Top 10 Issues That Can Happen with MDM (and Why Your Devices Stop Working)
When a managed device will not install an app, receive a policy, or reach a work resource, the cause may be enrollment, connectivity, licensing, or an intentional restriction. Start with the exact error and the device’s management status rather than removing profiles or resetting it.
These ten checks help small businesses organize an MDM support request. Features and troubleshooting steps vary by platform, ownership, enrollment method, and management product.
1. Unsupported or outdated software
Record the operating system version and the affected app version. Ask your administrator whether they meet your organization’s requirements. Schedule approved updates before retesting.
2. App assignment or approval problems
Confirm the app is approved and assigned to the intended user or device. Check the installation status and error before reinstalling. An app being available in a store does not mean your organization has assigned it or provided a license.
3. Content filtering
A blocked website may be an intentional policy decision. Record the URL, error, and time, then ask the administrator to review it. Do not use alternate accounts or workarounds to bypass the restriction.
4. Restricted device features
Camera, hotspot, app installation, and other capabilities can depend on platform and enrollment type. Compare the intended policy with the affected device’s configuration before treating a disabled feature as a fault.
5. Work access and communication settings
If work apps or communication features stop working, identify whether the problem affects one app, one account, or the whole device. Have your administrator check applicable restrictions and access requirements.
6. Incomplete enrollment
Confirm the device appears in the correct management tenant with the expected user and enrollment status. For Intune, use Microsoft’s device enrollment troubleshooting guide. Do not delete enrollment records or reset a production device without an approved recovery plan.
7. Conflicting policies
Review assignments and the setting-level status. In Intune, conflicting configuration settings can be reported in the console. Follow Microsoft’s policy and profile troubleshooting guidance to identify the affected setting before changing assignments.
8. Expired certificates or tokens
Check relevant certificate and token expiration dates with the administrator. Apple MDM push certificates require ongoing renewal. Use the product-specific process: Microsoft Intune certificate guidance or Jamf Pro renewal instructions. Renew the existing certificate as directed; creating an unrelated replacement can disrupt management.
9. Connectivity and check-in problems
Record the last successful check-in and whether the device has working internet access. Ask the administrator to review network requirements and approved VPN settings. For Intune policy delivery, see Microsoft’s policy troubleshooting steps.
10. Changes to accounts or management profiles
Ask what changed before the issue began. A different account, removed profile, or ownership change can affect access. Document the change and coordinate recovery with the administrator instead of repeatedly enrolling the device.
What to include in your support request
Provide the device model, OS version, management product, exact error, last successful check-in, affected users, and steps already tried. Share screenshots only after removing sensitive information. Never include passwords, MFA codes, recovery keys, or confidential company data.
Get a clear next step with FMA
Open FMA Connect✓ on the homepage and select MDM / Device Management. The FMA SHERPA Method helps you record your observations and create a Connect Report to share with your support team.
For a defined issue, get one hour of Remote IT Support for $85. For enrollment planning, policy cleanup, or a device rollout, start a project conversation. Learn more about FMA’s MDM and device management services.
