iOS/iPadOS configuration profile fails to apply with shared configurations error

Question

iOS/iPadOS configuration profile fails to apply with shared configurations error

Ben 36

This one is weird. I have a custom configuration policy created with Apple Configurator 2 that was uploaded to Intune and was working up until recently. Now, on both iPhone and iPad, the configuration policy fails to apply with Intune error -2016290112/0x87d1dac0, Apple MDM error 46000:Multiple shared device configurations.

I don't understand this error and searching the web only ever points to Apple's MDM protocol reference. The devices are supervised and come into Intune from Apple Business Manager. The intial configuration profile has "Shared iPad" set to no, so I'm not attempting to use Apple's Shared iPad mode at all, and that doesn't apply to iPhones anyway! Yet, the profile will no longer apply to iPhones nor iPads. As a result, all my restrictions and app hiding have come undone and my users are able to bypass my restrictions because the policy is no longer applying.

What can I do to resolve this error?

Accepted answer

0 additional answers

Your answer

Answer 1

Cici Wu-MSFT 1,191

It seems there is some conflict in the custom policy with existing policy. As Intune doesn't evaluate the payload of Apple Configuration files or a custom Open Mobile Alliance Uniform Resource Identifier (OMA-URI) policy. It merely serves as the delivery mechanism. When you assign a custom policy, please confirm that the configured settings don't conflict with compliance, configuration, or other custom policies. If a custom policy and its settings conflict, then the settings are applied randomly.

Ben 36 Reputation points

2021-05-21T14:55:57.35+00:00

Unbelievable. This was it. I do have two policies, one custom, one "Device features" and they had ONE setting that both policies were trying to apply. I went over the policy twice yesterday trying to see if I could find it, but it was a different payload section entirely in Apple Configurator.

If anyone is interested, I had a Lock Screen payload in my custom .mobileconfig that sets a lock screen message (called "If lost, return to..." message in Apple parlance). I also had an Intune native Device Features policy that was also setting an "If lost, return to..." message. The Device Features policy was winning and invalidating the custom policy.

I didn't need a lock screen payload in my custom policy, so I removed it and now both policies are syncing successfully to my iPhones and iPads. Thank you!
Cici Wu-MSFT 1,191 Reputation points

2021-05-24T01:28:10.993+00:00

Thanks very much for your reply with detailed information. If there is any other issue in the future, feel free to post back and we are willing to help you again. Have a nice day!

Share via

iOS/iPadOS configuration profile fails to apply with shared configurations error

0 additional answers

Your answer