Fix Intune Enrollment Errors 0x80180014 and 80180003 on Windows

Enrolling Windows devices into Microsoft Intune is essential for managing security, applications, and compliance in modern organizations. However, users often encounter errors such as 0x80180014 and 80180003, which can prevent successful enrollment and disrupt device management workflows. This guide provides a comprehensive, step-by-step approach to diagnosing and resolving these specific errors, ensuring your devices are properly enrolled and managed. Before starting, ensure you have administrator access to the Windows device and the necessary permissions within your Intune tenant. Some steps may require access to the device’s local settings or administrator credentials, so prepare those beforehand.

What You’ll Need

• Administrator access to the Windows device experiencing enrollment issues
• Active internet connection
• Access to Microsoft Endpoint Manager admin center (if needed for troubleshooting)
• Optional: Windows PowerShell or Command Prompt for advanced troubleshooting

Step-by-Step

1. Verify Device Compatibility and Prerequisites
2. Ensure the device is running a supported version of Windows 10 or later. Check for pending Windows updates and install any available, then restart the device.
3. Confirm that the device has internet access and can reach Microsoft’s enrollment servers. You can test connectivity by visiting https://endpoint.microsoft.com/ or pinging Microsoft endpoints.
4. Remove Existing MDM or Enrollment Profiles
5. Open Settings > Accounts > Access work or school.
6. Select any existing enrollment accounts and click on ‘Disconnect’ or ‘Remove.’
7. Reboot the device to clear residual profiles that might interfere with new enrollment attempts.
8. Reset the Device’s Enrollment State
9. Open Command Prompt as administrator and run the following commands to reset enrollment data:

   dsregcmd /leave
   dsregcmd /forcerejoin

10. Restart the device after executing these commands.
11. Clear the Device Management Cache
12. Navigate to C:\Windows\\System32\
    mgmt
    and delete the contents of the folder (if any). Be cautious and back up if necessary.
13. Reattempt Enrollment
14. Go to Settings > Accounts > Access work or school.
15. Click on ‘Connect’ and enter your work or school account credentials.
16. If prompted, follow the on-screen instructions to complete enrollment.
17. Check for Error Codes
18. If errors persist, note the exact error code (0x80180014 or 80180003) and message.
19. Review the detailed error message for clues, such as issues with device registration, account permissions, or network problems.
20. Update Windows and Intune MDM Agent
21. Ensure your Windows OS is up to date. Go to Settings > Update & Security > Windows Update.
22. Verify that the MDM enrollment components are current. You can do this via PowerShell:

    Get-WmiObject -Namespace root\\CIMV2\
    oot\\ccm -Class CCM_ClientTools

23. Check Azure AD and Intune Permissions
24. Log into Azure portal and verify that the user account has appropriate permissions to enroll devices.
25. Ensure the device is correctly registered with Azure AD. If not, re-register manually or via PowerShell.
26. Review Conditional Access and Compliance Policies
27. Ensure no policies are blocking enrollment for the device or user.
28. Adjust policies temporarily if needed to allow enrollment, then revert after successful registration.
29. Consult Microsoft Endpoint Manager and Azure AD Logs
30. In the Azure portal, navigate to Azure AD > Sign-ins and check for failed login or enrollment attempts.
31. Review the logs for specific error messages related to 0x80180014 or 80180003.
32. Address any issues identified, such as account lockouts or misconfigurations.

Common Mistakes

• Not removing old enrollment profiles before attempting re-enrollment.
• Running outdated Windows versions that lack necessary features or fixes.
• Ignoring network connectivity issues that prevent reaching Microsoft servers.
• Not verifying account permissions within Azure AD or Intune.
• Failing to restart the device after significant changes or commands execution.
• Overlooking existing device profiles that might conflict with new enrollment attempts.

Tips

• Always ensure your Windows device is fully updated before troubleshooting enrollment errors.
• Use PowerShell commands to reset device registration states if standard steps fail.
• Check the Microsoft Endpoint Manager admin center for device status and error logs.
• Make sure the user account used for enrollment has the necessary permissions in Azure AD.
• If using a corporate network, verify that firewall or proxy settings are not blocking Microsoft endpoints.
• Document error codes and messages during troubleshooting to assist with further support if needed.

Troubleshooting

If the above steps do not resolve the errors, follow these advanced troubleshooting tips:

1. Use PowerShell for Deeper Diagnostics
2. Run the command Get-TPM to check if Trusted Platform Module (TPM) issues are causing enrollment failures.
3. Use dsregcmd /status to verify device registration status and troubleshoot registration issues.
4. If registration is incomplete or shows errors, run dsregcmd /leave followed by dsregcmd /forcerejoin again.
5. Review Event Viewer Logs
6. Open Event Viewer > Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider.
7. Look for error entries corresponding to the time of enrollment attempts. Note any specific error messages or codes.
8. Reset the MDM Enrollment via Registry
9. Open Registry Editor (regedit) and navigate to

   HKEY_LOCAL_MACHINE\\SOFTWARE\\\Microsoft\\\Enrollments

10. Delete or back up the relevant enrollment keys, then restart the device and retry enrollment.
11. Contact Microsoft Support
12. If all else fails, gather logs and error details and escalate to Microsoft support for further assistance.

Frequently Asked Questions

1. What causes error 0x80180014 during Intune enrollment?

This error typically occurs due to device registration issues, outdated Windows versions, or conflicts with existing enrollment profiles.

2. How can I tell if my device is properly registered with Azure AD?

Run dsregcmd /status in PowerShell or Command Prompt. Look for ‘AzureAdJoined’ and ‘DeviceJoined’ statuses indicating proper registration.

3. Is it necessary to reset the device before re-enrolling?

Not always, but resetting device registration with commands like dsregcmd /leave and dsregcmd /forcerejoin can resolve registration conflicts causing errors.

4. Can network issues cause these enrollment errors?

Yes, restricted network connectivity, firewalls, or proxy settings can prevent devices from reaching Microsoft enrollment servers, leading to errors.

5. What permissions are needed in Azure AD to enroll devices?

The user account should have the ‘Device Enrollment’ or ‘Intune Service’ permissions, and the device must be registered in Azure AD.

6. How do I verify if my Windows device has the latest updates?

Go to Settings > Update & Security > Windows Update and check for updates. Installing the latest updates often resolves enrollment issues.

By following this detailed guide, you should be able to troubleshoot and resolve the common Intune enrollment errors 0x80180014 and 80180003 on Windows devices, restoring proper device management and security compliance.

Related

• Fix Doom The Dark Ages Black Screen Issue on Windows 11
• Fix Dolby Driver Error 0x80070103 After Windows 11 Update
• How to Fix Dolby Atmos Not Working in Windows 11