Situation: Released Iphone from DEP and manually enrolled to Intune

Question

Level 1

4 points

Situation: Released Iphone from DEP and manually enrolled to Intune

Hi

We have a situation at work I hope I can get some feedback on. We are now removing DEP and MobileIron (MDM) to start using Microsoft Intune (without DEP connection).

The Iphone were released (we should probably have done "unassign" and the release?) and the Management profile is gone, and users were able to enroll their Iphone device into Intune.

But, one of the Iphone did an upgrade to iOS 15 and at the end it got an errormessage "Profileinstallation failed, Scep-service not found".

I guess this is something from the "old" DEP, trying to manage it after a restart/restore, but since DEP has removed link to Mobileiron (MDM) and released the Iphone, it cant find it.

MY question is, will this probably happen to the other devices when restarting/upgrading?

Do we have to factory-reset all the devices?

Or will they work as normal?

Its quite critical so we need to get the correct reciepe to solve this :-)

iPhone 11, iOS 15

Posted on Sep 22, 2021 11:06 AM

Reply

Answer 1

Top-ranking reply

celliott147

Level 6

12,236 points

Sep 22, 2021 2:49 PM in response to nhkmknklkl

A device can be released from DEP/ABM/ASM at any point. It does not need to be powered on or connected to the internet. After a device is released, the next wipe will completely clear any DEP and management provided that device is not restored from a backup. DEP enrolled devices retain their management profiles within the backup and must be set up as new devices.

So all that to say, simply wipe the device. I would strongly suggest not removing devices from DEP, even if you do not wish to use DEP with Intune (I strongly recommend that you use the 2 together for the best device security).

Another thing to note is that any MDM enrollment that is not done through DEP is removable at any time by the end user.

Reply

Answer 2

nhkmknklkl Author

Level 1

4 points

Sep 22, 2021 2:59 PM in response to celliott147

ok. It seems like the removal from the MDM has been successfully on most of the devices. The management profile was automatically removed, so that enrolling the devices into Intune and installing a new management profile was no problem. Should I look for other settings, traces on the devices?

I think the one device that was upgraded to iOS 15 and got the "restore device" issue was not successfully removed. This was prior to enrolling it to Intune.

Reply

Answer 3

nhkmknklkl Author

Level 1

4 points

Sep 22, 2021 2:53 PM in response to celliott147

Hi. Thanks for the answer. But do you recommend to set up the devices as a new device (after wipe)? Or could we still use this devices without any issues. Not using DEP, only Intune.

Reply