%3CLINGO-SUB%20id%3D%22lingo-sub-294412%22%20slang%3D%22en-US%22%3EKnown%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-294412%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSTRONG%3EBy%20Lee%20Yan%20%7C%20Intune%20Sr.%20Software%20Engineer%20on%20the%26nbsp%3BEnterprise%20Mobility%20and%20Customer%20Experience%20Team%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20recently%20had%20a%20case%20escalated%20through%20all%20levels%20of%20support%20which%20took%20quite%20some%20time%20to%20troubleshoot.%20After%20working%20with%20engineering%20to%20replicate%20and%20then%20pinpoint%20the%20issue%2C%20we%20decided%20it%20would%20be%20useful%20to%20post%20a%20known%20issue%20just%20in%20case%20you've%20run%20into%20this.%20We'll%20update%20this%20post%20when%20it's%20resolved.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EThe%20scenario%3C%2FSTRONG%3E%3A%20When%20following%20the%20steps%20in%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fapple-configurator-enroll-ios%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ethis%20document%3C%2FA%3E%20(Enroll%20iOS%20devices%20with%20Apple%20Configurator)%20for%20Setup%20Assistant%20enrollment%2C%20you%20get%20%E2%80%9CInvalid%20Profile%3A%20The%20configuration%20for%20your%20iPad%2FiPhone%20could%20not%20be%20downloaded%20from%20%5BYour%20Organization%20Name%5D%E2%80%9D%20error%20after%20accepting%20%E2%80%9CApply%20configuration%E2%80%9D%20on%20the%20device.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EWhat%20is%20happening%20behind%20the%20scenes%3C%2FSTRONG%3E%3A%20The%20enrollment%20URL%20for%20the%20MDM%20server%20created%20with%20Apple%20Configurator%20did%20not%20get%20resolved%20successfully%20or%20was%20manually%20edited.%20A%20valid%20URL%20should%20start%20with%20%3CA%20href%3D%22https%3A%2F%2Fna01.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fmanage.microsoft.com%252FEnrollmentServer%252FDiscovery.svc%252FiOS%252FESProxy%26amp%3Bdata%3D04%257C01%257Ccacamp%2540microsoft.com%257C268fea68a91b43cfe7ae08d657223f87%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C636792201930210621%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C-1%26amp%3Bsdata%3D8AVertUZ27sl2DfSoIIwpDPqzUEstDAFe%252FzjzunGeVE%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmanage.microsoft.com%2FEnrollmentServer%2FDiscovery.svc%2FiOS%2FESProxy%3C%2FA%3E%3F%20while%20an%20invalid%20URL%20usually%20starts%20with%20%3CA%20href%3D%22https%3A%2F%2Fappleconfigurator2.manage.microsoft.com%2FMDMServiceConfig%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fappleconfigurator2.manage.microsoft.com%2FMDMServiceConfig%3C%2FA%3E%3F%20which%20is%20usually%20the%20original%20profile%20URL%20you%20copied%20from%20the%20Intune%20console%20for%20Setup%20Assistant%20Enrollment.%20The%20issue%20does%20not%20affect%20Direct%20Enrollment%20scenario.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EWorkaround%3C%2FSTRONG%3E%3A%20Fortunately%2C%20there's%20a%20relatively%20simple%20workaround.%20Just%20replace%20the%20invalid%20URL%20portion%20with%20the%20valid%20URL%20portion%20for%20the%20MDM%20server%20on%20the%20Mac%20computer%2C%20then%20try%20preparing%20the%20device%20again.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAgain%2C%20we'll%20update%20this%20post%20when%20the%20issue%20is%20fixed.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-294412%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20this%20post%20we%20briefly%20share%20a%20known%20issue%20-%20an%20invalid%20profile%20error%20when%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%20with%20Setup%20Assistant%20enrollment.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-294412%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eknown%20issue%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-795746%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-795746%22%20slang%3D%22en-US%22%3E%3CP%3EAny%20updates%20on%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-905784%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-905784%22%20slang%3D%22en-US%22%3E%3CP%3E10%20months%20later%2C%20any%20update%20on%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1079456%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1079456%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F222920%22%20target%3D%22_blank%22%3E%40Mahmoud%20Taleb%3C%2FA%3E%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F389378%22%20target%3D%22_blank%22%3E%40jjwb96%3C%2FA%3E%26nbsp%3BI%20noticed%20that%20the%20Apple%20Configurator%20will%20fix%20this%20in%20the%20back%20now.%20When%20you%20enter%20your%20URL%2C%20starting%20with%26nbsp%3B%20https%3A%2F%2Fappleconfigurator2.%20it%20will%20be%20replaced%20with%20the%20correct%20URL%20prefix.%20You%20can%20check%20that%20in%20Apple%20Configurator%20under%20Preferences-%26gt%3B%20Servers%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1398616%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1398616%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F226779%22%20target%3D%22_blank%22%3E%40Intune%20Support%20Team%3C%2FA%3E%26nbsp%3B%2C%20i'm%20still%20getting%20this%20error%20even%20after%20replacing%20the%20URL%3F%20any%20ideas%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1399083%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1399083%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F61980%22%20target%3D%22_blank%22%3E%40Phillip%20Shilling%3C%2FA%3E%26nbsp%3BI%20had%20a%20similar%20issue%2C%20the%20URL%20didn't%20matter.%20I%20had%20to%20connect%20the%20device%20to%20Wi-Fi%20then%20proceed.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1399120%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1399120%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F222920%22%20target%3D%22_blank%22%3E%40Mahmoud%20Taleb%3C%2FA%3E%26nbsp%3B%2C%20I%20believe%20it%20already%20had%20an%20internet%20connection%20via%20Wi-Fi.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1401003%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1401003%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F61980%22%20target%3D%22_blank%22%3E%40Phillip%20Shilling%3C%2FA%3E%2C%20if%20you're%20still%20experiencing%20this%20issue%2C%20here%20are%20a%20couple%20of%20additional%20items%20to%20check%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EThe%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fmem%2Fintune%2Fenrollment%2Fapple-mdm-push-certificate-get%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EApple%20MDM%20Push%20Certificate%3C%2FA%3E%20is%20Active%20and%20not%20expired%3C%2FLI%3E%0A%3CLI%3EAny%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fmem%2Fintune%2Fenrollment%2Fenrollment-restrictions-set%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EIntune%20enrollment%20restrictions%3C%2FA%3E%20are%20targeting%20the%20correct%20user%20groups%3C%2FLI%3E%0A%3C%2FUL%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1688356%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1688356%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F61980%22%20target%3D%22_blank%22%3E%40Phillip%20Shilling%3C%2FA%3E%26nbsp%3BDid%20you%20upload%20a%20CSV%20containing%20the%20serial%20and%20description%20of%20the%20device%20and%20assign%20a%20profile%20in%20Intune%3F%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fenrollment%2Fapple-configurator-enroll-ios%23setup-assistant-enrollment%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fenrollment%2Fapple-configurator-enroll-ios%23setup-assistant-enrollment%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ebest%20regards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAad%20Lutgert%3C%2FP%3E%3CP%3Evmlabblog.com%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1720701%22%20slang%3D%22de-DE%22%3ESubject%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1720701%22%20slang%3D%22de-DE%22%3E%3CP%3EHello%20everyone%3C%2FP%3E%3CP%3EI%20have%20the%20same%20problem.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20is%20possible%20for%20me%20to%20access%20the%20URL.%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Enrollment.PNG%22%20style%3D%22width%3A%20711px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F222585i5834E37724EFEC71%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Enrollment.PNG%22%20alt%3D%22Enrollment.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20test%20devices%20have%20also%20been%20assigned%20to%20the%20Endpoint%20Manager%2C%20but%20I%20do%20not%20see%20a%20connection%20here.%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22devices-intune.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F222586iF2FF5809A3ED84D2%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22devices-intune.PNG%22%20alt%3D%22devices-intune.%20Png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOn%20both%20devices%20I%20get%20the%20message%20%22Invalid%20Profile%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDo%20you%20still%20have%20ideas%20for%20me.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1720889%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1720889%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F811932%22%20target%3D%22_blank%22%3E%40KolKedo%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20to%20be%20sure%2C%20did%20you%20double%20check%20the%20serials%20in%20the%20csv%20you%20uploaded%3F%20Are%20they%20the%20same%20as%20displayed%20on%20the%20devices%3F%3C%2FP%3E%3CP%3EHere%20is%20a%20link%20on%20how%20to%20check%20the%20serialnumber%20of%20your%20iOS%20device%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsupport.apple.com%2Fen-us%2FHT204073%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.apple.com%2Fen-us%2FHT204073%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1721130%22%20slang%3D%22de-DE%22%3ESubject%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1721130%22%20slang%3D%22de-DE%22%3E%3CP%3EI%20added%20the%20devices%20to%20the%20Apple%20Business%20Portal%20using%20Apple%20Configuration%202.%20And%20then%20I%20used%20the%20Apple%20Business%20Portal%20to%20assign%20the%20devices%20to%20the%20endpoint%20MDM%20server%20and%20after%20syncing%20in%20the%20endpoint%20manager%20I%20assigned%20the%20profiles%20of%20the%20endpoint%20manager%20to%20the%20devices%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1721236%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1721236%22%20slang%3D%22en-US%22%3E%3CP%3EThat%20should%20work.%20Have%20you%20already%20checked%20your%20%3CA%20href%3D%22https%3A%2F%2Fendpoint.microsoft.com%2F%23blade%2FMicrosoft_Intune_Enrollment%2FRestrictionMenuBlade%2Fproperties%2FrestrictionId%2Feb51130e-770f-48d8-a816-76f6e95e0728_DefaultPlatformRestrictions%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Edevice%20enrollment%20restrictions%3C%2FA%3E%3F%20Are%20iOS%2FiPadOS%20devices%20allowed%20to%20enroll%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ebest%20regards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAad%20Lutgert%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fvmlabblog.com%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Evmlabblog.com%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1721279%22%20slang%3D%22de-DE%22%3ESubject%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1721279%22%20slang%3D%22de-DE%22%3E%3CP%3EYes%20i%20check%20this%2C%20it%20is%20allow%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22device-restrictions.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F222612i8777C8495335F781%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22device-restrictions.PNG%22%20alt%3D%22device-restrictions.%20Png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1721617%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1721617%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F811932%22%20target%3D%22_blank%22%3E%40KolKedo%3C%2FA%3E%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20just%20tested%20the%20enrollment%20with%20my%20own%20intune%20tenant%20and%20it's%20working.%20As%20far%20as%20I%20can%20see%20the%20error%20you%20are%20seeing%20is%20not%20related%20to%20Apple%20configurator%202%2C%20because%20you%20have%20changed%20device%20management%20from%20Apple%20Configurator%20to%20ADE.%20You%20can%20also%20see%20the%20device%20appear%20in%20Intune%20so%20the%20Sync%20is%20working%20and%20the%20Token%20is%20still%20valid.%20The%20device%20is%20allowed%20to%20enroll%2C%20because%20enrollment%20is%20not%20blocked.%20So%20that%20should%20not%20be%20an%20issue.%20I%20think%20the%20issue%20is%20related%20to%20profile%20in%20ADE.%20You%20could%20try%20to%20create%20a%20new%20profile%20and%20try%20to%20assign%20it%20to%20the%20device.%20Otherwise%20I%20would%20suggest%20you%20to%20open%20a%20service%20request.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ebest%20regards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAad%20Lutgert%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fvmlabblog.com%2F%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Evmlabblog.com%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1800451%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20Issue%3A%20Profile%20error%20enrolling%20iOS%20devices%20with%20Apple%20Configurator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1800451%22%20slang%3D%22en-US%22%3E%3CP%3EI%20just%20got%20off%20a%20call%20with%20Microsoft%20and%20thought%20I%20would%20share%20a%20fix%20that%20worked%20for%20me.%20After%20having%20two%20iPads%20enroll%20fine%20I%20started%20having%20the%20same%20issues%20as%20described%20here.%20So%20the%20steps%20I%20have%20outlined%20fixed%20this%20issue%3A%3C%2FP%3E%3CP%3EConnect%20the%20iPad%20to%20a%20Mac%20running%20Configurator%202%2C%20run%20restore%20on%20the%20iPad%2C%20when%20finished%2C%20while%20still%20plugged%20into%20Configurator%20run%20through%20the%20set%20up%20on%20the%20iPad%20until%20you%20have%20connected%20it%20to%20the%20Wi-Fi%20network%2C%20stop%20there.%20While%20still%20plugged%20into%20Configurator%20run%20Prepare%2C%20when%20ready%20start%20the%20enrollment%20process%20on%20the%20iPad.%3C%2FP%3E%3CP%3EI%20would%20have%20never%20thought%20that%20this%20would%20work%20but%20it%20did.%20I%20hope%20this%20helps%20someone%20else%20as%20I%20have%20been%20dealing%20with%20this%20for%20two%20weeks%20on%20my%20own%20while%20waiting%20for%20a%20call%20back%20from%20MS.%3C%2FP%3E%3C%2FLINGO-BODY%3E

By Lee Yan | Intune Sr. Software Engineer on the Enterprise Mobility and Customer Experience Team

 

We recently had a case escalated through all levels of support which took quite some time to troubleshoot. After working with engineering to replicate and then pinpoint the issue, we decided it would be useful to post a known issue just in case you've run into this. We'll update this post when it's resolved. 

 

The scenario: When following the steps in this document (Enroll iOS devices with Apple Configurator) for Setup Assistant enrollment, you get “Invalid Profile: The configuration for your iPad/iPhone could not be downloaded from [Your Organization Name]” error after accepting “Apply configuration” on the device.

 

What is happening behind the scenes: The enrollment URL for the MDM server created with Apple Configurator did not get resolved successfully or was manually edited. A valid URL should start with https://manage.microsoft.com/EnrollmentServer/Discovery.svc/iOS/ESProxy? while an invalid URL usually starts with https://appleconfigurator2.manage.microsoft.com/MDMServiceConfig? which is usually the original profile URL you copied from the Intune console for Setup Assistant Enrollment. The issue does not affect Direct Enrollment scenario.

 

Workaround: Fortunately, there's a relatively simple workaround. Just replace the invalid URL portion with the valid URL portion for the MDM server on the Mac computer, then try preparing the device again.

 

Again, we'll update this post when the issue is fixed. 

15 Comments
Occasional Visitor

Any updates on this?

Senior Member

10 months later, any update on this?

Frequent Contributor

@Mahmoud Taleb  @jjwb96 I noticed that the Apple Configurator will fix this in the back now. When you enter your URL, starting with  https://appleconfigurator2. it will be replaced with the correct URL prefix. You can check that in Apple Configurator under Preferences-> Servers

 

New Contributor

@Intune Support Team , i'm still getting this error even after replacing the URL? any ideas?

Senior Member

@Phillip Shilling I had a similar issue, the URL didn't matter. I had to connect the device to Wi-Fi then proceed.

New Contributor

@Mahmoud Taleb , I believe it already had an internet connection via Wi-Fi.

Hi @Phillip Shilling, if you're still experiencing this issue, here are a couple of additional items to check:

New Contributor

@Phillip Shilling Did you upload a CSV containing the serial and description of the device and assign a profile in Intune? https://docs.microsoft.com/en-us/mem/intune/enrollment/apple-configurator-enroll-ios#setup-assistant...

 

best regards,

 

Aad Lutgert

vmlabblog.com

Occasional Visitor

Hello everyone

I have the same problem.

 

It is possible for me to access the URL.Enrollment.PNG

 

The test devices have also been assigned to the Endpoint Manager, but I do not see a connection here.devices-intune.PNG

 

On both devices I get the message "Invalid Profile"

 

Do you still have ideas for me. 

New Contributor

@KolKedo 

 

Just to be sure, did you double check the serials in the csv you uploaded? Are they the same as displayed on the devices?

Here is a link on how to check the serialnumber of your iOS device: https://support.apple.com/en-us/HT204073

 

 

Occasional Visitor

I added the devices to the Apple Business Portal using Apple Configuration 2. And then I used the Apple Business Portal to assign the devices to the endpoint MDM server and after syncing in the endpoint manager I assigned the profiles of the endpoint manager to the devices

New Contributor

That should work. Have you already checked your device enrollment restrictions? Are iOS/iPadOS devices allowed to enroll?

 

best regards,

 

Aad Lutgert

vmlabblog.com

Occasional Visitor

Yes i check this, it is allow: 

 

device-restrictions.PNG

New Contributor

@KolKedo  

 

I just tested the enrollment with my own intune tenant and it's working. As far as I can see the error you are seeing is not related to Apple configurator 2, because you have changed device management from Apple Configurator to ADE. You can also see the device appear in Intune so the Sync is working and the Token is still valid. The device is allowed to enroll, because enrollment is not blocked. So that should not be an issue. I think the issue is related to profile in ADE. You could try to create a new profile and try to assign it to the device. Otherwise I would suggest you to open a service request.

 

best regards,

 

Aad Lutgert

vmlabblog.com

 

 

 

 

 

New Contributor

I just got off a call with Microsoft and thought I would share a fix that worked for me. After having two iPads enroll fine I started having the same issues as described here. So the steps I have outlined fixed this issue:

Connect the iPad to a Mac running Configurator 2, run restore on the iPad, when finished, while still plugged into Configurator run through the set up on the iPad until you have connected it to the Wi-Fi network, stop there. While still plugged into Configurator run Prepare, when ready start the enrollment process on the iPad.

I would have never thought that this would work but it did. I hope this helps someone else as I have been dealing with this for two weeks on my own while waiting for a call back from MS.