Cant sign in Work email

Question

i got this problem. so i have azure and i am administrator, i registered new user name Nika and gave him username and credentials to sign in, i gave him a completely new pc and told him to sign in with his work credentials, when he tries to add his work account problem occurs - Error code: CAA301F4, because he is just a user, he cant sign in i think, what we have to do is, i should sign in as an administrator using work account and after i sign in, manually add Nika by myself on the work account, what i am trying to do is that when i give user credentials, he/she should sign in with no problem and with no errors, i changed in AAD -> devices -> Device Settings - "Users may join devices to Microsoft Entra" and set it to "ALL" but problem still occurs how can i solve it?

Answer 1

Hi @Nikoloz Tskhovrebadze

Thank you for reaching us!

When a user attempts to join or register a Windows device under the MDM Enrollment policy, the registration token will include information about automatic enrollment in Intune.

At this stage, the process may fail due to navigation issues (indicated by error CAA301F4) or because the user does not have an Intune license.

If a user lacks an Intune license, they should not be included in the MDM Enrollment policy scope.

To resolve this, you have two options:

1. Assign an Intune license to the user.
2. Adjust the MDM Enrollment scope from "All Users" to a specific group of users who have Intune licenses assigned.

Hope this helps. Do let us know if you any further queries.

Thanks,

Akhilesh.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.