Let’s fix the Intune Enrollment Errors 0x80180014, and 80180003 Unknown Win32 Error Code failed issue. Let’s find out what could be one of the reasons for the Intune error during the enrollment.
The Intune enrollment errors 0x80180014 and 80180003 don’t indicate an issue. The Unknown Win32 Error code 0x80180014 during enrollment is not always an error that you want to fix. But this error can be a feature itself, so you might not always need to worry about the enrollment error.
The error includes the following details as well “Failed to Receive or Parse Certificate Enroll Response.” This is one of the errors you want to happen for your users when required! Surprised! Well, read on!
You will need to know more about Intune Enrollment Restriction Policies available in Microsoft Endpoint Manager (MEM) Intune before fixing Intune enrollment errors. There are two types of enrollment restriction policies in Intune 1. Enrollment device platform restrictions and 2. Enrollment device limit restrictions.
Microsoft recently enabled the Intune Filter rule for Intune device type and device limit restriction policies. This also changed the policy setting configuration UI. I have updated the post with the latest screenshot after the recent change.
- Windows 10 Azure AD Join Manual Process – CYOD
- Intune Logs Event IDs IME Logs Details for Windows Client Side Troubleshooting
- Intune User Policy Troubleshooting Tips for Prevent Changing Theme MEM
Unknown Win32 Error Code 0x80180014 Failed Issue
Let’s understand unknown Win32 Error Code 0x80180014 Failed Issue more. When a user tries to enroll the personal Windows 10 or Windows 11 device into the Intune, I have seen this issue.
There are many ways to enroll a Windows device into MDM management using Intune. I have explained Company Portal and Settings apps Intune enrollment methods in the following blog post.
The following post is applicable for Windows 10 and Windows 11 scenarios. Windows 11 Intune Enrollment Process Using Company Portal Application Settings App
The following is one of the errors I got several months back on Windows 10 PC (setting app enrollment). The Intune enrollment error says Your Organization doesn’t support this version of Windows. (0x80180014).
This error message is a bit clear, and it says that there is some Intune policy restricting the device from enrolling into Intune. But it didn’t specifically mention the Windows OS version it’s looking for, etc.
Company Portal Enrollment Error 80180003
Let’s check more details about Company Portal Enrollment Error 80180003. In the following screenshot, you can see how the error is displayed in the Windows 11 PC when trying to enroll using the Company Portal method.
Something went wrong – Your account was not set up on this device because device management could not be enabled. This device might not access some resources, such as Wi-Fi, VPN, email.
The error code shown in the company portal is 80180003. The Server message is important here – The user is not authorized to enroll in Mobile Device Management (MDM). Try again or contact the system administrator.
This error means something to do with the policy restriction set up in Intune MEM portal. We will see more about this in the below section.
Intune MDM Enrollment from Personal Device
I’ve configured MDM auto-enrollment from Intune. As per my understanding, this is applicable only for Azure AD joined devices, and personal devices are always Azure AD registered devices. Hence MDM auto-enrollment policies are not applicable there. Let me know in the comments if this understanding is wrong!
You can navigate to Devices – Enroll Devices – Automatic Enrollment from the General section to check these settings. But this is not applicable for personal devices (non-Azure AD joined).
Troubleshoot Intune Enrollment Issues with Event Logs
Let’s check the event logs to understand the error “Failed to receive or parse certificate enroll response. Result: (Unknown Win32 Error code: 0x80180014).” More details on Intune troubleshooting, IME log file, and event log details are available in the following post – Intune Logs Event IDs IME Logs Details for Windows Client Side Troubleshooting.
- Event Logs Entries – Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin.
- Event IDs are 55, 71, 11, 52, and 59
The following Event logs were recorded when I tried to enroll a Windows 10 PC into MDM from the Settings app.
MDM Enroll: Authentication successful: Got token from STS.
MDM Enroll: Certificate enrollment request sent successfully.
MDM Enroll: Server context ( 7680dc07-98d1-4786-9df2-cce237849864b).
MDM Enroll: Server Returned Fault/Code/Subcode/Value=(DeviceNotSupported) Fault/Reason/Text=(Device Identifier not preregistered).
MDM Enroll: Failed to receive or parse certificate enroll response. Result: (Unknown Win32 Error code: 0x80180014).
MDM Enroll: Failed (Unknown Win32 Error code: 0x80180014)
As explained above, the following event logs were recorded on Windows 11 PC when I tried to enroll using the Company portal application.
Event Log ID 59 – MDM Enroll: Server context (7680dc07-98d1-4786-9df2-cce237849864b).
Event Log ID 52 – MDM Enroll: Server Returned Fault/Code/Subcode/Value=(Authorization) Fault/Reason/Text=(Authorization).
Event Log ID 11 – MDM Enroll: Failed to receive or parse certificate enroll response. Result: (The user is not authorized to enroll to Mobile Device Management (MDM). Try again or contact your system administrator.).
Event Log ID 71 – MDM Enroll: Failed (The user is not authorized to enroll to Mobile Device Management (MDM). Try again or contact your system administrator.)
Fix Intune Enrollment Errors from Personal Device
Let’s check how to Fix Intune Enrollment errors from Personal devices. You can educate the user that they might get this error if they try to enroll into Intune. The fix is nothing but asking them to join their device into Azure AD.
I have explained the Azure AD joined scenario in the following post – Windows 10 Azure AD Join Manual Process – CYOD. But this is applicable for Windows 11 Devices as well.
Reason for the Intune Enrollment Error?
Let’s understand the reason for the Intune enrollment error Unknown Win32 Error Code 0x80180014 and Failed to Receive or Parse Certificate Enroll Response.
The user got the following error when he tried to perform “Enroll Only into MDM” from Settings – Accounts – Access work or school options on Windows 10. As explained above, I got another error in the Company portal from Windows 11 PC.
This error is expected if the user who tried to enroll the device is part of the Intune Device Type Restriction policy where personal device enrollment is BLOCKED. More details – https://www.anoopcnair.com/block-personal-windows-devices/
Anoop is Microsoft MVP! He is a Solution Architect in enterprise client management with more than 20 years of experience (calculation done in 2021) in IT. He is Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc……………