This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
A user completes Windows Autopilot setup but their device shows 'Not enrolled' in the Intune admin center 30 minutes later. The user successfully signed in with their Microsoft Entra account. What should you check first?
Whether an Intune license is assigned to the user's account
Whether Secure Boot is enabled on the device
Whether the device's MDM enrollment URL is correctly configured in DNS
A Windows device enrolled in Intune shows a 'Conflict' status for a VPN configuration profile. The device is online and checking in. What is the most likely cause?
The profile platform is incompatible with the device's Windows edition
Two or more configuration profiles assigned to the device configure the same VPN setting with different values
The device hasn't synced with Intune since the profile was last modified
A user calls the help desk saying they can't access company email on their personal device. Intune shows the device as noncompliant. What is the most likely reason they're being blocked?
The user's Intune license has expired
A Conditional Access policy is requiring device compliance as a condition for accessing Exchange Online
The device's enrollment token has expired and needs to be re-enrolled
You need to investigate why a specific user's device isn't receiving an assigned app. Which tool in the Intune admin center gives you a single view of that user's device assignments, policy evaluations, and app deployment status?
Endpoint Analytics > Device scores
The Intune Troubleshooting blade (Troubleshooting + support > Troubleshoot)
Devices > Monitor > Device compliance
After a software deployment, the Windows Time service keeps getting disabled on devices, which breaks Kerberos authentication. The issue recurs every few days. What is the best way to address it?
Create a compliance policy that marks devices noncompliant when the Windows Time service is disabled
Deploy a Remediation script package that detects when the Windows Time service is disabled and automatically restarts and re-enables it
Assign a device restriction configuration profile that prevents users from modifying Windows services
You must answer all questions before checking your work.
Was this page helpful?
Need help with this topic?
Want to try using Ask Learn to clarify or guide you through this topic?