This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(307.2, 60%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHD%3C/text%3E%3C/svg%3E)
When the user is enrolling and they go select their work account to enroll with, an "Apple ID' window pops up with the users work email address (not their Apple ID), the system won't take their Apple password or their work password. It is not happening to everyone, just about five out of thirty people enrolled so far. They can log into the Microsoft exchange on their phone with their work ID and password to access their emails, calendar and contacts. They just can't enroll in to Intune. Has any one come across this problem?
Could you explain more about the enrollment process you have implemented ?
From what you are explaining the only thing I can think about is that you are using Apple's "User enrollment"
scenario, where the end user needs to have a managed apple ID in order to enroll their device in to Intune.
If you are using the "User enrollment" scenario, is there a reason for that ?
No we are not using DEP. We are simply going to the Company portal and logging in. We have an Apple cert set up for IOS. When they go to enroll after beginning the process, a window that says Apple ID pops up with their work email in it (yet that's not their apple Id) that populates and not their work account.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 30%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
@Heidi Drejas (admin) , From your description, it seems five out of thirty people are failed to enroll their Apple device.
if we enroll our Apple device with "User enrollment", please check if the Apple id we used is Managed Apple id during enrollment. Research and find a detailed link describe the user enrollment. We can read it as a reference:
https://www.robinhobo.com/how-to-enroll-an-apple-device-with-ios-13-user-enrollment-mode-in-microsoft-intune/
Note: Non-Microsoft link, just for the reference.
However, if we want device enrollment, please check the "enrollment type" to see if it is set correctly.
If there's any misunderstanding or if there's anything unclear, feel free to let us know.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@Heidi Drejas (admin) ,, How's everything going? I am writing to see if the issue is resolved. If there's any update, feel free to let us know.
Thanks and have a nice day!
Sorry I've been busy! Let me get back to you after reading your doc. But we aren't using DEP. Does that help?
Setting my BYOD enrollment type to "device" seems to have worked! So far one user affected was able to start over and finally get enrolled. THANKS for the teaching!!
@Heidi Drejas (admin) , Thanks for the update. I am glad to hear that after changing enrollment type to "device", it is working. If there's anything else we can help in the future, feel free to post in our Q&A.
Thanks for your time and have a nice day!
I do have a BYOD IOS group created. I have enrollment type set to "user enrollment", should it be device or user choice instead?