What you’re seeing
- A message saying "AADSTS530003: Your device is required to be managed to access this resource".
- Outlook, Teams or the Microsoft 365 portal works on office PCs but refuses to load on a personal laptop or phone.
- Admin tools, scripts or a build server that connect to Azure or Microsoft 365 suddenly fail to authenticate.
- Linux machines and some browsers are blocked even when the same user can sign in elsewhere.
Common causes
Every environment is different, but these are the causes our engineers find most often:
- A Conditional Access policy requires a compliant or Microsoft Entra joined device, and the device is not enrolled in Intune.
- The browser cannot pass device identity, which happens with private windows, unsupported browsers or missing sign-in extensions.
- An enrolled device has fallen out of compliance because of an expired policy check, missing encryption or outdated OS.
- The policy was applied to all cloud apps, including admin portals and automation, without exclusions for service accounts.
- A device was re-imaged or renamed and its old registration no longer matches.
Why it matters
Managed-device policies are one of the strongest protections a small business can have, but a poorly scoped rule can block staff, owners and automation at the worst moment. Remote workers lose email access while traveling, and background jobs such as backups or reporting can fail quietly. Disabling the policy to get people working again removes the protection entirely, so the goal is to keep the safeguard while letting the right devices through.
How AskTechGurus fixes it
Skip the trial and error. A certified engineer works on your actual system, finds the root cause, and fixes it properly.
Tell us what’s happening
Submit a ticket in about two minutes. Paste the error, describe what changed, and pick your tier. No charge to submit.
A certified engineer diagnoses it
A vetted, US-based systems engineer claims your ticket, usually within minutes during business hours, and investigates over a secure remote session you can watch and end at any time.
Fixed and verified with you
The engineer resolves the root cause and confirms with you that it’s working. You don’t just get a workaround, and you get a plain-English summary of what was wrong.
Pay only when it’s resolved
Fixed price from $99, invoiced only after you approve the fix. If it isn’t resolved, you don’t pay.
Frequently asked questions
Should we just turn the policy off?
That restores access but removes a key protection against stolen passwords. A better outcome is a policy that allows enrolled devices and limited, safe access from others.
Why can't employees use their own laptops anymore?
Your organization requires that devices be known and secured before they reach company data. Personal devices either need enrolling or a browser-only access option.
Can AskTechGurus adjust this without weakening security?
Our certified US engineers can review the policy with you over a remote secure session, from $99, and you pay only when it's resolved.