Home

Guided Access enrollment issues

%3CLINGO-SUB%20id%3D%22lingo-sub-364368%22%20slang%3D%22en-US%22%3EGuided%20Access%20enrollment%20issues%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-364368%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20recently%20switched%20over%20our%20DEP%20enrollment%20process%20to%20use%20VPP%20to%20download%20the%20company%20portal%20and%20then%20using%20locked%20enrollment%20(guided%20access)%20to%20force%20the%20user%20to%20enroll%20their%20iOS%20devices%20into%20Intune.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20running%20into%20a%20few%20issues%2C%20if%20the%20user%20is%20on%20wifi%20only%20(majority%20of%20our%20iPads)%20and%20for%20whatever%20reason%20leaves%20the%20WiFi%20network%2C%20they%20cannot%20reconnect%20to%20the%20network%20as%20there%20doesn't%20seem%20to%20be%20a%20wayto%20break%20out%20of%20the%20guided%20access%20mode.%20They%20are%20then%20presented%20with%20a%20screen%20that%20says%20%22Guided%20Access%20is%20unavailable.%20Please%20contract%20an%20administrator%22%20is%20there%20anything%20we%20can%20do%20at%20this%20stage%20other%20than%20connecting%20to%20a%20computer%20and%20wipe%20the%20device%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnother%20issue%20we%20are%20running%20into%20with%20some%20devices%20is%20they%20seem%20to%20be%20locked%20into%20guided%20access%20mode%20and%20unable%20to%20switch%20to%20Safari%20to%20download%20the%20management%20profile%2C%20the%20error%20they%20are%20presented%20with%20is%20%22Could%20not%20add%20your%20device.%20Safari%20has%20been%20disabled%2C%20Please%20contact%20your%20administrator.%22%20I'm%20not%20sure%20what%20users%20are%20doing%20to%20get%20to%20this%20state%2C%20but%20is%20there%20any%20way%20to%20troubleshoot%20these%20devices%20other%20than%20wiping%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-364368%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EApple%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eapple%20dep%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDevice%20enrollment%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eguided%20access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-369337%22%20slang%3D%22en-US%22%3ERe%3A%20Guided%20Access%20enrollment%20issues%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-369337%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F252067%22%20target%3D%22_blank%22%3E%40kkeirstead%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUse%20the%20Mac%20as%20a%20caching%20server%20for%20Applications%2C%20iCloud%20and%20iOS%20Update%20content%20on%20the%20local%20network.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWorth%20a%20try%20if%20you%20have%20one%20sitting%20around%20that%20can%20be%20connected%20to%20the%20same%20network.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.apple.com%2Fen-nz%2Fguide%2Fmac-help%2Fmanage-content-caching-on-mac-mchl3b6c3720%2Fmac%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.apple.com%2Fen-nz%2Fguide%2Fmac-help%2Fmanage-content-caching-on-mac-mchl3b6c3720%2Fmac%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%2CAndrew%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-366841%22%20slang%3D%22en-US%22%3ERe%3A%20Guided%20Access%20enrollment%20issues%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-366841%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F250456%22%20target%3D%22_blank%22%3E%40AndrewDawson%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20your%20reply%2C%20but%20all%20of%20our%20issues%20are%20on%20iPhone%20and%20iPads%2C%20I%20don't%20believe%20there%20is%20a%20way%20to%20cache%20the%20servers%20for%20iPhones%20and%20iPads%20is%20there%3F%20All%20of%20the%20devices%20are%20coming%20directly%20from%20Apple%20and%20will%20have%20the%20latest%20versions%20of%20iOS%20or%20should%20be.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-365122%22%20slang%3D%22en-US%22%3ERe%3A%20Guided%20Access%20enrollment%20issues%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-365122%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F252067%22%20target%3D%22_blank%22%3E%40kkeirstead%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20experienced%20the%20same%20issue%20on%20a%20number%20of%20occasions%2C%20I%20have%20found%3B%3C%2FP%3E%3CUL%3E%3CLI%3EiOS%20OS%26nbsp%3B%20version%20needs%20to%20be%20%26gt%3B%3D12.0%3C%2FLI%3E%3CLI%3ESlower%20networks%20increase%20the%20frequency%20of%20the%20issue%20(testing%20over%20Ethernet%20does%20not%20have%20the%20same%20issue)%26nbsp%3B%3C%2FLI%3E%3CLI%3ECaching%20servers%20help%20reduce%20the%20issue%20by%20providing%20local%20content%20(if%20you%20have%20a%20Mac%20you%20can%20test%20this%20out)%3C%2FLI%3E%3C%2FUL%3E%3CP%3EYou%20could%20try%20and%20capture%20xCode%20logs%20from%20a%20connected%20Mac%20shortly%20after%20the%20device%20starts%20up%2C%20hopefully%20there%20is%20enough%20time%20to%20accept%20any%20prompts%20before%20guided%20access%20kicks%20in.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%2CAndrew%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-747206%22%20slang%3D%22en-US%22%3ERe%3A%20Guided%20Access%20enrollment%20issues%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-747206%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3E%3CBR%20%2F%3EDid%20you%20ever%20get%20anywhere%20with%20this%3F%20We're%20now%20facing%20the%20same%20issue.%20Looking%20at%20migrating%20from%20Airwatch%20to%20Intune%20with%20brand%20new%20iphone%207's%20and%20this%20is%20really%20holding%20things%20up.%3C%2FLINGO-BODY%3E
kkeirstead
Occasional Contributor

We recently switched over our DEP enrollment process to use VPP to download the company portal and then using locked enrollment (guided access) to force the user to enroll their iOS devices into Intune.

 

We are running into a few issues, if the user is on wifi only (majority of our iPads) and for whatever reason leaves the WiFi network, they cannot reconnect to the network as there doesn't seem to be a wayto break out of the guided access mode. They are then presented with a screen that says "Guided Access is unavailable. Please contract an administrator" is there anything we can do at this stage other than connecting to a computer and wipe the device?

 

Another issue we are running into with some devices is they seem to be locked into guided access mode and unable to switch to Safari to download the management profile, the error they are presented with is "Could not add your device. Safari has been disabled, Please contact your administrator." I'm not sure what users are doing to get to this state, but is there any way to troubleshoot these devices other than wiping?

4 Replies

Hi @kkeirstead 

 

I have experienced the same issue on a number of occasions, I have found;

  • iOS OS  version needs to be >=12.0
  • Slower networks increase the frequency of the issue (testing over Ethernet does not have the same issue) 
  • Caching servers help reduce the issue by providing local content (if you have a Mac you can test this out)

You could try and capture xCode logs from a connected Mac shortly after the device starts up, hopefully there is enough time to accept any prompts before guided access kicks in.

 

,Andrew

 

Hi @AndrewDawson 

 

Thanks for your reply, but all of our issues are on iPhone and iPads, I don't believe there is a way to cache the servers for iPhones and iPads is there? All of the devices are coming directly from Apple and will have the latest versions of iOS or should be.

Hi @kkeirstead 

 

Use the Mac as a caching server for Applications, iCloud and iOS Update content on the local network.

 

Worth a try if you have one sitting around that can be connected to the same network.

https://support.apple.com/en-nz/guide/mac-help/manage-content-caching-on-mac-mchl3b6c3720/mac

 

,Andrew

Highlighted
Hi,

Did you ever get anywhere with this? We're now facing the same issue. Looking at migrating from Airwatch to Intune with brand new iphone 7's and this is really holding things up.
Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies