Forum Discussion

kc's avatar
kc
Level 1.6: Donut
12 months ago

Samsung S23 with Knox Mobile Enrollment fails to enroll in Intune

I was wondering if anyone else was having problems enrolling Samsung S23s using Samsung Knox Mobile Enrollment into MS Intune?  I read the other thread about S23s and Zero-Touch failing, but that seems different than what we see.

 

We get to a point where Chrome browses to https://play.google.com

The page says:  Please click here to continue.

No matter how many times you tap that link, nothing happens.  Everything is just stuck.  If you wait a long time, the phone just restarts and is in some weird state.

 

Using the QR code works fine.

Also, other models, like the Samsung S20, enroll just fine using Knox Mobile Enrollment into Intune.

 

This is what it looks like.

 

 

I opened a case with MS, but they say that is Google's page, and they can't control what it does.

 

  • mdm's avatar
    mdm
    Level 1.5: Cupcake
    9 months ago

    Did you ever resolved this?  I'm seeing same issue on a Galaxy S24 running Android 14.   I can get around this by X out of this screen but this is not a good experience.   Also, prior to this,  I get an Microsoft login error AADSTS90100:  & "AADSTS900561 which I had to back out twice, and login back in which results going to the Google Play page.  I did not encounter any of these issue registeringn a BYOD device with Work Profile but that was on older Galaxy S9 running Android 10.

  • ReeceK's avatar
    ReeceK
    Former Community Manager
    9 months ago

    Hey kc 

     

    Hope you are well.

     

    Just a few questions I hope you can help with:

     

    - Are all the S23s affected or just some?

     

    - Is all the software up to date on the devices?

     

    It seems trivial, but I want to rule out the basics before looking into next steps. 😊

     

    Thanks!

    Reece 

  • Michel's avatar
    Michel
    Level 2.3: Gingerbread
    9 months ago

    Hi kc mdm ,

     

    We enroll S23's and S24's on a daily basis into Intune (and other MDM's) without any issues for the past few months. So there might be something not correct in your configuration. 

     

    Do you mind sharing your KME profile settings, the first tab and second if you can (please make sure to remove the token from your JSON code)?

     

    Did you use the advanced option of the normal profile option?

    • Eugene's avatar
      Eugene
      Level 1.6: Donut
      8 months ago

      I also enroll S23's and S24's on a daily basis into intune via KME (found this made it that bit more secure) in the past week unable to add any new S24's into KME, thought it was knox guard that was blocking it so got samsung to ensure that this had been removed, but still unable to resolve the problem.

      • Michel's avatar
        Michel
        Level 2.3: Gingerbread
        8 months ago

        And what error are you seeing or experiencing? I just enrolled a S24 ultra without issues via two KME tenants and 2 Intune tenants so its not a global error. Might be specific to some tenants. 

  • kc's avatar
    kc
    Level 1.6: Donut
    8 months ago

    In our case, the issue was resolved with OneUI 6.1.  Samsung told us it was a bug in 6.0.  We had to wait for the S23s to start shipping with 6.1 pre installed, then KME went fine.

    We only have S23s, no S24s, though.  I hope the issue hasn’t come back….


    What is the “plus sign?”  KME should be like Zero-Touch.  The enrollment should be automatic, without needing to “6 tap” or anything else….

     

     

     

     

    • Eugene's avatar
      Eugene
      Level 1.6: Donut
      8 months ago

      the plus sign is basically when the welcome screen shows use your finger  and just do a plus in the centre of it - you can go down line of Zero-Touch similarity by using KME enterprise where  you can tie the whole device to certain setup or get your vendor to auto enrol your devices into kme so that when the user receives the device they just complete first login.  I prefer to enrol the devices manually as we don't rely on one vendor for our devices.

      • Michel's avatar
        Michel
        Level 2.3: Gingerbread
        8 months ago

        You could consider user Android zero touch for all non Samsung devices (although samsung devices also work in Android zero touch portal)

  • Amad's avatar
    Amad
    Level 1.5: Cupcake
    4 months ago

    Can you please check if your mobile is from carrier like TMobile Verizon etc. If the mobile is from any carrier, probably it will fail because of custom OS things other than Knox OS. This is the issue I faced with my S22 Ultra as that was Knox OS and a carrier phone. 

    This might not be an issue with Knox OS because this is coming as a standard from Samsung also it's there for a while now and Samsung might have fixed that already if the case it's pertains to the Knox OS. So I believe this is something related to the carrier and having a custom OS. 

    With my device, I tried to resolve it for a week or so trying as many solutions including factory reset multiple times. Unfortunately, the intuine failed all the time. My other team member who has S23 ultra with a carrier phone also shares the same issues. 

    Later, for me the intuine portal worked fine with older devices like pixel 4a.