black flat screen computer monitor
Photo by Josh Sorenson on Pexels.com

Issue Description :

We were facing MDM errors when Outlook or any Office desktop app was activated by end user on a new Machine.

Error : CAA50024, Error response came from MDM terms of use page.

This wasn’t impacting registration of devices in Azure AD but causing annoyance to end users. I did couple of testing and it shows that users who weren’t assigned Intune licenses were getting this error when Azure AD tried to enroll devices in Intune.

MDM Error.png

Reason :

Intune license wasn’t assigned to everyone and MDM Scope was set to All. This error occurred when devices were trying to be auto-registered in Intune but lack of licenses on those users caused this issue.

Fix :

There are two type of fixes but first one is recommended :

  • Scope MDM Policy to pilot users, so they are only allowed to register device in Intune.

Scoping.png

OR

  • Create CNAME Records, It is not recommended if you are using Intune. There isn’t any official answer but forums says that these cname should be deleted when intune is used.

mdm1

Thank you for reading !

 

Advertisement