOJOIN_DISC_FAILED: generic discovery failure", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Troubleshooting Microsoft Entra hybrid join with dsregcmd /status", "url": "https://www.oeltayeb.com/articles/hybrid-join-troubleshooting-dsregcmd.html", "also": [ "-2145648607", "2149318689" ] }, { "error": "0x801c0025 DSREG_SERVER_BUSY: HTTP 503 from the device registration service", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145648603", "2149318693" ] }, { "error": "0x80072ee2 WININET_E_TIMEOUT: network timeout", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Troubleshooting Microsoft Entra hybrid join with dsregcmd /status", "url": "https://www.oeltayeb.com/articles/hybrid-join-troubleshooting-dsregcmd.html", "also": [ "-2147012894", "2147954402" ] }, { "error": "0x80072ee7 WININET_E_NAME_NOT_RESOLVED: the server name couldn't be resolved", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2147012889", "2147954407" ] }, { "error": "0x80072efd / 0x80072efe WININET_E_CANNOT_CONNECT / WININET_E_CONNECTION_ABORTED", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2147012867", "2147954429", "-2147012866", "2147954430" ] }, { "error": "0x80072f8f WININET_E_DECODING_FAILED: the server response couldn't be decoded", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2147012721", "2147954575" ] }, { "error": "0x8007000d E_INVALIDDATA: the server response couldn't be parsed", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Troubleshooting Microsoft Entra hybrid join with dsregcmd /status", "url": "https://www.oeltayeb.com/articles/hybrid-join-troubleshooting-dsregcmd.html", "also": [ "-2147024883", "2147942413" ] }, { "error": "0x8007064c The machine is already enrolled.", "where": "Enrollment log / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2147023284", "2147944012" ] }, { "error": "0x8018000A MENROLL_E_DEVICE_ALREADY_ENROLLED: The device is already enrolled.", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html", "also": [ "-2145910774", "2149056522" ] }, { "error": "0x8018000B MENROLL_E_DEVICE_NOT_ENROLLED: the device isn't enrolled", "where": "DeviceManagement-Enterprise-Diagnostics log", "group": "Windows enrollment error codes", "guide": "Company Portal for Windows: Sync fails, device not enrolled or assigned to someone else", "url": "https://www.oeltayeb.com/articles/company-portal-sync-errors-device-not-enrolled-troubleshooting.html", "also": [ "-2145910773", "2149056523" ] }, { "error": "0x8018000D MENROLL_E_DISCOVERY_SEC_CERT_DATE_INVALID: certificate date invalid during discovery", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910771", "2149056525" ] }, { "error": "0x8018000F MENROLL_E_WAB_ERROR: error during web authentication broker enrollment", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910769", "2149056527" ] }, { "error": "0x8018001B MENROLL_E_PLATFORM_WRONG_STATE: invalid operation, such as enrolling twice", "where": "DeviceManagement-Enterprise-Diagnostics log", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910757", "2149056539" ] }, { "error": "0x8018001C MENROLL_E_PLATFORM_LICENSE_ERROR: this Windows version doesn't support the enrollment type", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910756", "2149056540" ] }, { "error": "0x8018001E to 0x80180025 MENROLL_E_PROV_*: provisioning failed in a CSP", "where": "DeviceManagement-Enterprise-Diagnostics log", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910754", "2149056542", "-2145910747", "2149056549" ] }, { "error": "0x8018002b Auto MDM Enroll: Failed (Group Policy automatic enrollment, event 76)", "where": "DeviceManagement-Enterprise-Diagnostics log", "group": "Windows enrollment error codes", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html", "also": [ "-2145910741", "2149056555" ] }, { "error": "0x80090016 NTE_BAD_KEYSET: the TPM keyset doesn't exist", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Troubleshooting Microsoft Entra hybrid join with dsregcmd /status", "url": "https://www.oeltayeb.com/articles/hybrid-join-troubleshooting-dsregcmd.html", "also": [ "-2146893802", "2148073494" ] }, { "error": "0x80090031 NTE_AUTHENTICATION_IGNORED: the TPM is locked out", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2146893775", "2148073521" ] }, { "error": "0x80180001 MENROLL_E_DEVICE_MESSAGE_FORMAT_ERROR: invalid message format from the server", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910783", "2149056513" ] }, { "error": "0x80180002 MENROLL_E_DEVICE_AUTHENTICATION_ERROR: the server failed to authenticate the user", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910782", "2149056514" ] }, { "error": "0x80180003 MENROLL_E_DEVICE_AUTHORIZATION_ERROR: the user isn't authorized to enroll", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html", "also": [ "-2145910781", "2149056515" ] }, { "error": "0x80180005 / 0x80180006 / 0x80180008 MENROLL_E server errors: management server failure or unknown error", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910779", "2149056517", "-2145910778", "2149056518", "-2145910776", "2149056520" ] }, { "error": "0x80180009 MENROLL_E_ENROLLMENT_IN_PROGRESS: another enrollment is under way", "where": "DeviceManagement-Enterprise-Diagnostics log", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910775", "2149056521" ] }, { "error": "0x80180010 MENROLL_E_CONNECTIVITY: network error such as DNS or a timeout", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html", "also": [ "-2145910768", "2149056528" ] }, { "error": "0x80180012 MENROLL_E_INVALIDSSLCERT: the SSL certificate wasn't valid", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910766", "2149056530" ] }, { "error": "0x80180013 MENROLL_E_DEVICECAPREACHED: the user has enrolled too many devices", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html", "also": [ "-2145910765", "2149056531" ] }, { "error": "0x80180014 MENROLL_E_DEVICENOTSUPPORTED: Your organization does not support this version of Windows.", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows Autopilot error 0x80180014 when redeploying a device: cause and fix", "url": "https://www.oeltayeb.com/articles/autopilot-error-0x80180014-reenrollment.html", "also": [ "-2145910764", "2149056532" ] }, { "error": "0x80180015 MENROLL_E_NOTSUPPORTED: MDM isn't supported on this device", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910763", "2149056533" ] }, { "error": "0x80180016 MREGISTER_E_NOTELIGIBLETORENEW: the server rejected the MDM certificate renewal", "where": "DeviceManagement-Enterprise-Diagnostics log", "group": "Windows enrollment error codes", "guide": "Intune device not checking in: diagnosing a Windows device that stopped syncing", "url": "https://www.oeltayeb.com/articles/intune-device-not-checking-in-sync-troubleshooting.html", "also": [ "-2145910762", "2149056534" ] }, { "error": "0x80180018 MENROLL_E_USERLICENSE: the user's licence state blocks enrollment", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html", "also": [ "-2145910760", "2149056536" ] }, { "error": "0x80180026 MENROLL_E_DEVICE_MANAGEMENT_BLOCKED: MDM enrollment was blocked", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910746", "2149056550" ] }, { "error": "0x80180027 MENROLL_E_CERTPOLICY_PRIVATEKEYCREATION_FAILED: the private key couldn't be created", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910745", "2149056551" ] }, { "error": "0x80180029 MENROLL_E_EMPTY_MESSAGE: HTTP 200 with an empty message", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910743", "2149056553" ] }, { "error": "0x80180030 MENROLL_E_USER_CANCELED: the user canceled the operation", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910736", "2149056560" ] }, { "error": "0x80180031 MENROLL_E_MDM_NOT_CONFIGURED: MDM isn't configured", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910735", "2149056561" ] }, { "error": "0x80180032 The server responded with a custom error string", "where": "DeviceManagement-Enterprise-Diagnostics log", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2145910734", "2149056562" ] }, { "error": "0x80290407 / 0x80280036 TPM_E_PCP_INTERNAL_ERROR / TPM_E_NOTFIPS: TPM error or TPM in FIPS mode", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html", "also": [ "-2144795641", "2150171655", "-2144862154", "2150105142" ] }, { "error": "A setup failure has occurred during bulk enrollment.", "where": "Provisioning package (bulk enrollment)", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html" }, { "error": "AADSTS90002: Tenant UUID not found. (DirectoryError during sync-join)", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html" }, { "error": "Looks like we can't connect to the URL for your organization's MDM terms of use.", "where": "OOBE / Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html" }, { "error": "This account is not allowed on this phone.", "where": "Access work or school", "group": "Windows enrollment error codes", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html" }, { "error": "Your request is throttled temporarily. Please try after 300 seconds.", "where": "dsregcmd /status / User Device Registration", "group": "Windows enrollment error codes", "guide": "Windows enrollment error codes in Intune (0x8018…, 0x801C… and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html" }, { "error": "0x801C03EA Registering your device for mobile management (Failed: 3, 0x801C03EA): TPM attestation failed", "where": "ESP (Registering for mobile management)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html", "also": [ "-2145647638", "2149319658" ] }, { "error": "0x801C03F3 Microsoft Entra device object not found (pre-provisioning)", "where": "User Device Registration Admin log", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html", "also": [ "-2145647629", "2149319667" ] }, { "error": "0x800705B4 Securing your hardware (Failed: 0x800705b4): timeout, usually a device without TPM 2.0", "where": "ESP (Securing your hardware)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html", "also": [ "-2147023436", "2147943860" ] }, { "error": "0x800706FD The trust relationship between this workstation and the primary domain failed.", "where": "DeviceManagement-Enterprise-Diagnostics log", "group": "Autopilot error codes", "guide": "Pre-provisioning hybrid join fails when a policy needs a domain controller (0x800706FD)", "url": "https://www.oeltayeb.com/articles/autopilot-pre-provisioning-hybrid-join-policy-conflict-domain-controller.html", "also": [ "-2147023107", "2147944189" ] }, { "error": "0x8007202F A constraint violation occurred.", "where": "ODJConnectorUI.log (connector setup)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html", "also": [ "-2147016657", "2147950639" ] }, { "error": "0x80004005 Hybrid join Autopilot deployments time out", "where": "Autopilot / OOBE (hybrid join)", "group": "Autopilot error codes", "guide": "Hybrid join Autopilot deployments time out with 0x80004005: the 2026 known issue and the fix", "url": "https://www.oeltayeb.com/articles/autopilot-hybrid-join-timeout-0x80004005-2026.html", "also": [ "-2147467259", "2147500037" ] }, { "error": "0x80070032 ERROR_NOT_SUPPORTED: Autopilot Reset needs the Windows Recovery Environment", "where": "Autopilot Reset logs", "group": "Autopilot error codes", "guide": "Intune wipe, retire, Fresh Start and Autopilot Reset: what each removes and why they fail", "url": "https://www.oeltayeb.com/articles/intune-device-actions-wipe-retire-fresh-start-errors.html", "also": [ "-2147024846", "2147942450" ] }, { "error": "0x80070490 TPM attestation failure on AMD platforms with ASP firmware TPM", "where": "ESP (Securing your hardware)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html", "also": [ "-2147023728", "2147943568" ] }, { "error": "0x80070774 Something went wrong (hybrid join): the domain controller can't be found or reached", "where": "Autopilot / OOBE (hybrid join)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html", "also": [ "-2147022988", "2147944308" ] }, { "error": "0x80180014 Enrollment blocked for AP device by SDM One Time Limit Check", "where": "ESP (Registering for mobile management)", "group": "Autopilot error codes", "guide": "Windows Autopilot error 0x80180014 when redeploying a device: cause and fix", "url": "https://www.oeltayeb.com/articles/autopilot-error-0x80180014-reenrollment.html", "also": [ "-2145910764", "2149056532" ] }, { "error": "0x80180018 MENROLL_E_USERLICENSE: licence or device-count problem during Autopilot", "where": "Autopilot / OOBE", "group": "Autopilot error codes", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html", "also": [ "-2145910760", "2149056536" ] }, { "error": "0x80180022 Autopilot device enrollment failed: Windows Home edition", "where": "Autopilot / OOBE", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html", "also": [ "-2145910750", "2149056546" ] }, { "error": "0x81039001 E_AUTOPILOT_CLIENT_TPM_MAX_ATTESTATION_RETRY_EXCEEDED", "where": "ESP (Securing your hardware)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html", "also": [ "-2130472959", "2164494337" ] }, { "error": "0x81039023 TPM attestation failure on Windows 11", "where": "ESP (Securing your hardware)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html", "also": [ "-2130472925", "2164494371" ] }, { "error": "0x81039024 TPM attestation failed: known TPM vulnerabilities detected", "where": "ESP (Securing your hardware)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html", "also": [ "-2130472924", "2164494372" ] }, { "error": "0xc1036501 multiple MDM configurations in Microsoft Entra ID block automatic MDM enrollment", "where": "Autopilot / OOBE", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html", "also": [ "-1056742143", "3238225153" ] }, { "error": "806 - ZtdDeviceAlreadyAssigned: Device is already registered to the same Tenant.", "where": "Intune admin center (Autopilot import)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "808 - ZtdDeviceAssignedToOtherTenant: Internal error", "where": "Intune admin center (Autopilot import)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Another installation is in progress, please try again later", "where": "Enrollment Status Page", "group": "Autopilot error codes", "guide": "Enrollment Status Page timing out during Autopilot: a step-by-step troubleshooting guide", "url": "https://www.oeltayeb.com/articles/enrollment-status-page-timeout-troubleshooting.html" }, { "error": "Autopilot reset ran into trouble. Could not find the recovery environment", "where": "Autopilot Reset", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Can't connect to the URL of your organization's MDM terms of use.", "where": "Autopilot / OOBE", "group": "Autopilot error codes", "guide": "Windows enrollment error 0x80180018 and its neighbours: what to check, and where", "url": "https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html" }, { "error": "Cannot convert the literal '[DEVICEHASH]' to the expected type 'Edm.Binary'", "where": "Network trace (CSV import)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Cannot start service ODJConnectorSvc on computer '.'", "where": "Intune Connector for AD setup", "group": "Autopilot error codes", "guide": "Intune Connector for AD fails with SeLogonAsServicePrivilege when you bring your own gMSA", "url": "https://www.oeltayeb.com/articles/intune-connector-active-directory-gmsa-selogonasservice-error.html" }, { "error": "Event 100 Autopilot policy [name] not found.", "where": "Autopilot event log (ModernDeployment)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Event 163 AutopilotManager determined download isn't required and the device is already provisioned.", "where": "Autopilot event log (ModernDeployment)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Event 171 AutopilotManager failed to set TPM identity confirmed (event 172 follows)", "where": "Autopilot event log (ModernDeployment)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Event 807 ZtdDeviceIsNotRegistered", "where": "Autopilot event log (ModernDeployment)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Event 809 ZtdDeviceHasNoAssignedProfile - Assigned profile does not exist.", "where": "Autopilot event log (ModernDeployment)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Event 815 ZtdDeviceHasNoAssignedProfile - No profile assigned to the device, and no default profile found in the tenant.", "where": "Autopilot event log (ModernDeployment)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Event 908 SerialNumberMismatch / ProductKeyIdMismatch", "where": "Autopilot event log (ModernDeployment)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Event 2800 The following URI has triggered a reboot", "where": "DeviceManagement-Enterprise-Diagnostics log", "group": "Autopilot error codes", "guide": "Enrollment Status Page timing out during Autopilot: a step-by-step troubleshooting guide", "url": "https://www.oeltayeb.com/articles/enrollment-status-page-timeout-troubleshooting.html" }, { "error": "Event 30132 Failed to get the ODJ Blob. The ODJ connector does not have sufficient privileges to complete the operation", "where": "ODJConnectorService log (connector server)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Fix pending / Attention required: We've detected a hardware change on this device.", "where": "Windows Autopilot devices (Intune)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "InstallationState 4 (Error): a Win32 app tracked by the ESP failed", "where": "ESP registry (EnrollmentStatusTracking)", "group": "Autopilot error codes", "guide": "Enrollment Status Page timing out during Autopilot: a step-by-step troubleshooting guide", "url": "https://www.oeltayeb.com/articles/enrollment-status-page-timeout-troubleshooting.html" }, { "error": "MSA account is not valid", "where": "Intune Connector for AD setup", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Navigation to the webpage was canceled / Can't connect securely to this page", "where": "Intune Connector for AD setup", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Preparing your device for mobile management (fails on an undersized VM)", "where": "Autopilot / OOBE", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Ran into trouble. Please sign in with an administrator account to see why and reset manually.", "where": "Autopilot Reset", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "SeLogonAsServicePrivilegeMissing (your own gMSA)", "where": "Intune Connector for AD setup", "group": "Autopilot error codes", "guide": "Intune Connector for AD fails with SeLogonAsServicePrivilege when you bring your own gMSA", "url": "https://www.oeltayeb.com/articles/intune-connector-active-directory-gmsa-selogonasservice-error.html" }, { "error": "Something happened, and TPM attestation timed out.", "where": "ESP (Securing your hardware)", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "Something went wrong. OOBEIDPS.", "where": "Autopilot / OOBE", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "That username looks like it belongs to another organization. Try signing in again or start over with a different account", "where": "Autopilot / OOBE", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "The MSA account couldn't be granted permission to create computer objects in the following OUs", "where": "Intune Connector for AD setup", "group": "Autopilot error codes", "guide": "Windows Autopilot error codes (0x800705B4, 0x801C03EA, 0x80070774…): a quick reference", "url": "https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html" }, { "error": "0x8A15001B APPINSTALLER_CLI_ERROR_MSSTORE_BLOCKED_BY_POLICY: The Microsoft Store client is blocked by policy", "where": "Intune admin center / WinGet log", "group": "App install error codes", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html", "also": [ "-1978335205", "2316632091" ] }, { "error": "0x8A15001C APPINSTALLER_CLI_ERROR_MSSTORE_APP_BLOCKED_BY_POLICY: The Microsoft Store app is blocked by policy", "where": "Intune admin center / WinGet log", "group": "App install error codes", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html", "also": [ "-1978335204", "2316632092" ] }, { "error": "0x8A15001E APPINSTALLER_CLI_ERROR_MSSTORE_INSTALL_FAILED: Failed to install the Microsoft Store app", "where": "Intune admin center / WinGet log", "group": "App install error codes", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html", "also": [ "-1978335202", "2316632094" ] }, { "error": "0x8A150008 APPINSTALLER_CLI_ERROR_DOWNLOAD_FAILED: Downloading installer failed", "where": "Intune admin center / WinGet log", "group": "App install error codes", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html", "also": [ "-1978335224", "2316632072" ] }, { "error": "0x8A150011 APPINSTALLER_CLI_ERROR_INSTALLER_HASH_MISMATCH: The installer file's hash does not match the manifest", "where": "Intune admin center / WinGet log", "group": "App install error codes", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html", "also": [ "-1978335215", "2316632081" ] }, { "error": "0x8A150014 APPINSTALLER_CLI_ERROR_NO_APPLICATIONS_FOUND: No packages found", "where": "Intune admin center / WinGet log", "group": "App install error codes", "guide": "Microsoft Store apps failing in Intune: WinGet 0x8A15… codes, 0x87D1041C and fixes", "url": "https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html", "also": [ "-1978335212", "2316632084" ] }, { "error": "0x87D13B6F, 0x87D13B70, 0x87D13B72, 0x87D13B73, 0x87D13B77: app manifest validation failed on the network", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016330897", "2278636399", "-2016330896", "2278636400", "-2016330894", "2278636402", "-2016330893", "2278636403", "-2016330889", "2278636407" ] }, { "error": "0x87D13B7D Unknown error (one documented cause: an expired VPP token)", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016330883", "2278636413" ] }, { "error": "0x87D13B7E License Assignment failed with Apple error 'No VPP licenses remaining'", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016330882", "2278636414" ] }, { "error": "0x87D13B7F Needed app configuration policy not present, ensure policy is targeted to same groups.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016330881", "2278636415" ] }, { "error": "0x87D13B8F The application is installed on the device but is unmanaged.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016330865", "2278636431" ] }, { "error": "0x87D13B9D The latest version of the app failed to update from an earlier version.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016330851", "2278636445" ] }, { "error": "0x87D13B60 The app is scheduled for installation, but needs a redemption code to complete the transaction.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016330912", "2278636384" ] }, { "error": "0x87D13B62 The user rejected the offer to install the app.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016330910", "2278636386" ] }, { "error": "0x87D13B63 The user rejected the offer to update the app.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016330909", "2278636387" ] }, { "error": "0x87D13B66 The app is managed, but has expired or been removed by the user.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016330906", "2278636390" ] }, { "error": "0x87D13B68 User declined app management", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016330904", "2278636392" ] }, { "error": "0x87D13B80 CannotConnectToITunesStoreError", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016330880", "2278636416" ] }, { "error": "0x87D13B93 Can only install VPP apps on Shared iPad.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016330861", "2278636435" ] }, { "error": "0x87D13B94 Can't install apps when App Store is disabled.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016330860", "2278636436" ] }, { "error": "0x87D13B95 Can't find VPP license for app.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016330859", "2278636437" ] }, { "error": "0x87D13B97 Can't install apps when device is in Lost Mode.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016330857", "2278636439" ] }, { "error": "0x87D13B98 Can't install apps when device is in kiosk mode.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016330856", "2278636440" ] }, { "error": "0x87D13B99 User must sign in to the App Store.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016330855", "2278636441" ] }, { "error": "0x87D13BA9 The app installation has failed. (ErrorUserEnrollmentUnsupported)", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016330839", "2278636457" ] }, { "error": "0x87D300C9 The unmonitored process is in progress, however it may timeout.", "where": "Intune admin center / Company Portal", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016214839", "2278752457" ] }, { "error": "0x87D1041C (Android device administrator): the user uninstalled a required app", "where": "Intune admin center (Android app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016345060", "2278622236" ] }, { "error": "0x87D1041C (iOS/iPadOS): app detection did not match the response from the device", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016345060", "2278622236" ] }, { "error": "0x87D1041C The application was not detected after installation completed successfully.", "where": "Intune admin center (app install status)", "group": "App install error codes", "guide": "Win32 app error 0x87D1041C: the app installed but Intune can't detect it", "url": "https://www.oeltayeb.com/articles/win32-app-0x87d1041c-not-detected.html", "also": [ "-2016345060", "2278622236" ] }, { "error": "0x87D1313C Network connection on the client was lost or interrupted.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016333508", "2278633788" ] }, { "error": "0x87D1313D Could not retrieve license for the app with iTunes Store ID", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016333507", "2278633789" ] }, { "error": "0x87D11388 iOS/iPadOS device is currently busy.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "iOS/iPadOS apps not installing from Intune: VPP tokens, licences and installs stuck pending", "url": "https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html", "also": [ "-2016341112", "2278626184" ] }, { "error": "0x87D12906 Apple MDM Agent error: App installation command failed with no error reason specified.", "where": "Intune admin center (iOS app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016335610", "2278631686" ] }, { "error": "0x87D30065 Failed to retrieve content information.", "where": "Intune admin center (app install status)", "group": "App install error codes", "guide": "Win32 app errors in Intune: 0x87D30065 downloads, exit code 1603 and Delivery Optimization", "url": "https://www.oeltayeb.com/articles/intune-win32-app-download-install-errors-0x87d30065.html", "also": [ "-2016214939", "2278752357" ] }, { "error": "0x87D30067 Error unzipping downloaded content.", "where": "Intune admin center (app install status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2016214937", "2278752359" ] }, { "error": "0x8000FFFF An unexpected error occurred during installation.", "where": "Intune admin center (app install status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2147418113", "2147549183" ] }, { "error": "0x80073CF0 The package could not be opened (unsigned, or publisher doesn't match the certificate)", "where": "Intune admin center (app install status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2147009296", "2147958000" ] }, { "error": "0x80073CF3 The package failed update, dependency, or conflict validation.", "where": "Intune admin center (app install status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2147009293", "2147958003" ] }, { "error": "0x80073CFB The provided package is already installed, and reinstallation of the package is blocked.", "where": "Intune admin center (app install status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2147009285", "2147958011" ] }, { "error": "0x80073CFF / 0x80CF201C To install this app, you must have a sideloading-enabled system.", "where": "Intune admin center (app install status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2147009281", "2147958015", "-2133909476", "2161057820" ] }, { "error": "0x80070642 (exit code 1602) ERROR_INSTALL_USEREXIT: the user canceled installation", "where": "Intune admin center / AppWorkload.log", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2147023294", "2147944002" ] }, { "error": "0x80070643 (exit code 1603) ERROR_INSTALL_FAILURE: a fatal error occurred during installation", "where": "Intune admin center / AppWorkload.log", "group": "App install error codes", "guide": "Win32 app errors in Intune: 0x87D30065 downloads, exit code 1603 and Delivery Optimization", "url": "https://www.oeltayeb.com/articles/intune-win32-app-download-install-errors-0x87d30065.html", "also": [ "-2147023293", "2147944003" ] }, { "error": "0x80070652 (exit code 1618) ERROR_INSTALL_ALREADY_RUNNING: another installation is already in progress", "where": "Intune admin center / AppWorkload.log", "group": "App install error codes", "guide": "Win32 app errors in Intune: 0x87D30065 downloads, exit code 1603 and Delivery Optimization", "url": "https://www.oeltayeb.com/articles/intune-win32-app-download-install-errors-0x87d30065.html", "also": [ "-2147023278", "2147944018" ] }, { "error": "0x80070653 (exit code 1619) ERROR_INSTALL_PACKAGE_OPEN_FAILED: the package couldn't be opened", "where": "Intune admin center / AppWorkload.log", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2147023277", "2147944019" ] }, { "error": "0x80070659 (exit code 1625) ERROR_INSTALL_PACKAGE_REJECTED: forbidden by system policy", "where": "Intune admin center / AppWorkload.log", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2147023271", "2147944025" ] }, { "error": "0x80070666 (exit code 1638) ERROR_PRODUCT_VERSION: another version of this product is already installed", "where": "Intune admin center / AppWorkload.log", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2147023258", "2147944038" ] }, { "error": "0x80070667 (exit code 1639) ERROR_INVALID_COMMAND_LINE: invalid command line argument", "where": "Intune admin center / AppWorkload.log", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-2147023257", "2147944039" ] }, { "error": "0xC7D14FB1 / 0xC7D14FB9 The end user canceled the app installation.", "where": "Intune admin center (Android app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-942583887", "3352383409", "-942583879", "3352383417" ] }, { "error": "0xC7D14FB2 / 0xC7D15078 The download failed because of an unknown error.", "where": "Intune admin center (Android app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-942583886", "3352383410", "-942583688", "3352383608" ] }, { "error": "0xC7D14FB5 The app failed to install.", "where": "Intune admin center (Android app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-942583883", "3352383413" ] }, { "error": "0xC7D14FB6 The app installation APK file cannot be installed because it was not signed.", "where": "Intune admin center (Android app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-942583882", "3352383414" ] }, { "error": "0xC7D14FB7 The app installation APK file used for the upgrade does not match the signature for the current app", "where": "Intune admin center (Android app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-942583881", "3352383415" ] }, { "error": "0xC7D14FB8 The app failed to uninstall.", "where": "Intune admin center (Android app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-942583880", "3352383416" ] }, { "error": "0xC7D14FBA The app installation was canceled because the installation (APK) file was deleted after download", "where": "Intune admin center (Android app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-942583878", "3352383418" ] }, { "error": "0xC7D14FBB / 0xC7D14FBC Installation or uninstall canceled because the process was restarted", "where": "Intune admin center (Android app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-942583877", "3352383419", "-942583876", "3352383420" ] }, { "error": "0xC7D15015 / 0xC7D1507C The file download process (or service) was unexpectedly stopped.", "where": "Intune admin center (Android app status)", "group": "App install error codes", "guide": "Intune app installation error codes (Win32, MSI, Store, iOS, Android): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html", "also": [ "-942583787", "3352383509", "-942583684", "3352383612" ] }, { "error": "1641 ERROR_SUCCESS_REBOOT_INITIATED: success, the installer has initiated a restart", "where": "AppWorkload.log (installer exit code)", "group": "App install error codes", "guide": "Packaging a Win32 app for Intune: .intunewin, install commands, detection and requirement rules", "url": "https://www.oeltayeb.com/articles/package-win32-app-intunewin-content-prep-tool.html" }, { "error": "3010 ERROR_SUCCESS_REBOOT_REQUIRED: success, a restart is required to complete the install", "where": "AppWorkload.log (installer exit code)", "group": "App install error codes", "guide": "Packaging a Win32 app for Intune: .intunewin, install commands, detection and requirement rules", "url": "https://www.oeltayeb.com/articles/package-win32-app-intunewin-content-prep-tool.html" }, { "error": "AADSTS50005 DevicePolicyError: platform not supported by a Conditional Access policy", "where": "Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50011 InvalidReplyTo: reply address is missing, misconfigured or doesn't match the app's reply addresses", "where": "Sign-in page (Jamf Connect, Jamf Pro SSO)", "group": "Entra sign-in (AADSTS) errors", "guide": "Jamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-connect-microsoft-entra-id-setup-aadsts-errors.html" }, { "error": "AADSTS50020 UserUnauthorized: account from another tenant can't access the app", "where": "Sign-in page", "group": "Entra sign-in (AADSTS) errors", "guide": "Jamf Pro SSO with Microsoft Entra ID (SAML): setup, failover login and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-entra-id-sso-saml-admin-self-service.html" }, { "error": "AADSTS50034 UserAccountNotFound: the account isn't in this directory", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Primary Refresh Token (PRT) explained: fixing SSO and repeated sign-in prompts", "url": "https://www.oeltayeb.com/articles/primary-refresh-token-sso-troubleshooting.html" }, { "error": "AADSTS50053: account locked (IdsLocked) or sign-in from a malicious IP address", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50055 / AADSTS50144: password expired (cloud or on-premises Active Directory)", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50057 UserDisabled: the user account is disabled", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50058 UserInformationNotProvided: session information isn't sufficient for single sign-on", "where": "Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50072 UserStrongAuthEnrollmentRequiredInterrupt: user must register for MFA", "where": "Sign-in page / sign-in log (Interrupted)", "group": "Entra sign-in (AADSTS) errors", "guide": "AADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors", "url": "https://www.oeltayeb.com/articles/aadsts50076-aadsts50079-aadsts50158-mfa-errors.html" }, { "error": "AADSTS50074 UserStrongAuthClientAuthNRequiredInterrupt: MFA required and not yet passed", "where": "Microsoft Entra sign-in log (Interrupted)", "group": "Entra sign-in (AADSTS) errors", "guide": "AADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors", "url": "https://www.oeltayeb.com/articles/aadsts50076-aadsts50079-aadsts50158-mfa-errors.html" }, { "error": "AADSTS50076 UserStrongAuthClientAuthNRequired: the user must use MFA for this resource", "where": "Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "AADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors", "url": "https://www.oeltayeb.com/articles/aadsts50076-aadsts50079-aadsts50158-mfa-errors.html" }, { "error": "AADSTS50078 UserStrongAuthExpired: presented MFA has expired under your policies", "where": "Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "AADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors", "url": "https://www.oeltayeb.com/articles/aadsts50076-aadsts50079-aadsts50158-mfa-errors.html" }, { "error": "AADSTS50079 UserStrongAuthEnrollmentRequired: MFA required, security info not registered", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "AADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors", "url": "https://www.oeltayeb.com/articles/aadsts50076-aadsts50079-aadsts50158-mfa-errors.html" }, { "error": "AADSTS50097 DeviceAuthenticationRequired: device authentication is required", "where": "Microsoft Entra sign-in log (Interrupted)", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50105 EntitlementGrantsNotFound: user isn't assigned to a role for the app", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Jamf Pro SSO with Microsoft Entra ID (SAML): setup, failover login and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-entra-id-sso-saml-admin-self-service.html" }, { "error": "AADSTS50126 InvalidUserNameOrPassword: invalid username or password", "where": "Sign-in page / dsregcmd /status", "group": "Entra sign-in (AADSTS) errors", "guide": "Primary Refresh Token (PRT) explained: fixing SSO and repeated sign-in prompts", "url": "https://www.oeltayeb.com/articles/primary-refresh-token-sso-troubleshooting.html" }, { "error": "AADSTS50127 BrokerAppNotInstalled: user needs to install a broker app", "where": "Sign-in page (mobile) / sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50129 DeviceIsNotWorkplaceJoined: workplace join is required", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50131 ConditionalAccessFailed: Conditional Access error such as a bad Windows device state", "where": "Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50132 / AADSTS50133: session invalid after a password expiry or change", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50140 KmsiInterrupt: Keep me signed in interrupt", "where": "Microsoft Entra sign-in log (Interrupted)", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50155 DeviceAuthenticationFailed: device authentication failed for this user", "where": "Sign-in log / dsregcmd /status", "group": "Entra sign-in (AADSTS) errors", "guide": "Primary Refresh Token (PRT) explained: fixing SSO and repeated sign-in prompts", "url": "https://www.oeltayeb.com/articles/primary-refresh-token-sso-troubleshooting.html" }, { "error": "AADSTS50158: external security challenge not satisfied", "where": "Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "AADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors", "url": "https://www.oeltayeb.com/articles/aadsts50076-aadsts50079-aadsts50158-mfa-errors.html" }, { "error": "AADSTS50168: Windows 10 Accounts extension present but no valid SSO token in the request", "where": "Microsoft Entra sign-in log (Interrupted)", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50173: the grant was revoked and a fresh auth token is needed", "where": "App sign-in / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50187 DeviceInformationNotProvided: the service failed to perform device authentication", "where": "Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50194: app isn't multitenant, so the /common endpoint isn't supported", "where": "Sign-in page / app or tool error", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS50199 CmsiInterrupt: user confirmation required for this request", "where": "Microsoft Entra sign-in log (Interrupted)", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS53000 DeviceNotCompliant: Conditional Access requires a compliant device", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "AADSTS53000 vs AADSTS53003: troubleshooting Conditional Access sign-in blocks", "url": "https://www.oeltayeb.com/articles/aadsts53000-aadsts53003-conditional-access-blocks.html" }, { "error": "AADSTS53001 DeviceNotDomainJoined: policy requires a domain-joined device", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "AADSTS53000 vs AADSTS53003: troubleshooting Conditional Access sign-in blocks", "url": "https://www.oeltayeb.com/articles/aadsts53000-aadsts53003-conditional-access-blocks.html" }, { "error": "AADSTS53002 ApplicationUsedIsNotAnApprovedApp: app isn't approved for Conditional Access", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS53003 BlockedByConditionalAccess: a policy doesn't allow token issuance", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "AADSTS53000 vs AADSTS53003: troubleshooting Conditional Access sign-in blocks", "url": "https://www.oeltayeb.com/articles/aadsts53000-aadsts53003-conditional-access-blocks.html" }, { "error": "AADSTS53004 ProofUpBlockedDueToRisk: MFA registration needed but blocked by risk", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "AADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors", "url": "https://www.oeltayeb.com/articles/aadsts50076-aadsts50079-aadsts50158-mfa-errors.html" }, { "error": "AADSTS53010 ProofUpBlockedDueToSecurityInfoAcr: security info must be set from specific locations or devices", "where": "Security info registration / sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS65001 DelegationDoesNotExist: no consent for the application", "where": "Sign-in page (Jamf Connect login window)", "group": "Entra sign-in (AADSTS) errors", "guide": "Jamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-connect-microsoft-entra-id-setup-aadsts-errors.html" }, { "error": "AADSTS70043 BadTokenDueToSignInFrequency: refresh token expired by sign-in frequency", "where": "Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS135011: Device used during the authentication is disabled", "where": "Event Viewer (AAD Operational) / sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS500121: Authentication failed during strong authentication request", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS501241: mandatory input missing from transformation (NameID source attribute)", "where": "Sign-in page (SAML app)", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS700016 UnauthorizedClient_DoesNotMatchRequest: application not found in the directory", "where": "Sign-in page / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Jamf Pro SSO with Microsoft Entra ID (SAML): setup, failover login and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-entra-id-sso-saml-admin-self-service.html" }, { "error": "AADSTS700082 ExpiredOrRevokedGrantInactiveToken: refresh token expired due to inactivity", "where": "App sign-in / Microsoft Entra sign-in log", "group": "Entra sign-in (AADSTS) errors", "guide": "Microsoft Entra AADSTS sign-in errors on Intune and Jamf devices: a quick reference", "url": "https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html" }, { "error": "AADSTS7000218: request body must contain 'client_assertion' or 'client_secret'", "where": "Microsoft Entra sign-in log / ROPG test", "group": "Entra sign-in (AADSTS) errors", "guide": "Jamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errors", "url": "https://www.oeltayeb.com/articles/jamf-connect-microsoft-entra-id-setup-aadsts-errors.html" }, { "error": "0x87D1FDE8 (-2016281112) Remediation failed", "where": "Intune admin center (profile status)", "group": "Profile & compliance error codes", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html", "also": [ "2278686184" ] }, { "error": "0x87D1FDE9 (-2016281111) Not applicable for this device", "where": "Intune admin center (profile status)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html", "also": [ "2278686185" ] }, { "error": "0x87D1FDEA (-2016281110) Invalid parameter to CIM setting", "where": "Intune admin center (profile status)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html", "also": [ "2278686186" ] }, { "error": "0x87D1FDEB (-2016281109) Data type conversion failed", "where": "Intune admin center (custom profile)", "group": "Profile & compliance error codes", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html", "also": [ "2278686187" ] }, { "error": "0x87D1FDEE (-2016281106) Not applicable because it lost in conflict resolution", "where": "Intune admin center (profile status)", "group": "Profile & compliance error codes", "guide": "Finding and fixing Intune policy conflicts with the MDM diagnostic report", "url": "https://www.oeltayeb.com/articles/intune-policy-conflicts-mdm-diagnostics.html", "also": [ "2278686190" ] }, { "error": "0x87D1FDEF (-2016281105) Failed to evaluate the Rule", "where": "Intune admin center (profile status)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html", "also": [ "2278686191" ] }, { "error": "0x87D1FDF0 (-2016281104) MDM CI certificate info not found", "where": "Intune admin center (certificate profile)", "group": "Profile & compliance error codes", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html", "also": [ "2278686192" ] }, { "error": "0x87D1FDF1 (-2016281103) MDM CRP certificate info not found", "where": "Intune admin center (certificate profile)", "group": "Profile & compliance error codes", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html", "also": [ "2278686193" ] }, { "error": "0x87D1FDF2 (-2016281102) NDES URL not found", "where": "Intune admin center (SCEP profile)", "group": "Profile & compliance error codes", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html", "also": [ "2278686194" ] }, { "error": "0x87D1FDF3 (-2016281101) MDM CRP request not found", "where": "Intune admin center (certificate profile)", "group": "Profile & compliance error codes", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html", "also": [ "2278686195" ] }, { "error": "0x87D17D05 (-2016314107) 22005: Network error (SCEP payload)", "where": "Intune admin center (iOS profile status)", "group": "Profile & compliance error codes", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html", "also": [ "2278653189" ] }, { "error": "0x87D101A9 (-2016345687) Syncml (425): sender does not have adequate access control permissions (ACL)", "where": "Intune admin center (profile status)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html", "also": [ "2278621609" ] }, { "error": "0x87D101F4 (-2016345612) Syncml (500): The recipient encountered an unexpected condition", "where": "Intune admin center (profile status)", "group": "Profile & compliance error codes", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html", "also": [ "2278621684" ] }, { "error": "0x87D136B0 (-2016332112) 4000: Cannot parse profile", "where": "Intune admin center (iOS profile status)", "group": "Profile & compliance error codes", "guide": "iOS/iPadOS configuration profiles failing in Intune: supervision, errors and conflicts", "url": "https://www.oeltayeb.com/articles/intune-ios-configuration-profile-errors-supervised.html", "also": [ "2278635184" ] }, { "error": "0x87D136B4 (-2016332108) 4004: User canceled installation", "where": "Intune admin center (iOS profile status)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html", "also": [ "2278635188" ] }, { "error": "0x87D136B5 (-2016332107) 4005: Passcode does not comply", "where": "Intune admin center (iOS profile status)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html", "also": [ "2278635189" ] }, { "error": "0x87D161A8 (-2016321112) 15000: Cannot install VPN", "where": "Intune admin center (iOS profile status)", "group": "Profile & compliance error codes", "guide": "Cisco, GlobalProtect, Zscaler and F5 VPN profiles in Intune: per-app VPN and errors", "url": "https://www.oeltayeb.com/articles/intune-vpn-profiles-cisco-paloalto-zscaler-f5-errors.html", "also": [ "2278646184" ] }, { "error": "0x87D1791D (-2016315107) 21005: Account not unique (Email Profile already exists on device)", "where": "Intune admin center (iOS profile status)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html", "also": [ "2278652189" ] }, { "error": "0x87D10194 (-2016345708) Syncml (404): The requested target was not found.", "where": "Intune admin center (profile status)", "group": "Profile & compliance error codes", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html", "also": [ "2278621588" ] }, { "error": "0x87D10195 (-2016345707) Syncml (405): The requested command is not allowed on the target.", "where": "Intune admin center (profile status)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html", "also": [ "2278621589" ] }, { "error": "0x87D10196 (-2016345706) Syncml (406): an optional feature in the request was not supported", "where": "Intune admin center (profile status)", "group": "Profile & compliance error codes", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html", "also": [ "2278621590" ] }, { "error": "0x87D10837 (-2016344009) (1403): Certificate not found", "where": "Intune admin center (profile status)", "group": "Profile & compliance error codes", "guide": "Wi-Fi or VPN profile not applying? Troubleshoot the SCEP/PKCS certificate chain in Intune", "url": "https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html", "also": [ "2278623287" ] }, { "error": "0x87D11388 (-2016341112) iOS device is currently busy", "where": "Intune admin center (iOS profile status)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html", "also": [ "2278626184" ] }, { "error": "0x87D19858 (-2016307112) 29000: Device not supervised", "where": "Intune admin center (iOS profile status)", "group": "Profile & compliance error codes", "guide": "iOS/iPadOS configuration profiles failing in Intune: supervision, errors and conflicts", "url": "https://www.oeltayeb.com/articles/intune-ios-configuration-profile-errors-supervised.html", "also": [ "2278660184" ] }, { "error": "65000: per-setting form of 0x87D1FDE8 Remediation failed (0xFDE8 = 65000)", "where": "Intune admin center (per-setting status)", "group": "Profile & compliance error codes", "guide": "Intune profile error 65000 and 0x87D1FDE8 (Remediation failed): causes and fixes", "url": "https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html", "also": [ "-2016281112", "2278686184" ] }, { "error": "A TPM isn't available for BitLocker (not present, made unavailable in the Registry, or OS on a removable drive)", "where": "Intune admin center (Encryption report)", "group": "Profile & compliance error codes", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "Antivirus / Antispyware: Not compliant (disabled or out of date)", "where": "Intune admin center (device compliance)", "group": "Profile & compliance error codes", "guide": "Defender Antivirus settings not applying from Intune: a troubleshooting checklist", "url": "https://www.oeltayeb.com/articles/defender-antivirus-policy-not-applying.html" }, { "error": "Encryption of data storage on a device: Not compliant", "where": "Intune admin center (device compliance)", "group": "Profile & compliance error codes", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "Enrolled user exists: Not compliant", "where": "Default Device Compliance Policy", "group": "Profile & compliance error codes", "guide": "Noncompliant on the Default Device Compliance Policy? The three built-in checks explained", "url": "https://www.oeltayeb.com/articles/default-device-compliance-policy-noncompliant.html" }, { "error": "Error (compliance setting): state kept up to 7 days, then Not compliant", "where": "Intune admin center (per-setting status)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html" }, { "error": "Firewall: Error (sync right after restart or wake) or Not compliant (GPO)", "where": "Intune admin center (device compliance)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html" }, { "error": "Has a compliance policy assigned: Not compliant", "where": "Default Device Compliance Policy", "group": "Profile & compliance error codes", "guide": "Noncompliant on the Default Device Compliance Policy? The three built-in checks explained", "url": "https://www.oeltayeb.com/articles/default-device-compliance-policy-noncompliant.html" }, { "error": "In grace period: noncompliant, but inside the admin-defined grace period", "where": "Intune admin center (compliance report)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html" }, { "error": "Is active: Not compliant", "where": "Default Device Compliance Policy", "group": "Profile & compliance error codes", "guide": "Noncompliant on the Default Device Compliance Policy? The three built-in checks explained", "url": "https://www.oeltayeb.com/articles/default-device-compliance-policy-noncompliant.html" }, { "error": "Not compliant: device failed one or more compliance settings", "where": "Intune admin center (device compliance)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html" }, { "error": "Not evaluated: no compliance result yet (new, userless or not checked in)", "where": "Intune admin center (compliance report)", "group": "Profile & compliance error codes", "guide": "Noncompliant on the Default Device Compliance Policy? The three built-in checks explained", "url": "https://www.oeltayeb.com/articles/default-device-compliance-policy-noncompliant.html" }, { "error": "Pending: device hasn't checked in to receive or report compliance status", "where": "Intune admin center (compliance report)", "group": "Profile & compliance error codes", "guide": "Intune device not checking in: diagnosing a Windows device that stopped syncing", "url": "https://www.oeltayeb.com/articles/intune-device-not-checking-in-sync-troubleshooting.html" }, { "error": "Recovery key backup failed.", "where": "Intune admin center (Encryption report)", "group": "Profile & compliance error codes", "guide": "BitLocker recovery key not in Microsoft Entra ID (event 846): escrow failures and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-recovery-key-not-escrowed-entra-intune.html" }, { "error": "Require BitLocker: Not compliant (health attestation, measured at boot)", "where": "Intune admin center (device compliance)", "group": "Profile & compliance error codes", "guide": "Intune health attestation is moving to Azure Attestation: prepare before compliance breaks", "url": "https://www.oeltayeb.com/articles/intune-health-attestation-azure-attestation-migration-compliance.html" }, { "error": "Require code integrity: Not compliant", "where": "Intune admin center (device compliance)", "group": "Profile & compliance error codes", "guide": "Intune health attestation is moving to Azure Attestation: prepare before compliance breaks", "url": "https://www.oeltayeb.com/articles/intune-health-attestation-azure-attestation-migration-compliance.html" }, { "error": "Require Secure Boot to be enabled on the device: Not compliant", "where": "Intune admin center (device compliance)", "group": "Profile & compliance error codes", "guide": "Intune health attestation is moving to Azure Attestation: prepare before compliance breaks", "url": "https://www.oeltayeb.com/articles/intune-health-attestation-azure-attestation-migration-compliance.html" }, { "error": "Require the device to be at or under the machine risk score: Not compliant", "where": "Intune admin center (device compliance)", "group": "Profile & compliance error codes", "guide": "Noncompliant on the Defender \"machine risk score\" setting: the end-to-end checklist", "url": "https://www.oeltayeb.com/articles/intune-noncompliant-machine-risk-score-defender-for-endpoint.html" }, { "error": "The BitLocker policy requires TPM+PIN protection for the OS volume, but a TPM+PIN protector isn't used.", "where": "Intune admin center (Encryption report)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html" }, { "error": "The BitLocker policy requires user consent to launch the BitLocker Drive Encryption Wizard ... but the user didn't consent.", "where": "Intune admin center (Encryption report)", "group": "Profile & compliance error codes", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "The encryption method of the OS volume doesn't match the BitLocker policy.", "where": "Intune admin center (Encryption report)", "group": "Profile & compliance error codes", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "The OS volume is unprotected.", "where": "Intune admin center (Encryption report)", "group": "Profile & compliance error codes", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "The TPM isn't ready for BitLocker.", "where": "Intune admin center (Encryption report)", "group": "Profile & compliance error codes", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "To encrypt drives, the BitLocker policy requires ... the AllowStandardUserEncryption policy must be set to 1.", "where": "Intune admin center (Encryption report)", "group": "Profile & compliance error codes", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "Trusted Platform Module (TPM): Not compliant (no TPM version)", "where": "Intune admin center (device compliance)", "group": "Profile & compliance error codes", "guide": "Intune profile and compliance error codes (65000, 0x87D1FDE8 and more): a quick reference", "url": "https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html" }, { "error": "Windows Recovery Environment (WinRE) isn't configured.", "where": "Intune admin center (Encryption report)", "group": "Profile & compliance error codes", "guide": "BitLocker silent encryption not starting on Intune-managed devices: causes and fixes", "url": "https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html" }, { "error": "Access denied: Intune can't talk to Apple (MDM server removed or token expired)", "where": "Intune admin center (enrollment program token)", "group": "Apple enrollment & MDM errors", "guide": "Apple ADE devices missing in Intune or stuck without an enrollment policy", "url": "https://www.oeltayeb.com/articles/apple-ade-devices-not-syncing-intune.html" }, { "error": "Account not onboarded: Company Portal not opened from Jamf Self Service (Jamf-managed Mac)", "where": "Company Portal (macOS, Jamf)", "group": "Apple enrollment & MDM errors", "guide": "Mac registration fails from Jamf Self Service: Company Portal, jamfAAD and Entra ID errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-device-registration-company-portal-jamfaad-errors.html" }, { "error": "AccountNotOnboarded: Apple MDM push (APNs) certificate not set up or expired (iOS/iPadOS)", "where": "Company Portal (iOS/iPadOS)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "An error occurred while uploading the Enrollment Program token. (AjaxError: ajaxExtended call failed)", "where": "Intune admin center (token upload)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "APNSCertificateNotValid: problem with the certificate that lets the device talk to your company's network", "where": "Company Portal (iOS/iPadOS)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Apple profile not found: ADE enrollment profile not found (several possible causes)", "where": "Intune admin center (enrollment program token)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Company Portal Temporarily Unavailable: app out of date or corrupted, or the device limit was reached", "where": "Company Portal (iOS/iPadOS)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Cursor expired: ADE sync cursor expired on Intune's side", "where": "Intune admin center (enrollment program token)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Device is already enrolled: earlier Intune registration not cleaned up (Jamf-managed Mac)", "where": "Company Portal (macOS, Jamf)", "group": "Apple enrollment & MDM errors", "guide": "Mac registration fails from Jamf Self Service: Company Portal, jamfAAD and Entra ID errors", "url": "https://www.oeltayeb.com/articles/jamf-pro-device-registration-company-portal-jamfaad-errors.html" }, { "error": "DeviceCapReached: Too many mobile devices are enrolled already", "where": "Company Portal (iOS/iPadOS)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "DeviceTypeNotSupported: the device type you're trying to enroll isn't supported", "where": "Company Portal (iOS/iPadOS)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "error code:-25244 (errSecInvalidOwnerEdit): stale or corrupted Intune keychain entries", "where": "Company Portal log (macOS)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Expired or invalid token: ADE token expired, revoked or malformed", "where": "Intune admin center (enrollment program token)", "group": "Apple enrollment & MDM errors", "guide": "Apple ADE devices missing in Intune or stuck without an enrollment policy", "url": "https://www.oeltayeb.com/articles/apple-ade-devices-not-syncing-intune.html" }, { "error": "Internal server error: ADE token sync needs investigation by Intune support", "where": "Intune admin center (enrollment program token)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Invalid configuration profile name: ADE enrollment profile name invalid, empty or too long", "where": "Intune admin center (enrollment program token)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Invalid cursor: ADE sync cursor rejected by Apple or not found", "where": "Intune admin center (enrollment program token)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Invalid department entry: the ADE enrollment profile's department field is invalid", "where": "Intune admin center (enrollment program token)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Invalid support phone number: the ADE enrollment profile's support phone number is invalid", "where": "Intune admin center (enrollment program token)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "It looks like you're using a virtual machine. Make sure you've fully configured your virtual machine...", "where": "Company Portal (macOS)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Looks like your IT admin hasn't set an MDM authority. Get help from your IT admin or try again later.", "where": "Company Portal", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "MdmAuthorityNotDefined: the mobile device management authority hasn't been defined", "where": "Company Portal", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "NoEnrollmentPolicy: No enrollment policy found (APNs certificate missing, invalid or expired)", "where": "Company Portal (iOS/iPadOS)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Profile Installation Failed. A Network Error Has Occurred. (iOS/iPadOS problem on the device)", "where": "iPhone/iPad (Settings)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Profile Installation Failed. Connection to the server could not be established.", "where": "iPhone/iPad (Settings)", "group": "Apple enrollment & MDM errors", "guide": "Migrating Macs and iPhones from Jamf Pro to Intune: ADE reassignment and a cut-over plan", "url": "https://www.oeltayeb.com/articles/migrate-macs-iphones-from-jamf-pro-to-intune.html" }, { "error": "Profile Installation Failed. The new MDM payload does not match the old payload. (profile already installed)", "where": "iPhone/iPad (Settings)", "group": "Apple enrollment & MDM errors", "guide": "Migrating Macs and iPhones from Jamf Pro to Intune: ADE reassignment and a cut-over plan", "url": "https://www.oeltayeb.com/articles/migrate-macs-iphones-from-jamf-pro-to-intune.html" }, { "error": "Profile installation failed: management profile didn't install (licence, other MDM, old profile, Safari cookies)", "where": "iPhone/iPad (Settings)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Required cursor: ADE sync cursor wasn't initially set by Intune", "where": "Intune admin center (enrollment program token)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Terms and conditions not accepted: new Apple Business or Apple School Manager terms", "where": "Intune admin center (enrollment program token)", "group": "Apple enrollment & MDM errors", "guide": "Apple ADE devices missing in Intune or stuck without an enrollment policy", "url": "https://www.oeltayeb.com/articles/apple-ade-devices-not-syncing-intune.html" }, { "error": "The configuration for your iPhone/iPad couldn't be downloaded from : Invalid Profile", "where": "iPhone/iPad (enrollment)", "group": "Apple enrollment & MDM errors", "guide": "Apple ADE devices missing in Intune or stuck without an enrollment policy", "url": "https://www.oeltayeb.com/articles/apple-ade-devices-not-syncing-intune.html" }, { "error": "User Name Not Recognized. This user account isn't authorized to use Microsoft Intune. (no Intune licence)", "where": "Company Portal (iOS/iPadOS)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "UserLicenseTypeInvalid: user not in a required group or missing the correct licence", "where": "Company Portal (iOS/iPadOS)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "We're having trouble getting your device managed. (VM, restricted serial number or device assigned to someone else)", "where": "Company Portal (macOS)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Workplace Join failed: Company Portal app out of date or corrupted", "where": "Company Portal (iOS/iPadOS)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "XPC_TYPE_ERROR Connection invalid: the device can't reach Apple's ADE service", "where": "iPhone/iPad device log (ADE Setup Assistant)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Your IT admin hasn't given you access to use this app. Get help from your IT admin or try again later. (no licence)", "where": "Company Portal", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "Your Mac cannot be enrolled at this time: Company Portal enrollment failed (check the log for -25244)", "where": "Company Portal (macOS)", "group": "Apple enrollment & MDM errors", "guide": "iPhone, iPad and Mac enrollment and MDM errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html" }, { "error": "AADSTS53000 DeviceNotCompliant in the Chrome tab during corporate-owned setup", "where": "Microsoft Entra sign-in log", "group": "Android enrollment & management errors", "guide": "AADSTS53000 vs AADSTS53003: troubleshooting Conditional Access sign-in blocks", "url": "https://www.oeltayeb.com/articles/aadsts53000-aadsts53003-conditional-access-blocks.html" }, { "error": "Block USB debugging on device: Not compliant", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Check strong integrity: Not compliant (device fails or doesn't support the check)", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Company Portal app runtime integrity or Intune app runtime integrity: Not compliant", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Company Portal Temporarily Unavailable", "where": "Company Portal (enrollment)", "group": "Android enrollment & management errors", "guide": "Android Enterprise work profile enrollment failures: what to check", "url": "https://www.oeltayeb.com/articles/android-work-profile-enrollment-failures.html" }, { "error": "DeviceCapReached", "where": "Company Portal (enrollment)", "group": "Android enrollment & management errors", "guide": "Android Enterprise work profile enrollment failures: what to check", "url": "https://www.oeltayeb.com/articles/android-work-profile-enrollment-failures.html" }, { "error": "Google Play Services is configured: Not compliant", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Looks like your IT admin hasn't set an MDM authority. Get help from your IT admin or try again later.", "where": "Company Portal", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Maximum OS version: access blocked, user asked to contact IT", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "MDM authority not defined", "where": "Company Portal (enrollment)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Minimum OS version: Not compliant", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Minimum security patch level: Not compliant", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Not evaluated: dedicated device compliance policy targeted at users", "where": "Intune admin center (compliance report)", "group": "Android enrollment & management errors", "guide": "Android Enterprise dedicated devices: Managed Home Screen kiosks and shared device sign-in", "url": "https://www.oeltayeb.com/articles/android-enterprise-dedicated-devices-managed-home-screen.html" }, { "error": "Play Integrity Verdict (Check basic integrity & device integrity): Not compliant", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Play Integrity Verdict (Check basic integrity): Not compliant", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Profile installation failed", "where": "Android device (enrollment)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Require the device to be at or under the Device Threat Level: Not compliant", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Intune MTD connectors (Lookout, Zimperium, Check Point): setup, threat levels and errors", "url": "https://www.oeltayeb.com/articles/intune-mobile-threat-defense-connectors-lookout-zimperium-checkpoint.html" }, { "error": "Require the device to be at or under the machine risk score: Not compliant", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Noncompliant on the Defender \"machine risk score\" setting: the end-to-end checklist", "url": "https://www.oeltayeb.com/articles/intune-noncompliant-machine-risk-score-defender-for-endpoint.html" }, { "error": "Rooted devices: Not compliant", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Symptom: Android 12+ users must update the device password (Password complexity)", "where": "Android device / compliance", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Symptom: can't create a work profile", "where": "Company Portal (work profile setup)", "group": "Android enrollment & management errors", "guide": "Android Enterprise work profile enrollment failures: what to check", "url": "https://www.oeltayeb.com/articles/android-work-profile-enrollment-failures.html" }, { "error": "Symptom: can't create policy or enroll devices (special characters in the company name)", "where": "Intune admin center / enrollment", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Symptom: dedicated device users can't sign in to Conditional Access-protected resources", "where": "Microsoft Entra sign-in log", "group": "Android enrollment & management errors", "guide": "Android Enterprise dedicated devices: Managed Home Screen kiosks and shared device sign-in", "url": "https://www.oeltayeb.com/articles/android-enterprise-dedicated-devices-managed-home-screen.html" }, { "error": "Symptom: device not grouped at enrollment (staging token doesn't support enrollment time grouping)", "where": "Intune admin center (enrollment profile)", "group": "Android enrollment & management errors", "guide": "Android fully managed and COPE enrollment errors in Intune: tokens, QR codes and sign-in", "url": "https://www.oeltayeb.com/articles/android-fully-managed-cope-enrollment-errors-intune.html" }, { "error": "Symptom: device passcode reset not supported (work profile devices)", "where": "Intune admin center (device actions)", "group": "Android enrollment & management errors", "guide": "Intune wipe, retire, Fresh Start and Autopilot Reset: what each removes and why they fail", "url": "https://www.oeltayeb.com/articles/intune-device-actions-wipe-retire-fresh-start-errors.html" }, { "error": "Symptom: dynamic group on enrollmentProfileName stays empty (default enrollment profile)", "where": "Microsoft Entra ID (dynamic group)", "group": "Android enrollment & management errors", "guide": "Dynamic device groups for Intune: membership rules that actually work", "url": "https://www.oeltayeb.com/articles/dynamic-device-groups-intune-rules.html" }, { "error": "Symptom: encryption is required when a device is enrolled (expected)", "where": "Android device (work profile setup)", "group": "Android enrollment & management errors", "guide": "Android Enterprise work profile enrollment failures: what to check", "url": "https://www.oeltayeb.com/articles/android-work-profile-enrollment-failures.html" }, { "error": "Symptom: enrollment fails because Google Play services is out of date", "where": "Android device (enrollment)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Symptom: enrollment token no longer works (revoked, replaced or expired staging token)", "where": "Android setup (QR code or token entry)", "group": "Android enrollment & management errors", "guide": "Android fully managed and COPE enrollment errors in Intune: tokens, QR codes and sign-in", "url": "https://www.oeltayeb.com/articles/android-fully-managed-cope-enrollment-errors-intune.html" }, { "error": "Symptom: enrollments fail after an assigned enrollment profile was renamed", "where": "Android setup", "group": "Android enrollment & management errors", "guide": "Android fully managed and COPE enrollment errors in Intune: tokens, QR codes and sign-in", "url": "https://www.oeltayeb.com/articles/android-fully-managed-cope-enrollment-errors-intune.html" }, { "error": "Symptom: Google Play Protect settings fail where Google Mobile Services isn't available", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Symptom: Managed Google Play Last Sync time hasn't been updated in days (expected)", "where": "Intune admin center (Managed Google Play)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Symptom: Microsoft Authenticator can't be uninstalled on fully managed devices (expected)", "where": "Android device", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Symptom: registration lost or marked noncompliant (Company Portal earlier than 5.0.5421.0)", "where": "Company Portal / compliance report", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Symptom: Wipe (Factory Reset) option isn't available for a work profile device (expected)", "where": "Intune admin center (device actions)", "group": "Android enrollment & management errors", "guide": "Intune wipe, retire, Fresh Start and Autopilot Reset: what each removes and why they fail", "url": "https://www.oeltayeb.com/articles/intune-device-actions-wipe-retire-fresh-start-errors.html" }, { "error": "Symptom: work profile can't be set up where Android Enterprise isn't available", "where": "Company Portal (work profile setup)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Symptom: work profile enrollment from a secondary user account (not supported)", "where": "Company Portal (work profile setup)", "group": "Android enrollment & management errors", "guide": "Android Enterprise work profile enrollment failures: what to check", "url": "https://www.oeltayeb.com/articles/android-work-profile-enrollment-failures.html" }, { "error": "Symptom: zero-touch or Knox Mobile Enrollment still uses an old token", "where": "Zero-touch portal / Knox Mobile Enrollment", "group": "Android enrollment & management errors", "guide": "Android zero-touch enrollment with Intune: reseller setup, DPC extras and common errors", "url": "https://www.oeltayeb.com/articles/intune-android-zero-touch-enrollment-reseller-dpc-extras.html" }, { "error": "Up-to-date security provider: Not compliant", "where": "Intune admin center (device compliance)", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" }, { "error": "Your IT admin hasn't given you access to use this app. Get help from your IT admin or try again later.", "where": "Company Portal", "group": "Android enrollment & management errors", "guide": "Android Enterprise enrollment and management errors in Intune: a quick reference", "url": "https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html" } ] }