Fix Intune Profile Installation Failed during macOS Enrollment

While enrolling the macOS in Intune, you may encounter a warning, “Profile Installation Failed“. Could not obtain the final profile using the Encrypted Profile Service. In this article, I will show you how to resolve this error and provide you with some troubleshooting steps.

When you register macOS devices into Intune, you might end up with several enrollment errors. Thankfully, the Intune portal now shows the device enrollment failures right on the dashboard. This makes it easy to troubleshoot the device enrollment errors.

I recently published a guide on enrolling macOS into Intune, where I covered the steps to enroll macOS devices into Intune using the company portal app. Microsoft Intune supports enrollment on personal and company-owned devices. Only when you enroll your macOS devices in Intune, you can manage them.


https://www.openhelbreath.com/showthread.php?tid=1645

https://www.mcmon.ru/showthread.php?tid=12513

https://www.csoyuncu.net/showthread.php?tid=2319

https://test.tcz.x10.mx/mybb/showthread.php?tid=21157

https://whitepustules.com/viewtopic.php?t=913

https://whitepustules.com/viewtopic.php?t=846

https://whitepustules.com/viewtopic.php?t=898

https://whitepustules.com/viewtopic.php?t=282

https://cs-bg.org/forum/viewtopic.php?t=529

https://cs-bg.org/forum/viewtopic.php?t=553

https://cs-bg.org/forum/viewtopic.php?t=542

https://cs-bg.org/forum/viewtopic.php?t=536

https://events.imeche.org/annual-dinner-2014/images/default-source/annual-dinner-2014/imeche-annual-dinner-20-11-14--9260

http://www.balsen.dk/YetAnotherForum.NET/yaf_postst19441_Kickin--Keto-Gummies-Does-It-Really-Work--Read-Now.aspx

http://www.balsen.dk/YetAnotherForum.NET/yaf_postst19449findunread_Natures-Boost-CBD-Gummies-Reviews--USA---Is-Natures-Boost-CBD-Gummies-Scam-or-Legit.aspx#post20978


Intune Profile Installation Failed during macOS Enrollment


During the macOS enrollment in Intune, while installing the management profile, I encountered the following error “Profile Installation Failed”. Could not obtain the final profile using the Encrypted Profile Service. The credentials within your profile may have expired. Try downloading a new profile.

The Profile Installation Failed error appears when macOS enrollment restrictions are in place or there are existing profiles on the Mac, preventing the installation of a management profile.

Let’s go through the solutions to resolve the profile installation failed errors for macOS enrollment.


Solution 1: Review macOS Enrollment Restrictions in Intune


http://www.balsen.dk/YetAnotherForum.NET/yaf_postst19452findunread_U-Renew-Skin-Tag-Remover---The-Natural-Way-to-Beautiful-Skin.aspx#post20981

https://www.truecrimecollectors.com/showthread.php?tid=7034

https://aoto.ml/viewtopic.php?t=343

https://aoto.ml/viewtopic.php?t=31

https://aoto.ml/viewtopic.php?t=341

https://aoto.ml/viewtopic.php?t=13

https://forum.iabi.or.id/discussion/224/4-tips-to-offer-online-exams

https://www.konev.cz/diskuse/rekuperace-hradec-kralove-2697/

http://www.plaworld.kr/bbs/board.php?bo_table=free&wr_id=435

https://sagliklahayat.com/ayak-bileginin-ic-kisminda-agri-ve-sislik/

http://forum.saintbrieuc-parlonsnous.fr/viewtopic.php?t=384727

http://forum.saintbrieuc-parlonsnous.fr/viewtopic.php?f=3&t=460732

http://forum.saintbrieuc-parlonsnous.fr/viewtopic.php?t=271554

http://forum.saintbrieuc-parlonsnous.fr/viewtopic.php?t=664920

https://forum.jarisium.com/index.php?topic=37006.0

https://forum.jarisium.com/index.php?topic=18877.0

https://forum.jarisium.com/index.php?topic=14491.0

https://forum.jarisium.com/index.php?topic=192098.0

http://junlinro520.gain.tw/redirect.php?tid=428447&goto=lastpost

http://junlinro520.gain.tw/viewthread.php?tid=187788&extra=

http://junlinro520.gain.tw/viewthread.php?tid=147151&extra=

https://www.illuzion.club/group/topic/view/11/8361/zytiga-autres-mg-c-dicament

https://www.illuzion.club/groups/topic/view/group_id/6/topic_id/53/post_id/111

https://www.illuzion.club/group/topic/view/13/81/la-marcus-aldridge-indications-with-nets

http://junlinro520.gain.tw/viewthread.php?tid=130686&extra=

http://plaworld.kr/bbs/board.php?bo_table=free&wr_id=4978

http://www.thesheeplespen.com/chat/viewthread.php?tid=27655

http://www.thesheeplespen.com/chat/viewthread.php?tid=628854


MacOS enrollment restrictions are one of the most common reasons why the management profile installation fails during macOS enrollment. Intune automatically classifies macOS devices as personally owned and allows you to enroll macOS. The device enrollment restrictions let you restrict devices from enrolling in Intune based on certain device attributes. If the device restrictions are in place that prevent enrolling macOS in Intune, you cannot enroll the mac devices.


To review the macOS enrollment restrictions in Intune, use the following steps:


  • Sign in to Intune admin center.
  • Go to Devices > Device Enrollment > Enroll Devices.
  • Select Enrollment device platform restrictions and switch to MacOS restrictions tab.


Your administrator may have created a device restriction to block enrollment of MacOS. If there are multiple restrictions created for devices, you will have to review each restriction one by one and make sure the macOS platform is allowed for enrollment. By default, the restrictions are configured to allow the macOS to be enrolled in Intune, and this is applied to All Users.

When you edit the restriction and go to the properties, you can find out whether the macOS devices are allowed to enroll or they are blocked.


Solution 2: Verify if the Apple MDM Push Certificate is valid


When you enroll iPadOS/iOS devices into Intune, one of the prerequisites is the Apple MDM Push certificate requirement. This certificate is required to manage macOS devices in Microsoft Intune. If the Apple MDM push certificate isn’t configured or if the certificate is expired, you’ll face the enrollment issues.

To verify if the MDM push certificate is active and valid, use these steps:


  • Sign in to Microsoft Intune Admin Center.
  • Go to Devices > macOS > macOS enrollment.
  • Select Apple Push MDM Certificate to check the status of certificate. If the status of the certificate shows as Active, it’s all good. If the certificate shows as expired, you may have to renew it and import into Intune portal.


Solution 3: Check if the User is assigned an Intune License


If the user who is attempting to enroll the macOS into Intune isn’t assigned with an Intune license, the enrollment will fail, and you may not be able to download and install the management profile on macOS devices. You can review the licenses assigned to a user by going to Microsoft 365 admin center > Users > select the User and review the Licenses and Apps.

It is also critical that the user attempting to enroll macOS into Intune has the necessary permissions. The user will be unable to enroll Macs in Intune without the enrollment permissions.


http://www.thesheeplespen.com/chat/viewthread.php?tid=37098

https://goazzure.com/forum/viewtopic.php?t=4895

https://www.goazzure.com/forum/viewtopic.php?t=3

https://goazzure.com/forum/viewtopic.php?t=4841

https://goazzure.com/forum/viewtopic.php?t=4958

https://forum.freeisrael.org.il/viewtopic.php?t=67028

https://forum.freeisrael.org.il/viewtopic.php?t=6014

https://forum.freeisrael.org.il/viewtopic.php?t=2591

https://forum.freeisrael.org.il/viewtopic.php?t=66838

http://www.fischer-bayern.de/phpBB2/viewtopic.php?t=7690

http://www.fischer-bayern.de/phpBB2/viewtopic.php?t=7109

http://www.fischer-bayern.de/phpBB2/viewtopic.php?t=7468

http://www.fischer-bayern.de/phpBB2/viewtopic.php?t=7749


Solution 4: Delete the existing Profiles on your Mac


When you install a management profile while enrolling macs in Intune, you gain access to your company apps. As a result, the success of this profile installation is critical. In some cases, the existing profiles may cause issues during the macOS enrollment and result in profile installation failed error.

You must delete the conflicting management profiles from macOS to resolve the profile installation failed issue. If an existing management profile is impeding enrollment, delete it and re-enroll the mac device. If that doesn’t work, uninstall the company portal on your MacBook, download a fresh installer, and start the enrollment process again.


Conclusion

I hope the solutions covered in this article will help you resolve the profile installation failed warning during macOS enrollment in Intune. If something else worked for you, please let me know in the comments section.


Comments

Post a Comment

Popular posts from this blog

2 Best Solutions: Error Can’t Connect to Windows 365

In this article, I will show you how to resolve the error can’t connect to Windows 365. If you are unable to access your Cloud PC using the Windows 365 app, there are two ways to solve this issue. I normally connect to my Cloud PC using the Windows 365 app. Note that there are multiple ways to connect and access your Cloud PCs. For instance, you can connect to a cloud PC using the Windows 365 home page, the Windows 365 App, or the Microsoft Remote Desktop client. Cloud PCs are accessible to users only after you assign Windows 365 licenses to users. Note that you should also provision Windows 365 Cloud PCs that allow users to access them from any device. In my case, the provisioning policy in place for Cloud PCs and a valid license was assigned to the user. In some cases, when you attempt to connect to Cloud PC, there may be gateway errors or connection errors. Refer to the following guide on troubleshooting Cloud PC connection errors, where I have covered solutions for Cloud PC access ...
Read more

Patch Server Core Installation with latest Windows Updates

In this guide, I will show you how to patch server core installation with the latest Windows Updates. Through Windows Update, you can install the latest patches on the server core automatically or manually install the latest updates. When you install the Server Core, it is recommended to install the latest patches to keep it secure and updated. Unlike Windows Server (installed with Desktop Experience), the Server Core doesn’t have a GUI to check for updates. When you have multiple server core installations in your setup, patching all them of the servers becomes a critical task. By patching a server core installation, you get the performance improvements and the known issues or bugs are fixed. Methods to Patch Server Core Installations https://expectingtheunexpected.com/showthread.php?tid=1495 https://forum.papbio.org/showthread.php?tid=4256 http://mystrotain.free.fr/forum/showthread.php?tid=15775 http://www.hondaikmciledug.co.id/HRIS/showthread.php?tid=846 http://forum.icohaberleri.com...
Read more

Fix Autopilot Profile Status Shows Not Assigned | Stuck Assigning

In this post, I will share some basic steps to resolve issue where the Autopilot profile status shows Not Assigned. If you don’t see the status of Autopilot deployment profile for devices as assigned, I will share multiple solutions to resolve the issue. When you create a Autopilot deployment profile, you assign the profile to a device group. This device group consists of computers that you have registered for Autopilot in Intune. The process of importing a device may take up to 15 minutes. You can run the refresh option to check if the device is imported successfully. After you have assigned the autopilot deployment profile to a device group, the profile status for the devices changes from Updating to Assigned. In some cases, the Autopilot profile status for devices gets stuck at the Assigning step and finally shows as Not Assigned. This is a common issue but gets resolved after waiting for a few hours. If the Autopilot Profile status shows not resolved and if this issue persists for ...
Read more