User getting 8018002 error when trying to register device to company. Office support says its Azure problem.

Reenst Lesemann 161

In Windows 10>Settings>Account>Access Work> Connect, device registration fails and returns 80180002 error. Activating Office 365 desktop apps returns same error.

Problem started after Bios settings reset request from Dell Support for unrelated battery issue.

MS Office support ticket opened and closed as they say issue is with Azure.

PC reset and computer renamed but that did not resolve problem.

Alfredo Revilla - Senior Freelance SWE, SWA, IAM 26,936 Reputation points

2020-08-25T16:40:44.917+00:00

@Reenst Lesemann besides the bios, has there been any network related change? net adapter, ip configuration settings? dns? proxy?

Accepted answer

Reenst Lesemann 161 Reputation points

2020-08-26T17:13:32.503+00:00

I'll answer my own question. The problem was that the addition of InTune to Azure causes mobility settings to be turned to incorrect setting. Without a subscription to InTune, there is no way to fix this. Had to do free premium trial to be able to assign license and change MDM and MAM settings to 'None'. Image shows correct settings.
Please sign in to rate this answer.

11 people found this answer helpful.
Scott Haigh 1 Reputation point

2021-10-14T15:36:41.523+00:00

This fixed it for me. Turned out I added a new subscription to our tenant (Microsoft Business Premium) for a handful of users, which includes InTune. This "activated" intune in the tenant, and the policy as referenced above is that ALL devices must register.

So users who were not assigned the business premium license could not register because they did not have a license that included intune

Setting the MDM scope to NONE allowed unlicensed intune users to once again register their Windows 10 devices in the Accounts/Add Work account settings app.

PrimoQ 21 Reputation points

2022-09-26T22:27:57.81+00:00

I had the same issue and your post helped me fix it.
I set MDM user scope to None and MAM compliance URL to None

I had to get a Microsoft Intune trial so I could have access to the Intune configuration.
I disabled the trial period right after I fixed the issue.
Now I have no problems connection any user to a MS account.
Thanks again.

Nicholas Slater 0 Reputation points

2023-01-25T14:24:16.2933333+00:00

Awesome THANK YOU

This has fixed all computers with this issue on our domain :)

Amanda Klinck 0 Reputation points

2023-05-11T14:23:53.23+00:00

You are disbaling the ability to scope MDM auto enrollment to user groups. I am getting this same error and one tes user was able to register and the other test user got this same error. Both are configured exactly the same and in the same scoped group... set to Some.. scoped to group.

Jeff Campbell 5 Reputation points

2023-05-25T12:33:31.7266667+00:00

When you have a tenant that includes a mix of different types of licenses that include licenses such as Microsoft 365 Business Premium which includes Intune services, you need to be able to have Intune subscribed users auto-enroll and those without not be forced to which will produce this error.

Create a Dynamic Group in Azure AD using the ServicePlanID of the intune Plan included with Microsoft 365 Business Premium. This will automatically add any users with a Plan that includes Intune to the group. Name the group something like Intune Subscribed Users.

In the Autoenrollment screenshot provided in the original response change the MDM and MAM user scope to SOME and choose the new group you created.

See screen shot and below

https://learn.microsoft.com/en-us/microsoft-365/enterprise/view-licenses-and-services-with-microsoft-365-powershell?view=o365-worldwide

https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/licensing-service-plan-reference

https://365bythijs.be/2020/01/20/creating-a-dynamic-group-with-all-aad-premium-licensed-users/
Sign in to comment

8 additional answers

Justin Carlson 15 Reputation points

2023-02-01T15:17:56.2966667+00:00

OK this happened to us as well. turns out when we signed up for 365 we got a trial of intune and then it was still setup after the trial but could not manage.

went to the o365 admin > Azure admin > Clicked on Azure AD in the left pane > scroll down to mobility (MDM and MAM) > clicked on both apps and then clicked delete. intune icon is still there but disabled now.

all our devices now add normally without having to unclick the "add my device" checkbox.
Please sign in to rate this answer.

3 people found this answer helpful.
David Birch 0 Reputation points

2023-02-08T15:46:57.66+00:00

This also just happened to me, the fix worked after the usual 365 propagation. I did not have to delete them, just switch to "None"

Jenny Council 25 Reputation points

2023-06-13T02:29:54.4966667+00:00

they moved "mobility" to undereath "settings"
Sign in to comment
Chen Xunlin 10 Reputation points

2023-02-10T13:52:20.2566667+00:00

Hi Guys, this may help!!!
Please sign in to rate this answer.

2 people found this answer helpful.
Ben Evans | FTH Australia 0 Reputation points

2023-12-20T22:09:57.5566667+00:00

New PC today and encounter this error. Unchecking the 'organization to manage my device' worked for me. Thanks Chen.
Sign in to comment
Ian Matthews 141 Reputation points

2023-05-24T23:13:48.0866667+00:00

This was driving us crazy so after a few hours or research and trial... and mostly error, we came up with

https://www.urtech.ca/2023/05/solved-error-80180002-your-account-was-not-setup-on-this-device-because-device-management-could-not-be-enabled/

The basic idea is to remove the InTune requirements.

I hope the helps :)
Please sign in to rate this answer.

2 people found this answer helpful.

0 comments No comments
Sign in to comment
Tasneem-MBA Jamali 6 Reputation points

2020-12-17T00:11:50.78+00:00

@ReenstLesemann

how did u do that? I am setting up a laptop for my organization, and by adding the work email am getting this message.
How do I go about this?
thanks
Please sign in to rate this answer.

1 person found this answer helpful.
Nadler Sven 1 Reputation point

2021-01-28T22:44:42.457+00:00

Okay so this is kinda confusingly phrased in Windows' settings, but i figured it out:

If you want to login to your company's MS365 to manage your device's configuration, you will need an intune license, like ReenstLesemann-1531 pointed out, as this is the whole purpose of intune / azure ad. Then you'd login on the settings page "Access work- or school account".

However, if you want to login to your company's MS365 just to do things such as accessing your mail or your OneDrive / your company's
SharePoint directories via OneDrive then you can login via the page "E-mail and accounts", even if you want log in with a company- or school account.

Make sure to uncheck this box after typing in your credentials:

PrimoQ 21 Reputation points

2022-12-01T17:53:48.043+00:00

Thank you, your suggestion above fixed my issue.
Sign in to comment