Share via

Intune, iOS/iPadOS, Device Enrollment, Compliance

Sezer Çifci 0 Reputation points
2025-08-25T16:14:48.4966667+00:00

Hi,

We are facing an issue with iOS/iPadOS devices enrolled via Apple Business Manager (ABM) / Automated Device Enrollment (ADE) into Intune.

Steps we followed:

  1. Renewed Apple VPP and MDM Push certificates (both are active and valid).

Created a new DEP/ADE enrollment profile in Intune with:

User Affinity: With User Affinity

  Authentication method: Setup Assistant with modern authentication
  
     Supervised: Yes
     
        Locked enrollment: Yes
        
           VPP token selected correctly
           
           Synced ABM with Intune and reassigned the device to the new profile.
           
           Wiped the iPad and restarted enrollment.

Problem:

On the device, it shows: "iPad is being configured. Configuration is being received from 'Company Name'" but then gets stuck.

In the Intune portal, the device shows up as Corporate-owned, but:

Compliance status: Not Evaluated

  **Device model and OS version: blank/unknown**
  
     No successful check-ins are recorded.

We also checked Enrollment restrictions and ensured iOS/iPadOS platform is allowed for all users. However, the error “Platform personal device not allowed” appears in enrollment logs, even though the device is from ABM and should be treated as corporate.

Question:

Why is Intune treating the ABM-enrolled device as personal and blocking it, even though ownership is set to Corporate?

What additional configuration is needed so that iOS/iPadOS devices complete setup and show compliance properly?

Any guidance or troubleshooting steps would be greatly appreciated.

Thanks in advance!Hi,

We are facing an issue with iOS/iPadOS devices enrolled via Apple Business Manager (ABM) / Automated Device Enrollment (ADE) into Intune.

Steps we followed:

Renewed Apple VPP and MDM Push certificates (both are active and valid).

Created a new DEP/ADE enrollment profile in Intune with:

User Affinity: With User Affinity

  Authentication method: Setup Assistant with modern authentication
  
     Supervised: Yes
     
        Locked enrollment: Yes
        
           VPP token selected correctly
           
           Synced ABM with Intune and reassigned the device to the new profile.
           
           Wiped the iPad and restarted enrollment.

Problem:

On the device, it shows: "iPad is being configured. Configuration is being received from 'Company Name'" but then gets stuck.

In the Intune portal, the device shows up as Corporate-owned, but:

Compliance status: Not Evaluated

  **Device model and OS version: blank/unknown**
  
     No successful check-ins are recorded.

We also checked Enrollment restrictions and ensured iOS/iPadOS platform is allowed for all users. However, the error “Platform personal device not allowed” appears in enrollment logs, even though the device is from ABM and should be treated as corporate.

Question:

Why is Intune treating the ABM-enrolled device as personal and blocking it, even though ownership is set to Corporate?

What additional configuration is needed so that iOS/iPadOS devices complete setup and show compliance properly?

Any guidance or troubleshooting steps would be greatly appreciated.

Thanks in advance!

Microsoft Security | Intune | Enrollment
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Prathista Ilango 670 Reputation points Microsoft Employee
    2025-11-20T11:00:36.2233333+00:00

    Hello Sezer Çifci,

    Sorry to hear you’ve been running into this issue. Hopefully it’s been sorted out by now, but if not, here are a few pointers that may help.

    1. Why is Intune treating the ABM-enrolled device as personal and blocking it, even though ownership is set to Corporate?
      By default, Intune treats iOS/iPadOS/macOS devices as personally owned unless they are enrolled through ADE. In this scenario, the error likely indicates the ADE enrollment didn’t complete successfully.
    2. What additional configuration is needed so that iOS/iPadOS devices complete setup and show compliance properly? I see that you’ve already set authentication to Setup Assistant with modern authentication. Since the behavior matches what’s described in the article below, try switching to legacy authentication and then back to modern. You can also temporarily disable MFA or apply Conditional Access exclusions for ADE devices to test whether this resolves the issue. https://learn.microsoft.com/en-us/troubleshoot/mem/intune/device-enrollment/troubleshoot-ios-enrollment-errors#ade-enrollment-stuck-at-user-login
    3. Any guidance or troubleshooting steps would be greatly appreciated. Here are some troubleshooting guides that you can refer to for further troubleshooting: Troubleshooting iOS/iPadOS device enrollment errors in Microsoft Intune - Intune | Microsoft Learn iOS or iPadOS devices won't check in with Microsoft Intune - Intune | Microsoft Learn iOS or iPadOS device stuck on Intune enrollment screen - Intune | Microsoft Learn Apple ADE devices don't start auto-enrollment in Intune - Intune | Microsoft Learn

    Hope this helps!

    If you found the information above helpful, please Click Yes. This will assist others in the community who encounter a similar issue, enabling them to quickly find the solution and benefit from the guidance provided.

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.