- Check Device Enrollment Limits
- Sign in to the Azure AD portal.
- Go to Users → select your account → Devices tab.
- Review the list of registered devices. If you have reached the maximum allowed by your organisation’s policy, remove older or unused devices by selecting them and clicking Remove.
- Try enrolling the new device again.
- Verify Organisational Policy
- Contact your IT administrator or helpdesk to confirm whether your account is permitted to enrol devices into Azure AD or MDM.
- Some organisations only allow domain-joined devices, certain hardware types, or specific Windows editions (e.g., Pro or Enterprise).
- If your device is blocked by policy, request a policy change or use an approved device.
- Remove Previous Enrollment Records
- On your device, go to Settings → Accounts → Access work or school.
- Select any existing work or school accounts and click Disconnect.
- Restart your PC.
- This clears any stale enrollment data that could conflict with new enrollment.
1.Update Windows to the Latest Version
- Go to Settings → Update & Security → Windows Update.
- Click Check for updates and install all pending updates, including optional ones.
- Many MDM solutions require devices to meet a specific Windows build version before enrollment is allowed.
2.Check MDM and Azure AD Configuration
- If you are an IT admin, ensure that the MDM authority (e.g., Intune) is set correctly in the Microsoft Endpoint Manager admin centre.
- Confirm that enrollment restrictions are configured to allow the device platform (Windows) and that your user group is included in the allowed list.
3.Use Company Portal App (If Required)
- Open the Microsoft Store and search for Company Portal.
- Download and install it on your device.
- Launch the app, sign in with your work or school credentials, and follow the enrollment prompts to complete registration.
4.Verify Compliance Requirements Before Enrollment
- Check if BitLocker encryption is enabled on your device.
- Ensure you have a strong password or PIN that meets security policy requirements.
- Make sure Windows Defender or approved antivirus software is enabled and up to date.
- Disconnect from any public Wi-Fi and use a secure connection during enrollment.
5.Re-attempt Enrollment
- Go to Settings → Accounts → Access work or school → Connect.
- Enter your work or school email and password.
- Follow the prompts until your device is successfully joined to Azure AD or enrolled in MDM.
- If the error persists, repeat the process after performing the above steps to ensure all prerequisites are met.