question

spols avatar image
1 Vote"
spols asked alokdubey28 answered

Android 12 (Pixel 6 Pro) Enrolment failure with 'UserCanceledManagedProfile' returned

Attempting to enrol my new handset on InTune (Moving from Pixel 2 to Pixel 6), profile fails to be created with generic errors.
Can easily add or remove the same profile (same account) on my Pixel 2 (Android 11) - issue appears to be isolated to the new Pixel 6.


After the "1 Create work profile" step commences, I accept the "We care about your privacy" prompt, after which we get these 2 errors:


Can't add work profile
A work profile can't be added to this device.
If you have questions, contact your IT admin.

...followed by:

Unable to create work profile
We were unable to set up your work profile. If the problem persists, contact your support person because your device might not support work profile creation.

I took verbose logs and extracted the following interesting items:


INFO
com.microsoft.windowsintune.companyportal.omadm.OMADMUpdateReceiver
Enrollment error UserCanceledManagedProfile received. Current enrollment state: ManagedProfilePendingCreation

ERR_
com.microsoft.windowsintune.companyportal.viewmodels.EnrollmentViewModel
Company Portal sent a request to the device to create a managed profile with the Company Portal app as a Profile Owner. The request failed. This may be due to the user not accepting permission prompts, or because their device ran into another problem. Recommendation: uninstall the app, try again, and contact Microsoft support if needed.

INFO
com.microsoft.windowsintune.companyportal.viewmodels.EnrollmentViewModel
Un-registering for enrollment state changes.

ERR_
com.microsoft.windowsintune.companyportal.viewmodels.EnrollmentViewModel
The enrollment flow is exiting with a navigation result 0 (canceled). The enrollment state will revert to unenrolled, and the user will be signed out.


(Already done the obligatory uninstall/reinstall of InTune Company Portal app, as well as phone reboots)


Any ideas please?

Thanks in advance.










mem-intune-device-configurationsmem-intune-enrollment
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi

Are you using enrolment restrictions to block personally owned devices? If so, Android 12 no longer allows the IMEI and SN to be passed to Intune, so you cannot use this as a way to mark a device as Corporate. https://techcommunity.microsoft.com/t5/intune-customer-success/android-12-day-zero-support-with-microsoft-endpoint-manager/ba-p/2621665

I am seeing this issue currently, and not sure if there is a way around it other than to allow personal device enrolments

0 Votes 0 ·

Thanks a lot for the information. That helps me.

0 Votes 0 ·
spols avatar image
0 Votes"
spols answered kpalakondrayudu-4001 commented

Solved - glad to say I worked it out.
Thanks all for your help.

Specific steps that resolved it for me:
1. Uninstall InTune Company Portal
2. Settings->Passwords & Accounts-><scroll to bottom> Remove Work Profile (even though there wasn't a work profile installed)
3. Reboot phone
4. Install InTune Company Portal
5. Sign In and enrol as usual - but this time it works!


150901-image.png


150873-image.png



image.png (13.6 KiB)
image.png (13.1 KiB)
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

Thank you very much for your feedback and sharing. We're glad that the question is solved now. It may help others who have similar issue. If you have any questions in future, we warmly welcome you to post in Microsoft Q&A forum again.

Have a nice day!

Best Regards,
Simon

0 Votes 0 ·

nope. still not working on pixel 6

0 Votes 0 ·

Hi ,
Can you please help me with device type enrolment to resolve the issue.




0 Votes 0 ·
SimonRenMSFT-3639 avatar image
0 Votes"
SimonRenMSFT-3639 answered AdeebIbneAmjad-5370 commented

Hi,

Thanks for posting in Microsoft Q&A forum.

We can't get much helpful information from the general error. If possible, please reset the Pixel 6 Pro (please back up your data) and then enroll it to have a try.

How many devices are facing this issue? Is the Pixel 6 Pro your own device or corporate device? Can we enroll this device with another user accout which has license?

Best regards,
Simon


If the response is helpful, please click "Accept Answer" and upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 7
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for the reply.

Unfortunately not convenient to factory reset and try again, however have removed and reinstalled the InTune Company Portal app, to no avail. The device is less than a week old (new in box).

Not aware of any other Pixel 6 devices in the fleet yet. It's my own device, just like the previous Pixel 2 XL (which works perfectly). Haven't had any errors related to device license limits. I also removed InTune and the profile from the Pixel 2 XL for nearly 2 days. This didn't help the Pixel 6 enrol during that time.

I don't have access to another account to enrol with at this stage.

I can share the full debug logs if required.

0 Votes 0 ·

Hi,

Thanks for your reply.

For this issue, I have done a lot of research. As so far, there is no other user has reported the same problem on the latest Pixel 6 devices in the forum. With Q&A forum limitation, it is suggested to create an online support ticket to get better support and analyze the logs. It is free. Here is the support link:
https://docs.microsoft.com/en-us/mem/get-support

Thanks for your understanding.

Best regards,
Simon


0 Votes 0 ·

Similar issue with enrolment but at the "Update Device Settings" Page (stuck). No matter how many times I hit confirm device settings.

0 Votes 0 ·

This error is caused when a Work profile is half-setup, or errored for whatever reason. So when it tried to re-setup, because one exists, it errors.

If you go to Settings > Passwords and Accounts, you should hopefully see a Work Profile Section.
Delete the work profile and re-setup through Company Portal / Intune App.

I just managed to complete this on my device without having to factory reset it.

0 Votes 0 ·

I have tried this multiple times, doesn't work.

0 Votes 0 ·
Show more comments
TST-1872 avatar image
0 Votes"
TST-1872 answered TST-1872 published

Hello,

I have the same problem with my Google Pixel 6 Pro with Microsoft Intune App.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MathisBlayne-9278 avatar image
0 Votes"
MathisBlayne-9278 answered MathisBlayne-9278 commented

Also same problem here, with Google Pixel 6 Pro and Intune App.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Mine was resolved with a full removal of the work profile, Intune, related apps, a reboot, and reinstall. On reinstall, launching Outlook without first launching Intune/Company Portal configured Company Portal/Intune correctly and as a BYOD didn't need to full enrollment in Intune.

0 Votes 0 ·
SimonRenMSFT-3639 avatar image
0 Votes"
SimonRenMSFT-3639 answered

Hi,

Thanks for your replies. We could try below steps to see if it works:

1,Enable browser access
Launch the Company Portal app.
Go to the Settings page from the menu.
In the Enable Browser Access section, tap the ENABLE button.

2,Remove work profile from settings.

3,Reboot and re-enroll the device.

Thanks for your time.

Best regards,
Simon


If the response is helpful, please click "Accept Answer" and upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MathisBlayne-9278 avatar image
0 Votes"
MathisBlayne-9278 answered

Tried your suggestion SimonRen; no luck. Browser access was already enabled. I removed the work profile, rebooted, and returned to the Company Portal app. I got signed in, through "Create Work Profile" step, but at the "Activate Work Profile" step, got the message "Couldn't add your device. Your company support has not authorized this device for management. Contact your company support for help."

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Smith7092 avatar image
1 Vote"
Smith7092 answered Smith7092 published

Error in logs:
Company Portal sent a request to the device to create a managed profile with the Company Portal app as a Profile Owner. The request failed. This may be due to the user not accepting permission prompts, or because their device ran into another problem. Recommendation: uninstall the app, try again, and contact Microsoft support if needed.

Fixed:

Issue is when your phone is restored from online backup (not cable attached to old phone) , it tries to install a copy from your backup of Company portal and workspace but fails and leaves a failed workspace that seems to block the new install. the fix is to uninstall all intune company portal apps (you may see two), reboot, delete all workspaces, reboot, and install.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DanielTataev-1375 avatar image
0 Votes"
DanielTataev-1375 answered DanielTataev-1375 published

Yes, I cannot use Intune with new Pixel 6. Fails on activation step, which is done with IMEI... Is there any solution?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MarkRo-1640 avatar image
0 Votes"
MarkRo-1640 answered MarkRo-1640 published

I am also experiencing this issue, but I cannot get past the initial setup of the phone. It is just stuck at "Registering Profile..." and "Can't set up work profile"

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Antonios-8122 avatar image
0 Votes"
Antonios-8122 answered Antonios-8122 commented

I had a similar issue but through the uninstall and reboot of the companion app I did manage to register the device. However when adding account through the outlook app, outlook does not recognise that my device (pixel 6 pro) is registered and set up...I get the following report:

Request Id: 94a06dfb-7330-44a7-a669-db9b6d865b00
Correlation Id: 5751ad5a-2844-45cc-b7b0-58ce186d8d5f
Timestamp: 2021-11-24T20:30:15.077Z
App name: Outlook Mobile
App id: 27922004-5251-4030-b22d-91ecd9a37ea4
IP address: 80.4.193.65
Device identifier: Not available
Device platform: Android
Device state: Unregistered

Any ideas?


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Fixed!

the reason Outlook app was not able to communicate with the Intune app, hence the above errors, is because outlook was installed as a "personal app". Once I installed Outlook from the "work"(look for briefcase symbol) Google play and "work" oulook, my account was added successfully.

0 Votes 0 ·