Autopilot & Enrollmentdecimal -2145910764
Fix Intune Error 0x80180014: The MDM service refused enrollment: Windows (MDM) is blocked by an enrollment restriction, or the reused Autopilot device record is blocked.
Open the log below first. It is the quickest way to confirm which of the causes applies before you change anything.
Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx
Folder: C:\Windows\System32\winevt\Logs\
Also check: Microsoft-Windows-ModernDeployment-Diagnostics-Provider%4Autopilot.evtx
Root causes
- An enrollment platform restriction sets Windows (MDM) to Block, or the restriction that applies to the user blocks it.
- Personally owned Windows devices are blocked and the device is not recognised as corporate-owned (no Autopilot record, corporate identifier or enrollment manager).
- A self-deploying or pre-provisioning device is being reused, and its earlier Intune record keeps the device blocked.
- The MDM log shows DeviceNotSupported with the text "Enrollment blocked for AP device by SDM One Time Limit Check".
Step-by-step remediation
- In the Intune admin center go to Devices > Enrollment > Device platform restriction. Open each restriction that applies and set Windows (MDM) to Allow.
- If personal Windows devices are blocked, register the device as corporate-owned (Autopilot or corporate identifier) instead of loosening the policy.
- For a reused Autopilot device: Devices > Windows > Enrollment > Windows Autopilot devices > select the device > Unblock device. Delete the stale device record if it exists.
- If the message says too many devices, that is error 0x80180013. Check the device limit restriction.
- Retry enrollment and confirm the DeviceManagement-Enterprise-Diagnostics-Provider log stops reporting DeviceNotSupported.
For the full diagnosis around this error, read Company Portal enrolment stuck.
Tighten the rollout around it
Enrollment and compliance errors usually trace back to rollout design and device permissions. See how the endpoint privilege management tools compare, and plan the next ring with a tested runbook.
Compare Intune endpoint privilege management toolsRelated Error Codes in This Category
Other Autopilot & Enrollment errors with their own runbooks.
- 0x80180013The user has reached the Intune device limit (15 by default), so enrollment of another device is refused.
- 0x80180026MDM enrollment was blocked because another management agent is present: automatic MDM enrollment collides with the legacy Intune PC client.
- 0x8018002BGroup Policy based automatic MDM enrollment failed, normally because the UPN is non-routable or the MDM user scope is None.
- 0x800705B4A timeout (ERROR_TIMEOUT). In Autopilot it is typically TPM 2.0 attestation failing during self-deploying mode, or the ESP device phase timing out.
- 0x801C03EATPM attestation failed, so the device could not get a device token and failed to join Microsoft Entra ID.