1,631 questions with Microsoft Security | Intune | Enrollment tags

Sort by: Updated
0 answers

Azure AIK trust pool

Same failure on another platform. Device: MSI Katana 17 HX, BIOS E17L7IMS.108. TPM: Intel PTT 2.0, manufacturer version 600.18.1042.2872, spec 1.38. EK issuer: CN=CSME ADL PTT 01SVN (NotBefore 23/06/2021, NotAfter 01/01/2050). EK cert is present locally…

Microsoft Security | Intune | Enrollment
asked 2026-10-01T22:44:10.3433333+00:00
wahren watson 0 Reputation points
0 answers

Azure AIK enrollment returns HTTP 400 (0x80190190) for EK signed by "CSME ADL PTT 01SVN" — Intel PTT CA appears missing from AIK trust pool

My desktop fails Windows AIK certificate enrollment on every attempt, blocking TPM attestation for consumer applications. System: MSI PRO Z790-P WIFI (Z790 chipset, Raptor Lake), TPM 2.0 via Intel PTT, Windows 11 (fully updated), Secure Boot enforcing…

Microsoft Security | Intune | Enrollment
asked 2026-07-20T02:02:07.6133333+00:00
Nick Derbawka 0 Reputation points
commented 2026-10-01T22:30:01.86+00:00
wahren watson 0 Reputation points
0 answers

Entra ID Free: what happens to already joined and Intune-enrolled PCs if I reset the MDM user scope to "None" after Intune licenses were removed?

I have a Microsoft 365 nonprofit tenant on the Microsoft Entra ID Free plan, with users on Business Basic. Previously I had higher-tier licenses (Business Premium) included in the nonprofit offer, which have now been removed. With those licenses I joined…

Microsoft Security | Intune | Enrollment
asked 2026-10-01T12:28:07.1233333+00:00
Luigi D'Acunto 0 Reputation points
0 answers

GSA macOS client: Disable button in Connections window can't be hidden; Compliant Network CA only blocks new M365 sign-ins, not other traffic

We've deployed GSA (Internet Access + TLS inspection) to macOS via Intune and have two open questions: 1. Can't hide/gate the "Disable" button in the new Connections window Since client v1.1.26060207, "Disable" appears in two places:…

Microsoft Security | Intune | Enrollment
asked 2026-09-30T13:20:59.66+00:00
Maha Atif 0 Reputation points
1 answer

How to remove organization from managing my device

Hi, I was logging into Microsoft Excel on my personal laptop for work when I accidentally pressed the "Allow my organization to manage my device." How can remove the access for my employer to access my personal computer? I don't want the…

Microsoft Security | Intune | Enrollment
asked 2026-09-23T07:57:28.4466667+00:00
Dana Beretta (NHS Lothian) 0 Reputation points
answered 2026-09-23T07:57:43.2733333+00:00

AI answer

1 answer

Compliant macOS device still blocked by Conditional Access from accessing SharePoint

Description: I'm trying to access my company's SharePoint site from a macOS device (MacBook Pro, M2, 2022) that I've enrolled as BYOD via Microsoft Intune Company Portal. Current status: Company Portal shows the device as "In compliance" …

Microsoft Security | Intune | Enrollment
asked 2026-09-17T17:04:36.0966667+00:00
Ivanya Amadea Clara Sianipar 0 Reputation points
answered 2026-09-18T00:59:31.9466667+00:00
takeig 0 Reputation points
1 answer

Intune device enrolment for Hybrid AD joined machine

Facing issues while enrolling a machine(Hybrid join) to Intune via GPO, however the machine shows the MDM URL's correctly checked through dsregcmd /status. Still the machine is not enrolling over Intune Portal. Checked the Hybrid join-SCP…

Microsoft Security | Intune | Enrollment
asked 2026-09-07T08:58:23.89+00:00
Gaurav Nigota 0 Reputation points
edited an answer 2026-09-17T00:39:56.28+00:00
Anthony Porter 390 Reputation points
3 answers

Azure AIK enrollment fails 0x80190190 - Intel ODCA 2 CSME MTP PCH SVN 01 PTT CA missing from trust pool - blocking Call of Duty

Azure AIK enrollment fails with HTTP 400 / 0x80190190 ("No valid TPM EK/Platform certificate provided in the TPM identity request message") on Intel CSME MTP PTT platform, blocking TPM attestation for Call of Duty (RICOCHET Anti-Cheat, Season…

Microsoft Security | Intune | Enrollment
asked 2026-08-02T22:06:36.86+00:00
javier 0 Reputation points
commented 2026-09-11T08:30:51.1+00:00
麒麟 白 5 Reputation points
2 answers

Switching Automatic Enrollment MDM User Scope from None to All

Hi, I'm trying to setup OOBE on some laptops for the first time and I have everything working except it won't let me change the MDM User Scope from 'None' to 'All'. Just to be clear, I can actually click on All, but the save button remains greyed out. …

Microsoft Security | Intune | Enrollment
asked 2026-04-24T17:18:05.0866667+00:00
Michael Anglen 0 Reputation points
answered 2026-09-08T21:09:52.3133333+00:00
Jackson Hellemn 0 Reputation points
1 answer

Intune Let's keep your account secure

Hi, Background, we are a college who are using MFA for staff using MS Authenticator and Temporary Access Pass codes. Currently have activated Authentication methods (in Migration Complete mode) - Policies and using Microsoft Authenticator and Temporary…

Microsoft Security | Intune | Enrollment
asked 2026-09-01T00:31:36.46+00:00
Anthony Hill 6 Reputation points
answered 2026-09-01T00:31:52.1666667+00:00

AI answer

1 answer

Intune Certificate enrollment

Hi, users are able to enrollment intune auto enroll certificate through internet, when they are trying to connect their devices through intranet or corporate network they are not able to enroll certificate and dont have that option not sure whats…

Microsoft Security | Intune | Enrollment
asked 2026-08-28T03:12:02.7533333+00:00
Sanjit Kumar 0 Reputation points
edited an answer 2026-08-30T20:11:40.49+00:00
Zoha Fatima 510 Reputation points
0 answers

Graph API for importDeviceIdentityList is not working

I have an application which queries POST /deviceManagement/importedDeviceIdentities/importDeviceIdentityList API to import device list to Intune. I have given all the right permission as mentioned in the documentation. I am able to fetch access Token but…

Microsoft Security | Intune | Enrollment
asked 2026-08-27T06:23:36.3466667+00:00
Prox 5 Reputation points
commented 2026-08-27T08:02:28.8466667+00:00
Vasil Michev 128.1K Reputation points MVP Volunteer Moderator
0 answers

Azure AIK enrollment fails with HTTP 400 (0x80190190) – Intel ODCA 2 CSME P_ADL 00002983 Issuing CA I am experiencing a TPM AIK attestation failure that prevents Call of Duty from passing its hardware security attestation requirement.

System: ASUS PRIME B760-PLUS Intel Core i5-14500F BIOS 1836 Windows 11 Pro 25H2 OS Build 26200.9168 Intel PTT / INTC TPM TPM 2.0 TPM firmware: 600.18.1040.2765 Secure Boot: On BIOS Mode: UEFI Local TPM health checks pass: TpmPresent: True…

Microsoft Security | Intune | Enrollment
asked 2026-08-22T11:56:27.7466667+00:00
Talal Abushal 5 Reputation points
commented 2026-08-24T02:54:36.66+00:00
栋 罗 0 Reputation points
0 answers

Azure AIK enrollment returns HTTP 400 (0x80190190) — Intel ODCA 2 CSME P_MTP PCH 00003145 Issuing CA missing from Microsoft AIK trust pool

TPM AIK certificate enrollment against the Microsoft Azure AIK service fails with HTTP 400 / 0x80190190 ("No valid TPM EK/Platform certificate provided in the TPM identity request message"). The device TPM is healthy, ready, and capable for…

Microsoft Security | Intune | Enrollment
asked 2026-06-25T03:34:11.5966667+00:00
Michael Doyle 5 Reputation points
commented 2026-08-22T09:04:01.2333333+00:00
B.Cobra 10 Reputation points
2 answers

Windows 11 Pro Upgrade and Intune Enrollment with Low Disk Space

Hi Team, In our organization, we enroll user devices into Microsoft Intune and onboard them to Microsoft Defender for endpoint management. We currently have a user device running Windows 11 Home with a local administrator account. We are planning to…

Microsoft Security | Intune | Enrollment
asked 2026-08-19T08:44:37.1+00:00
Ravin 0 Reputation points
answered 2026-08-19T12:11:18.5733333+00:00
Marcin Policht 109.6K Reputation points MVP Volunteer Moderator
1 answer

Intune Device Enrollment Error Code: 80192EFE

Hi, We have rolled out Intune to all our devices and have had no issues until now. This is the error that we are getting when enrolling the laptop. I have checked and removed all other accounts enrolled, but still continue to get this error. Can you…

Microsoft Security | Intune | Enrollment
Microsoft Security | Intune | Other
asked 2023-06-08T06:14:07.46+00:00
Gail MIC Global 5 Reputation points
commented 2026-08-18T10:45:06.4633333+00:00
Bhushan Kawane 0 Reputation points
1 answer

Intune reports devices non-compliant on BitLocker after Windows 11 25H2 — no TPM key protector is created, only ProtectorType 0x3

DETAILS Environment Windows 11 25H2, build 10.0.26200 Dell Precision 7680, BIOS 1.27.1 Microsoft Intune, Entra-joined (MDMDeviceWithAAD) Compliance grace period: 3 days Affects every device, regardless of make or model Problem Enrollment…

Microsoft Security | Intune | Enrollment
asked 2026-08-17T13:30:19.25+00:00
DanielS 0 Reputation points
answered 2026-08-17T13:31:38.1733333+00:00
DanielS 0 Reputation points
1 answer

InTune Licenses

Can we use the Intune suite licenses from our E3 licenses on individual mobile devices not necessarily tied to the E3 account owner?

Microsoft Security | Intune | Enrollment
asked 2026-08-12T22:33:18.42+00:00
Alexia Martinez 0 Reputation points
answered 2026-08-13T01:37:14.2933333+00:00
Marcin Policht 109.6K Reputation points MVP Volunteer Moderator
1 answer

Error with MDM user license - server error code 80180018

Hello, one of our users is trying to register a new computer and this message comes over and over. Did anyone find a fix around this issue? Moved from Exchange Exchange Server Management

Microsoft Security | Intune | Enrollment
asked 2025-12-02T13:18:32.5333333+00:00
Gaby Mindreci 0 Reputation points
commented 2026-08-08T21:03:28.57+00:00
Mohammed, Adam 0 Reputation points
1 answer

Several devices not able to enroll into Intune.

We have several devices that are able to enroll into Intune. No user is able to enroll. Not an admin. Not a DEM. No one. I have dsregcmd /leave multiple times and same result. What I have been able to determine is that the Enterprise Management…

Microsoft Security | Intune | Enrollment
asked 2026-08-05T16:56:27.4366667+00:00
Joseph Martinez 0 Reputation points
commented 2026-08-05T20:54:54.9833333+00:00
Joseph Martinez 0 Reputation points