Can't AAD join windows 10 "Administrator policy does not allow user...to device join" error 801c03ed

Nigel-A 

I found my issue. This setting was set to none because other people played with the settings in intune... I though that by default its set on ALL.

You should also check MAM and MEM  and see whats set up there

If it's set to ALL then all users go into the scope if some, then check which user groups.

Also>check if the users are in the correct groups.

       >check licences

       >check how many devices can a user enroll

I'm also quite a newbie and I just started playing with Intune. Tell me if the rest of the settings are ok.

Cheers!