Error Message logging into Itune

Question

See attached for the error message when logging into Apps and Intune Company Portal.

Answer 1

Hi James Sigmon,

I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to accept the answer then. Should you have more questions, feel free to leave a message. Have a nice day!

VPHAN

Answer 2

Like I said, if you just need Office apps (Outlook, Teams, Excel), you can bypass this error by skipping the enrollment process.

Go to Settings > Accounts > Access work or school.

If your work account is listed there, click it and select Disconnect.

Open Outlook or Teams and sign in again.

1. Crucial Step: When the prompt asks "Allow my organization to manage my device" or "Stay signed in to all your apps," uncheck the box and select "No, sign in to this app only" (this is often a text link at the bottom left of the window).

However, If you strictly need the Company Portal app, you cannot fix this from your computer. You must contact your IT Administrator and tell them specifically, something like "My user account is included in the 'MDM User Scope' for automatic enrollment, but I do not have a valid Intune License assigned in the Admin Center." They must assign the license to your user account or exclude you from the MDM scope in Azure for the Company Portal to work.

I hope my ideas can be some of your help. It's really appreciated of you to accept the answer if you find it useful. Should you have any questions, feel free to leave a message.

VP

Answer 3

I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to accept the answer then. Should you have more questions, feel free to leave a message. Have a nice day!

Vivian

Answer 4

Good morning James Sigmon,

The error code -895156188 is the decimal value for the hexadecimal error 0xCAA50024. This specifically means there is a conflict between the device enrollment policy and your account's licensing. Essentially, your organization's Azure configuration is trying to automatically enroll your device into their management system (Intune) when you sign in, but your specific user account does not have the required Intune or Azure AD Premium license assigned to complete that process. It hits the "Terms of Use" page and fails because the system doesn't view you as a valid user for that specific feature.

If you are just trying to sign into Office apps like Outlook or Teams, you can often bypass this by selecting "No, sign in to this app only" (or unchecking "Allow my organization to manage my device") when the login prompt appears. This skips the broken enrollment step and just logs you into the software. However, since you are trying to access the Company Portal itself, which requires that enrollment to function, that workaround won't apply there. You will need to contact your IT administrator and provide them with this specific error code (CAA50024). They need to either assign an Intune license to your user account or adjust the "MDM User Scope" in their Azure settings to exclude you from the automatic enrollment policy.