Problem adding a second company email account in Outlook on iOS due to MDM/Intune policy

Jakub Albrecht 0

I'm trying to add a business email account from e.g. @second-domain.cz to the outlook application on ios, while I already have another business email account on my phone, including configuring a security profile, I get the following error message:

Misconfiguration warning

Your administrator wants applications on this device to be managed using the user@first-domain.cz account. The user@second-domain.cz account you are using will be removed. If you want to have access to the organization's data using the user@second-domain.cz account, you must cancel the registration of your device on the Company Portal.

The strange thing is that when I am in the same default situation, i.e. with an installed e-mail account and a security profile from the domain @first-domain.cz, if I add an e-mail account of a 3rd company with the domain user@third-domain.cz, everything works. It will probably be necessary to configure accounts on the @second-domain.cz domain differently. I have administrator access to the @second-domain.cz. Please advise me what settings on the @second-domain.cz I should change so that I can add the email account from the @second-domain.cz to the outlook application on ios even in a situation where I have access to email installed on this device and a security profile from the @first-domain.cz? Thanks

ZhoumingDuan-MSFT 13,155 Reputation points Microsoft Vendor

2024-10-08T06:02:57.6133333+00:00

Hi, @Jakub Albrecht

If the answer is helpful, please click "Accept Answer" and kindly upvote it to help others with the same problem as soon as possible.

1 answer

ZhoumingDuan-MSFT 13,155 Reputation points Microsoft Vendor

2024-09-09T02:07:29.8966667+00:00

@Jakub Albrecht, Thanks for posting in Q&A.

Based on my experience, when there is app protection policy applied to corporate outlook account, other account cannot be added on the same outlook anymore.

To clarify this issue, please check the following.

1.Are these three corporate accounts belonging to three different tenant or one tenant?

2.Please check If there exist app protection policy in Microsoft Entra or Microsoft Intune.

Please check above information, if there is any update, feel free to let me know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
ZhoumingDuan-MSFT 13,155 Reputation points Microsoft Vendor

2024-09-11T08:48:36.1266667+00:00

@Jakub Albrecht, Hope things going well.

May I know the status from your side? If there is any update, feel free to let me know.

Jakub Albrecht 0 Reputation points

2024-09-11T19:24:09.19+00:00

Hello, thank you for your reply.

I add few more details:

@first-domain.cz is the company (7500 employees) where I work full time as an employee. I have no access to the confirugation of the security policies. I use Intune in my iPhone which forces me to install security profile as defined by security officers managing M365/Intune for my employer. When I asked those guys for the solution of my problem (cannot add @second-domain.cz email to the same iOS Outlook - cf. this thread) they replyed that there is not configured such a rule which could deny another account

@second-domain.cz is non-profit of my wife. I am the admin of all the services. I only trouble is that I do not know what and how to configure. When I tried to add email from this domain, error ocured (cf. this thread)

@third-domain.cz is the small company which I sometime work for as well. It is about 20 employees and there is small change to ask for the changing the security rules is necessary. But it is not necessary because I did succeed in adding @third-domain.cz email account my iOS Outlook with installed secuty profile from my main employer @first-domain.cz

My conclusion is that the trouble is in the the configuration of Intune security policies in @first-domain.cz because I did succeed with adding the @third-domain.cz email account. And for the same reason I believe your comment "Based on my experience, when there is app protection policy applied to corporate outlook account, other account cannot be added on the same outlook anymore" is not valid for this case as well.

I believe that the trouble can be solved be reconfiguration of the policies in @second-domain.cz which is fully under my own control. The only trouble is that I do not know where and how the reconfiguration should be executed.

Please - do you have some advice / manual for me?

Thank you very much

Kind regards.

Jakub Albrecht

confused inexperienced M365 admin

ZhoumingDuan-MSFT 13,155 Reputation points Microsoft Vendor

2024-09-12T06:46:12.7366667+00:00

@Jakub Albrecht, Thanks for your reply.

You can do a test to check if there exist app protection policy in you second services.

Try to delete all email account on your outlook app, reset it and uninstall it, then re-install it, add the @second-domain.cz account first, after that try to add first and third account, if you can successfully add the second account, but failed add the first and third account, that means there is app protection policy in Intune Microsoft Entre or Microsoft Intune portal.

Since you are the admin of the second services, it is suggested that you check if there are some app protection policies, app configuration policy, or security baseline in you second Microsoft Entra or Microsoft Intune portal blocking you add your outlook account to IOS device

ZhoumingDuan-MSFT 13,155 Reputation points Microsoft Vendor

2024-09-17T09:09:16.16+00:00

@Jakub Albrecht, Hope things going well.

May I know the status from your side? If there is any update, feel free to let me know.

ZhoumingDuan-MSFT 13,155 Reputation points Microsoft Vendor

2024-09-24T06:17:16.0266667+00:00

@Jakub Albrecht, Hope you have a good day.

If the answer is helpful, please click "Accept Answer" and kindly upvote it to help others with the same problem as soon as possible.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Problem adding a second company email account in Outlook on iOS due to MDM/Intune policy

1 answer

Your answer