ERROR CODE :80192EE7. Your account was not setup in device because device management could not be enabled.

Question

We're in the process of configuring a computer with a Microsoft Business Premium account. The computer currently has an administrator account under ****@ugafco.aero. Now, I'm attempting to add another account to Microsoft 365 (Office), specifically ****@ugafcoaero.onmicrosoft.com, which was provided by the admin for Business Premium. However, we're encountering error code 80192EE7. How can we troubleshoot and resolve this issue?

Answer 1

The following resolved this issue for us (solution provided by Microsoft support):

Go to portal.azure.com > Microsoft Entra ID > Mobility (MDM and WIP) > Microsoft Intune

Set "Windows Information Protection (WIP) user scope" to "None"

Since we were not using any WIP policies, this had no functional impact to us, other than resolving the enrollment issue.

Answer 2

I had this issue when trying to connect my work and school account.

Using the Enroll only in device management option solved it for me.

To enroll only in device management, you need to12:

1. Open Settings app.
2. Select Accounts.
3. Navigate to Access work or school.
4. Select Enroll only in device management option.
5. Type your work email address.

Answer 3

I've had this error as a result of MFA.

My users all have MFA enforced, but recently the company took away cell phones as a cost-savings measure, but didn't heed IT's recommendation for a turn-in process so we could coordinate the needed change in MFA methods. As a result, most users wiped their phones when they turned them over, thus no way to continue to do MFA.
I used to simply disable MFA on (https://account.activedirectory.windowsazure.com/UserManagement/MultifactorVerification.aspx) and then could set them up with some alternate method of authentication, but as of today (2024-03-25) disabling there did nothing, even after waiting 30 minutes.

The solution was to go to Entra (AzureAD) > users > authentication methods (https://entra.microsoft.com/#view/Microsoft_AAD_UsersAndTenants/UserProfileMenuBlade/~/UserAuthMethods) and establish new methods there. This is actually more convenient because I don't have to do an actual verification on the end-device (phone call, sms to mobile device, or email to home email addy, -- users don't like using the app at all). So, I just input their phone#, home email, etc. in there and then have the users try connecting again using the new MFA method.

john

Answer 4

Works, just only switch to "None" and retore default MDM URLs

In the Enterprise Portal add the URL "https://enrollment.manage.microsoft.com/enrollmentserver/discovery.svc"to finish the enrollment if ask.

Answer 5

I have installed the Intune Corporate Portal on the devices and it works as expected. It's nice to have remote control of the devices in case they are stolen, or if someone is let go, we don't need to track down their device.