iOS DEP enrolled devices missing Enrollment Profile (breaking dynamic group and filter logic)
Starting 31/05/2022 new iOS enrollments via Apple Business Manager Device Enrollment do not have an Enrollment Profile attribute assigned under Hardware, generally we use this attribute to define dynamic groups/filters. I have seen this on at least two different customer tenants so far. Example of a filter no longer matching a device enrollment. (previous enrollments still show the correct Enrollment Profile Note: Testing 3 tenants we only see two in APAC impacted so far. Asia Pacific 0101 Asia Pacific 0201VPP Apps on DEP iPadOS Devices Do Not Automatically Update Error code: 0x87D13B9F
We're in the process of migrating to Intune and we're starting with DEP devices. However we've noticed that as applications are updated in the App Store, the device itself is not updating the applications automatically but requires human intervention. Today we checked one of the devices and saw that the update failed with error 0x87D13B9F: Application attempted to install 9/30/2021 6:43:12 AM App installation failed 9/30/2021 4:13:53 AM Hide details Error code: 0x87D13B9F An app update is available. Available apps can be updated using Company Portal and required apps will auto-update on device sync. Suggested remediation This code is returned when a VPP app is installed but there is a newer version available. Our Apple VPP token is configured for automatic updates: The Microsoft documentation confirms that: Automatic app updates - Choose from Yes or No to enable automatic updates. When enabled, Intune detects the VPP app updates inside the app store and automatically pushes them to the device when the device checks in. Note: Automatic app updates for Apple VPP apps will automatically update for both Required and Available install intents. For apps deployed with Available install intent, the automatic update generates a status message for the IT admin informing that a new version of the app is available. This status message is viewable by selecting the app, selecting Device Install Status, and checking the Status Details. All this to say that this configuration should be working as the application in question is required But it's not happening automatically Did we miss something somewhere? Any advice is greatly appreciated. References: https://docs.microsoft.com/en-us/troubleshoot/mem/intune/troubleshoot-app-install https://docs.microsoft.com/en-us/troubleshoot/mem/intune/app-install-error-codes https://docs.microsoft.com/en-us/mem/intune/apps/vpp-apps-ios#upload-an-apple-vpp-or-apple-business-manager-location-token 0x87D13B9F App Install Error - Microsoft Tech Community
iPad OS 14.7.x DEP enrollment stuck
Anyone has also issues with DEP enrollment? When I am trying to enroll a new iPad that's on iPad OS 14.7.1, its stuck on "awaiting final configuration from "company" " Tried doing following troubleshooting steps but no luck - Reset the iPad - Tried on other iPad - Tried with different Wi-Fi Networks Any help in fixing this issue is appreciated?Apple DEP with Intune
I am setting up Apple DEP on a new Intune install. It's the first time in six months that I have setup Apple DEP with Intune and I am encountering a new issue. Devices that enroll through DEP get stuck at the Confirming Device Settings stage (See attachment) in the Intune Company Portal. The device appears in the Intune console as an enrolled device but the devices get stuck on the Confirming Device Settings stage. The device eventually becomes compliant but the user is stuck with a notification to complete setup. I have a support call logged but I wanted to find out whether anyone else has seen this error.
Manually enrolling iOS device that was previously enrolled via DEP and another MDM solution
Hi all, scenario: 100 devices that were enrolled via DEP using a different MDM solution. Now we want to switch to Intune as MDM solution and for future devices the DEP enrollment will be no problem. However, is it possible to enroll the existing devices that were setup via DEP to Intune? Of course I have to retire the devices first from their old MDM. Do I only have to configure the Company Portal app to support DEP devices via configuration profiles or is there anything else I need to do? Best regads, Labinot
