Share via

Device management could not be enabled, error code -2145833241

Ryan Burgess 20 Reputation points
2026-01-07T07:18:38.9766667+00:00

Hello,

Our company is experiencing the issue of "device management could not be enabled, error code -2145833241" when loading a work account onto different personal computers for staff members to access the company database. This was after creating a local accounts to set the computers up.

We have gone through steps:

  1. Window settings: start>settings>accounts>email & accounts> add work account.
  2. Settings > Accounts > Access work or school > Enroll only in device management, then attempt the process again.

Note: I have my "work account" added to my current personal computer, but have received a new laptop - so looking to set this up on the new laptop. This same issue has been encountered when adding separate "work accounts" onto other computers as well

Yet we still keep encountering the error code -2145833241 "Device management could not be enabled"

Can you please advise on what the next steps would be? Perhaps something needs to be changed on the administration end?

Thanks,

Windows for business | Windows Server | Devices and deployment | System management components
0 comments

Answer accepted by question author

Harry Phan 21,825 Reputation points Independent Advisor
2026-01-07T10:57:05.71+00:00

Hello Ryan,

The error code -2145833241 occurs when Windows cannot enable device management during enrollment. This usually points to a tenant-side configuration or licensing issue rather than a local PC problem. When a user adds a work account, Windows attempts to register the device with Azure AD and Intune. If Intune licenses are not assigned, or if enrollment restrictions block personal devices, the process fails with this error.

You should verify in the Microsoft 365 Admin Center that affected users have valid Intune or Microsoft 365 Business Premium/E3/E5 licenses. Next, check Endpoint Manager under Devices > Enrollment restrictions to confirm personal Windows devices are allowed. Also ensure automatic MDM enrollment is enabled in Azure AD > Mobility (MDM and MAM) and that the MDM URLs are correctly configured.

On the client side, remove the work account from Access work or school, run dsregcmd /leave to clear stale registration, then retry enrollment. If the same error appears across multiple machines, the root cause is almost certainly tenant configuration or licensing.

At that point, the best step is to review Intune enrollment policies and, if necessary, open a support case with Microsoft to confirm the tenant is properly set up for Windows device management.

I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to accept the answer. Should you have more questions, feel free to leave a message. Have a nice day!

Harry.

Was this answer helpful?

1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-01-07T07:18:48.0133333+00:00

    The error code -2145833241 typically indicates an issue with device management enrollment in a corporate environment. Here are some steps you can take to troubleshoot and resolve this issue:

    1. Check Device Compatibility: Ensure that the version of Windows on the new laptop is supported for device management by your organization. Some older versions may not be compatible.
    2. Verify MDM Enrollment Settings: The administrator should check the enrollment restrictions in the Microsoft Intune admin center. Make sure that the device type restrictions allow for the type of device you are trying to enroll.
      • Navigate to Devices > Enrollment restrictions > select the appropriate restriction and ensure that Windows (MDM) is allowed.
    3. Active Directory Permissions: Ensure that the user account being used to enroll the device has the necessary permissions to enroll devices in Microsoft Entra ID. The account should be part of a group that has permission to join devices.
    4. Network Connectivity: Ensure that the laptop is connected to the internet and can reach the necessary endpoints for device management. Sometimes, network issues can prevent successful enrollment.
    5. Local Account Issues: Since you mentioned creating local accounts, ensure that the local accounts do not interfere with the work account setup. It may be beneficial to remove local accounts if they are not needed.
    6. Contact IT Support: If the issue persists, it may be necessary to contact your IT support team for further assistance. They can check the logs and settings on the administration side to identify any potential issues.

    By following these steps, you should be able to identify and resolve the issue with device management enrollment.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.