What you’re seeing
- Company iPhones go straight to the home screen during setup without any remote management screen.
- Company Portal sign-in or profile installation fails with an error or loops back to the start.
- Enrollment completes, but expected apps, email profiles or Wi-Fi settings never arrive.
- Devices purchased recently do not appear in Intune's list of Apple enrollment devices.
Common causes
Every environment is different, but these are the causes our engineers find most often:
- The Apple MDM push certificate in Intune has expired, or was renewed with a different Apple ID, breaking communication with all Apple devices.
- The Apple Business Manager enrollment program token has expired or the devices were never assigned to the Intune server.
- Devices were bought outside the reseller or carrier account linked to Apple Business Manager, so they are not automatically enrolled.
- An enrollment restriction blocks personally owned iOS devices or a specific iOS version.
- The device was already set up before being assigned a profile, so it must be erased to pick up automated enrollment.
- Apps from the App Store are not licensed through Apple's volume purchasing, so they cannot be pushed silently.
Why it matters
Company phones that are not managed cannot be wiped if lost, cannot receive secure email profiles, and may be blocked by Conditional Access from accessing company data. An expired Apple push certificate is especially serious: it can disconnect every managed iPhone and iPad at once, and renewing it with the wrong Apple ID can force every device to be re-enrolled. For businesses issuing phones to field staff, a stalled rollout means people in the field without the tools they need.
How AskTechGurus fixes it
Skip the trial and error. A certified engineer works on your actual system, finds the root cause, and fixes it properly.
Tell us what’s happening
Submit a ticket in about two minutes. Paste the error, describe what changed, and pick your tier. No charge to submit.
A certified engineer diagnoses it
A vetted, US-based systems engineer claims your ticket, usually within minutes during business hours, and investigates over a secure remote session you can watch and end at any time.
Fixed and verified with you
The engineer resolves the root cause and confirms with you that it’s working. You don’t just get a workaround, and you get a plain-English summary of what was wrong.
Pay only when it’s resolved
Fixed price from $99, invoiced only after you approve the fix. If it isn’t resolved, you don’t pay.
Frequently asked questions
Will we have to erase our iPhones to enroll them?
Sometimes. Fully supervised automated enrollment requires the device to go through setup from scratch, but other enrollment methods do not. We explain the options and back up what matters before anything is erased.
Is this affecting all our Apple devices or just new ones?
It depends on the cause. An expired push certificate affects every Apple device, while a token or restriction problem usually affects only new enrollments. Identifying which one is the first step.