Can't create Intune Device Enrollment Status Page

Jonathan Bedder 5 Reputation points
2026-01-13T19:49:02.9733333+00:00

When I go to

User's image

I'm unable to save any new Device Enrollment status page (trying to create one for a targeted group where I force the enrolled devices to complete their join / configuration before they can be used) - tested with a generic Status Page that mirrored the Default and had the same error.

Error is below and the account I'm using is a Global Admin on the tenant.

User's image

This error shows up almost immediately.

Windows for business | Windows Server | Devices and deployment | Other
0 comments
Answer recommended by moderator
Jonathan Bedder 5 Reputation points
2026-01-14T19:05:34.17+00:00

So, I ended up using Azure PowerShell to try to create the ESP directly and I got a very interesting answer to my problem.

User's image

This is an older tenant, and it apparently got grandfathered in on the Microsoft Office 365 MDM Authority (which doesn't support ESP) with no way to manually modify it in the portal.

That can be modified https://intune.microsoft.com/#view/Microsoft_Intune_Enrollment/ChooseMDMAuthorityBlade

after which I'm able to create an ESP without any issue.

Was this answer helpful?

3 people found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. John Oliver 11,675 Reputation points Independent Advisor
    2026-01-13T21:01:27.9266667+00:00

    Hello Jonathan Bedder, thanks for posting this in the community.

    Based on the error “Profile failed to create. Please try again.” when creating an Intune Device Enrollment Status Page (ESP), the issue might be caused by insufficient permissions or role assignment. Even though you are a Global Admin, Intune requires specific roles for ESP creation. If your account is missing the Intune Service Administrator or Policy and Profile Manager role, this can cause failures.

    Verify your role assignments by going to Microsoft Endpoint Manager Admin Center > Tenant Administration > Roles > Assignments. Ensure your account has either the Intune Service Administrator role or a custom role with Enrollment Status Page permissions.

    Next, check scope tags by navigating to Tenant Administration > Scope Tags and confirm that the scope tag applied to the ESP profile is accessible to your account.

    Validate licensing by confirming that your account has an Intune license and that devices targeted for ESP have valid licenses.

    Set up the Enrollment Status Page

    You can also reach out to Microsoft support for business users for additional guidance.

    Kind regards,

    John Oli

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.