Skip to main content

Fix Intune Profile Installation Failed during macOS Enrollment

While enrolling the macOS in Intune, you may encounter a warning, “Profile Installation Failed“. Could not obtain the final profile using the Encrypted Profile Service. In this article, I will show you how to resolve this error and provide you with some troubleshooting steps.

When you register macOS devices into Intune, you might end up with several enrollment errors. Thankfully, the Intune portal now shows the device enrollment failures right on the dashboard. This makes it easy to troubleshoot the device enrollment errors.

I recently published a guide on enrolling macOS into Intune, where I covered the steps to enroll macOS devices into Intune using the company portal app. Microsoft Intune supports enrollment on personal and company-owned devices. Only when you enroll your macOS devices in Intune, you can manage them.


Intune Profile Installation Failed during macOS Enrollment


During the macOS enrollment in Intune, while installing the management profile, I encountered the following error “Profile Installation Failed”. Could not obtain the final profile using the Encrypted Profile Service. The credentials within your profile may have expired. Try downloading a new profile.

The Profile Installation Failed error appears when macOS enrollment restrictions are in place or there are existing profiles on the Mac, preventing the installation of a management profile.

Let’s go through the solutions to resolve the profile installation failed errors for macOS enrollment.


Solution 1: Review macOS Enrollment Restrictions in Intune


MacOS enrollment restrictions are one of the most common reasons why the management profile installation fails during macOS enrollment. Intune automatically classifies macOS devices as personally owned and allows you to enroll in macOS. The device enrollment restrictions let you restrict devices from enrolling in Intune based on certain device attributes. If the device restrictions are in place that prevent enrolling macOS in Intune, you cannot enroll the Mac devices.


To review the macOS enrollment restrictions in Intune, use the following steps:


  1. Sign in to Intune admin center.
  2. Go to Devices > Device Enrollment > Enroll Devices.
  3. Select Enrollment device platform restrictions and switch to the MacOS restrictions tab.

http://orphe7.free.fr/forum/viewtopic.php?p=616

http://orphe7.free.fr/forum/viewtopic.php?p=521

http://heroicfantasygames.free.fr/Forum/viewtopic.php?p=124598

http://heroicfantasygames.free.fr/Forum/viewtopic.php?p=86601

http://www.hondaikmciledug.co.id/HRIS/showthread.php?tid=122&pid=127#pid127

https://www.truecrimecollectors.com/showthread.php?tid=6733

http://www.yypf.com/showthread.php?tid=1422

https://www.csoyuncu.net/showthread.php?tid=14405

http://majigi.thedaycorp.kr/bbs/board.php?bo_table=blue_gallery&wr_id=23&sst=wr_datetime&sod=asc&sop=and&page=1&me_code=&me_code=&me_code=

http://-7457.aaad.kr/bbs/board.php?bo_table=inquiry&wr_id=113902

https://www.gasdefence.ru/forum/viewtopic.php?t=106908

https://www.gasdefence.ru/forum/viewtopic.php?t=106901

http://junlinro520.gain.tw/viewthread.php?tid=218760&extra=

http://junlinro520.gain.tw/viewthread.php?tid=180213&extra=

https://www.wolala.love/thread-36657-1-1.html


Your administrator may have created a device restriction to block enrollment of MacOS. If there are multiple restrictions created for devices, you will have to review each restriction one by one and make sure the macOS platform is allowed for enrollment. By default, the restrictions are configured to allow the macOS to be enrolled in Intune, and this is applied to All Users.

When you edit the restriction and go to the properties, you can find out whether the macOS devices are allowed to enroll or they are blocked.


Solution 2: Verify if the Apple MDM Push Certificate is valid


When you enroll iPadOS/iOS devices into Intune, one of the prerequisites is the Apple MDM Push certificate requirement. This certificate is required to manage macOS devices in Microsoft Intune. If the Apple MDM push certificate isn’t configured or if the certificate is expired, you’ll face enrollment issues.

To verify if the MDM push certificate is active and valid, use these steps:


  1. Sign in to Microsoft Intune Admin Center.
  2. Go to Devices > macOS > macOS enrollment.
  3. Select Apple Push MDM Certificate to check the status of the certificate. If the status of the certificate shows as Active, it’s all good. If the certificate shows as expired, you may have to renew it and import it into Intune portal.


Solution 3: Check if the User is assigned an Intune License


If the user who is attempting to enroll the macOS into Intune isn’t assigned an Intune license, the enrollment will fail, and you may not be able to download and install the management profile on macOS devices. You can review the licenses assigned to a user by going to Microsoft 365 admin center > Users > Select the User and review the Licenses and Apps.

It is also critical that the user attempting to enroll macOS into Intune has the necessary permissions. The user will be unable to enroll Macs in Intune without the enrollment permissions.


Solution 4: Delete the existing Profiles on your Mac


When you install a management profile while enrolling Macs in Intune, you gain access to your company apps. As a result, the success of this profile installation is critical. In some cases, the existing profiles may cause issues during the macOS enrollment and result in a profile installation failed error.

You must delete the conflicting management profiles from macOS to resolve the profile installation failed issue. If an existing management profile is impeding enrollment, delete it and re-enroll the Mac device. If that doesn’t work, uninstall the company portal on your MacBook, download a fresh installer, and start the enrollment process again.


Conclusion

I hope the solutions covered in this article will help you resolve the profile installation failed warning during macOS enrollment in Intune. If something else worked for you, please let me know in the comments section.

Comments

Popular posts from this blog

How do I sign into Amazon Prime on my Samsung Smart TV?

Prime Music   You can get to Prime Music with an Alexa-empowered gadget, Fire TV, Fire TV Stick or Fire Tablet yet in addition with Sonos, iPhone, Android telephones and tablets, PC/MAC, internet browsers, brilliant TVs and even a few vehicles. Access a large number of playlists, stations and tunes whenever and from anyplace. Your listening is continuous, promotion free and on-request with boundless skips and disconnected playback. How to interface?  For cell phones, download and dispatch the Amazon Music application on your gadget, at that point sign in utilizing data for your essential . Visit here for more details : norton.com/setup For Alexa-empowered gadgets, simply ask, "Alexa, play music" or request your main tune, craftsman or collection. For Fire TV Voice Remote, essentially press the mouthpiece catch on the Alexa Voice Remote and demand a melody. Furthermore, with no Voice Remote, simply explore to Your Apps and Games. Prime Reading  Prime ...

Download the Latest Microsoft Intune Architecture Diagram

This article describes how to download the latest Microsoft Intune architecture diagram. You can download a high-level architecture for Microsoft Intune and use it as a reference to learn about Intune’s capabilities. The IT decision-makers and architects can use the illustrations to determine the ideal solutions for their workloads and to make decisions about core infrastructure components such as networking, identity, and security. If you are an Intune administrator, this high-level Microsoft Intune architecture diagram is very useful in understanding about the Intune product family. Microsoft adds several new features to Intune with every service release. I am confident this diagram will be updated in the future once Microsoft adds new services to Intune, such as advanced app management and cloud certification management capabilities. Until then, you can use this diagram to understand how Intune integrates with other solutions. https://fofabaike.com/forum.php?mod=viewthread&tid=5...

Make Turkey Day Easy With Free Thanksgiving Templates for MS Word

Regardless of whether you're searching for an exquisite blowout or an agreeable, carefree Thanksgiving, these free Microsoft Word layouts can help with the readiness. visit here for more details : norton.com/setup These instant instruments can truly make all the difference with regards to solicitations, beautifications, menus, and that's only the tip of the iceberg. Step by step instructions to Get These Free Thanksgiving Templates  Dissimilar to different layouts that are accessible as downloads, these are open legitimately inside Microsoft Word. https://www.blackandbluedirectory.com/index.php?p=d https://www.blackandbluedirectory.com/index.php?p=d To discover these formats, open a clear or existing Word record, and after that go to File > New. From that point, look for the layout as depicted underneath, click it, and afterward select Create to open it in Word. click here : norton setup 01  Thanksgiving Cards Template for Invitations or Recipe Cards...