Forum Discussion
iOS Profile installation fails on corporate owned devices. Resolution to allow personal ones?
Looks that the best way to enrol and mark devices as corporate is not the Corporate Device Identifiers. They have said this will be the same for Android phones in the near future. Case closed.
Response from Intune support:
Corporate identifiers are used to mark the device as corporate after it gets enrolled. We cannot put device restrictions based on that. The company portal enrollment is considered as personal enrollment which makes us change the enrollment restriction to allow the personal enrollment.
As I have mentioned that if you want the devices to do the corporate enrollment you would have to do the automated device enrollment (Previously called DEP) so that you can have the device restrictions set to allow corporate and block personal.
Here is link with Information on DEP enrollment: https://docs.microsoft.com/en-us/intune/enrollment/device-enrollment-program-enroll-ios
Hi ryeurolink,
From what you're describing, the Enrollment restrictions are configured correctly within the Intune Portal, but are still having issues with enrolling corporate devices even though they are allowed and identified via Corporate Device Identifier.
As we'll need to further investigate the device attempting to enroll within the Intune Service, let's get you over to support. Please open a case either through the Intune Portal, or through any of the methods mentioned here: https://docs.microsoft.com/intune/get-support. Once created, please private message us your case, for us to keep an eye on.
Thank you Thijs Lecomte for reaching out to us on our Twitter!
Cheers,
Intune Support Team
^MS
Thanks guys, will do!