Access is denied to the user when trying to enroll via SCCM2012

Answered Access is denied to the user when trying to enroll via SCCM2012

  • Wednesday, February 06, 2013 6:26 PM
     
     

    While trying to create the windows intune subscription in my configuration manager, I keep getting the following error,"Access is denied to the user when trying to enroll."

    Now I do have an account and it is set up as the service administrator. (30 day trial at this point)  We use exchange online via an Enterprise agreement.

    I have just downloaded the SP1 and installed it on the SCCM 2012 machine in question.

    What am I doing wrong here?

All Replies

  • Wednesday, February 06, 2013 6:27 PM
     
     
    I installed the SP1 and the prerequisites before attempting to attach to intune.
  • Wednesday, February 06, 2013 6:39 PM
    Moderator
     
     

    Hi Michael,

    Is the user part of the Windows Intune user group?  They have to be part of that group to enroll a device.

    Thanks,

    Jon L. - MSFT

  • Wednesday, February 06, 2013 6:41 PM
     
     

    Jon,

    Just to be clear, I feel as though I am stumbling blindly down a long hallway trying to find my way.  :)

    How would I go about confirming that the user is part of the Windows Intune user group?

    Mike

  • Wednesday, February 06, 2013 6:55 PM
     
     

    I believe I have confirmed the user in question is in the Intune user group by going to account.manage.microsoft.com and confirming that  the user has the intune checkbox checked.


  • Wednesday, February 06, 2013 7:40 PM
    Moderator
     
     

    The user you are using to enroll SCCM into Windows Intune need to be a global admin.  A Service Administrator won't work.  Please upgrade them to a Global Admin and try again.

    If that doesn't work, please open a support case with Windows Intune and I'll work with our support team to help you get up and running.

    Thanks,

    Jon L. - MSFT

  • Wednesday, February 06, 2013 8:42 PM
     
     

    Hi.

    The user in question is also a global admin.  I believe it is possible that I may have already set Intune to manage my mobile devices, but I am not sure.  How do I confirm this one way or the other?  When I try and click on the set mobile device management authority from the mobile device management page, the link is greyed out????

  • Wednesday, February 06, 2013 10:20 PM
     
     Answered

    If it's gray in the intune portal you have already set it. One subscription can only be managed by one tool, either Intune OR SCCM.

    If you want to test with SCCM, create a new trial account for Intune.

    Björn


    Björn Axell MVP http://blog.advisec.com

    • Marked As Answer by Michael_Goff Wednesday, February 06, 2013 10:38 PM
    •  
  • Wednesday, February 06, 2013 10:42 PM
     
     
    Thank you for the help.  Is it possible to cancel the trial?  I signed into the trial with my office365 online credentials, which attached the intune trial to our hosted corporate email.  In hindsight I should have read more because I didn't catch the importance of the choices I made.
  • Wednesday, February 06, 2013 11:15 PM
    Moderator
     
     

    You can call Non-Technical Support and they will cancel the subscription for you.  It may take little while for it to be removed from your account though.

    Thanks,

    Jon L. - MSFT