VPP Apps Not Installing via Intune – Error 0x87D127DB Despite Valid Configuration

Hi everyone,

I wanted to share my recent experience that might be helpful to others dealing with firewall configurations and Apple service integrations.

At the request of management, I implemented a policy to block streaming services via our firewall. To do this efficiently, I used the vendor’s built-in web filtering categories, as manually blocking every streaming provider is practically unmanageable.

Unfortunately, I lost sight of this change over time. What I didn’t realize—and what isn’t clearly documented by the vendor—is that the selected category also blocks essential Apple services. Specifically, it interferes with the communication between Apple Business Manager (ABM) and Microsoft Intune. This behavior is reproducible and was the root cause of the issues we encountered.

To be clear: The issue was not caused by Apple Business Manager or Intune, but solely by the firewall configuration.

I’m now working on a more targeted approach to block streaming content without disrupting ABM–Intune connectivity.

Best regards,
MSThomK​