Android 12 (Pixel 6 Pro) Enrolment failure with 'UserCanceledManagedProfile' returned

spols 101

Attempting to enrol my new handset on InTune (Moving from Pixel 2 to Pixel 6), profile fails to be created with generic errors.
Can easily add or remove the same profile (same account) on my Pixel 2 (Android 11) - issue appears to be isolated to the new Pixel 6.

After the "1 Create work profile" step commences, I accept the "We care about your privacy" prompt, after which we get these 2 errors:

Can't add work profile
A work profile can't be added to this device.
If you have questions, contact your IT admin.

...followed by:

Unable to create work profile
We were unable to set up your work profile. If the problem persists, contact your support person because your device might not support work profile creation.

I took verbose logs and extracted the following interesting items:

INFO
com.microsoft.windowsintune.companyportal.omadm.OMADMUpdateReceiver
Enrollment error UserCanceledManagedProfile received. Current enrollment state: ManagedProfilePendingCreation

ERR_
com.microsoft.windowsintune.companyportal.viewmodels.EnrollmentViewModel
Company Portal sent a request to the device to create a managed profile with the Company Portal app as a Profile Owner. The request failed. This may be due to the user not accepting permission prompts, or because their device ran into another problem. Recommendation: uninstall the app, try again, and contact Microsoft support if needed.

INFO
com.microsoft.windowsintune.companyportal.viewmodels.EnrollmentViewModel
Un-registering for enrollment state changes.

ERR_
com.microsoft.windowsintune.companyportal.viewmodels.EnrollmentViewModel
The enrollment flow is exiting with a navigation result 0 (canceled). The enrollment state will revert to unenrolled, and the user will be signed out.

(Already done the obligatory uninstall/reinstall of InTune Company Portal app, as well as phone reboots)

Any ideas please?

Thanks in advance.

TF 1 Reputation point

2021-11-08T13:58:15.15+00:00

Hi

Are you using enrolment restrictions to block personally owned devices? If so, Android 12 no longer allows the IMEI and SN to be passed to Intune, so you cannot use this as a way to mark a device as Corporate. https://techcommunity.microsoft.com/t5/intune-customer-success/android-12-day-zero-support-with-microsoft-endpoint-manager/ba-p/2621665

I am seeing this issue currently, and not sure if there is a way around it other than to allow personal device enrolments
TST 1 Reputation point

2021-11-08T15:02:29.65+00:00

Thanks a lot for the information. That helps me.

Accepted answer

spols 101 Reputation points

2021-11-19T04:23:17.907+00:00
Solved - glad to say I worked it out.
Thanks all for your help.

Specific steps that resolved it for me:

Uninstall InTune Company Portal

Settings->Passwords & Accounts-><scroll to bottom> Remove Work Profile (even though there wasn't a work profile installed)

Reboot phone

Install InTune Company Portal

Sign In and enrol as usual - but this time it works!
Please sign in to rate this answer.
Simon Ren-MSFT 29,791 Reputation points Microsoft Vendor

2021-11-19T07:28:26.32+00:00

Hi,

Thank you very much for your feedback and sharing. We're glad that the question is solved now. It may help others who have similar issue. If you have any questions in future, we warmly welcome you to post in Microsoft Q&A forum again.

Have a nice day!

Best Regards,
Simon

Daniel Tataev 1 Reputation point

2021-11-19T07:30:07.97+00:00

nope. still not working on pixel 6

k palakondrayudu 21 Reputation points

2021-11-19T10:18:26.48+00:00

Hi ,
Can you please help me with device type enrolment to resolve the issue.
Sign in to comment

12 additional answers

MrSmith 6 Reputation points

2021-11-16T01:39:45.26+00:00

Error in logs:
Company Portal sent a request to the device to create a managed profile with the Company Portal app as a Profile Owner. The request failed. This may be due to the user not accepting permission prompts, or because their device ran into another problem. Recommendation: uninstall the app, try again, and contact Microsoft support if needed.

Fixed:

Issue is when your phone is restored from online backup (not cable attached to old phone) , it tries to install a copy from your backup of Company portal and workspace but fails and leaves a failed workspace that seems to block the new install. the fix is to uninstall all intune company portal apps (you may see two), reboot, delete all workspaces, reboot, and install.
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment
Simon Ren-MSFT 29,791 Reputation points Microsoft Vendor

2021-11-03T10:17:15.667+00:00

Hi,

Thanks for posting in Microsoft Q&A forum.

We can't get much helpful information from the general error. If possible, please reset the Pixel 6 Pro (please back up your data) and then enroll it to have a try.

How many devices are facing this issue? Is the Pixel 6 Pro your own device or corporate device? Can we enroll this device with another user accout which has license?

Best regards,
Simon

If the response is helpful, please click "Accept Answer" and upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
spols 101 Reputation points

2021-11-03T10:54:08.623+00:00

Thanks for the reply.

Unfortunately not convenient to factory reset and try again, however have removed and reinstalled the InTune Company Portal app, to no avail. The device is less than a week old (new in box).

Not aware of any other Pixel 6 devices in the fleet yet. It's my own device, just like the previous Pixel 2 XL (which works perfectly). Haven't had any errors related to device license limits. I also removed InTune and the profile from the Pixel 2 XL for nearly 2 days. This didn't help the Pixel 6 enrol during that time.

I don't have access to another account to enrol with at this stage.

I can share the full debug logs if required.

Simon Ren-MSFT 29,791 Reputation points Microsoft Vendor

2021-11-04T09:20:16.79+00:00

Hi,

Thanks for your reply.

For this issue, I have done a lot of research. As so far, there is no other user has reported the same problem on the latest Pixel 6 devices in the forum. With Q&A forum limitation, it is suggested to create an online support ticket to get better support and analyze the logs. It is free. Here is the support link:
https://learn.microsoft.com/en-us/mem/get-support

Thanks for your understanding.

Best regards,
Simon

Adeeb Ibne Amjad 1 Reputation point

2021-11-04T21:31:28.043+00:00

Similar issue with enrolment but at the "Update Device Settings" Page (stuck). No matter how many times I hit confirm device settings.

John Feulner 1 Reputation point

2021-11-05T22:16:05.487+00:00

This error is caused when a Work profile is half-setup, or errored for whatever reason. So when it tried to re-setup, because one exists, it errors.

If you go to Settings > Passwords and Accounts, you should hopefully see a Work Profile Section.
Delete the work profile and re-setup through Company Portal / Intune App.

I just managed to complete this on my device without having to factory reset it.

Adeeb Ibne Amjad 1 Reputation point

2021-11-05T22:18:57.347+00:00

I have tried this multiple times, doesn't work.

TF 1 Reputation point

2021-11-08T14:30:41.847+00:00

Hi

Are you using enrolment restrictions to block personally owned devices? If so, Android 12 no longer allows the IMEI and SN to be passed to Intune, so you cannot use this as a way to mark a device as Corporate. https://techcommunity.microsoft.com/t5/intune-customer-success/android-12-day-zero-support-with-microsoft-endpoint-manager/ba-p/2621665

I am seeing this issue currently, and not sure if there is a way around it other than to allow personal device enrolments

Adeeb Ibne Amjad 1 Reputation point

2021-11-08T16:06:42.073+00:00

I am trying to enroll a personal device not corporate.
Sign in to comment
TST 1 Reputation point

2021-11-08T08:16:59.613+00:00

Hello,

I have the same problem with my Google Pixel 6 Pro with Microsoft Intune App.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
Mathis, Blayne 1 Reputation point

2021-11-10T21:37:49.793+00:00

Also same problem here, with Google Pixel 6 Pro and Intune App.
Please sign in to rate this answer.
Mathis, Blayne 1 Reputation point

2021-11-29T12:56:01.903+00:00

Mine was resolved with a full removal of the work profile, Intune, related apps, a reboot, and reinstall. On reinstall, launching Outlook without first launching Intune/Company Portal configured Company Portal/Intune correctly and as a BYOD didn't need to full enrollment in Intune.
Sign in to comment