Intune ipads losing configuration profile

[steveg]

We've got about 300 ipads enrolled into Intune now, most seem to work fine, but at the moment I'm seeing 2 or 3 a week brought to me where they have completely lost the enrollment profile, so are essentially unmanaged.

 

They lose our smoothwall certificate so don't have internet access which means I find out about them quite quick.

 

All are supervised devices, the enrollment profile is locked, they are all 1:1 devices, staff or pupil, who login through the company portal app.

 

If I pick any iPad at random, I can see the configuration profile, there is no option to remove it, and in the company portal app I can see the device but the option to remove it is greyed out, so I don't think users are actually doing it themselves.

 

I cannot see any compliance policies that would delete devices. So far it has mostly been staff devices, but there have been a few pupil ones too, so it isn't just 1 enrollment profile. All apple certificates are in date.

[PotNoodleTech]

Are they finding a way to wipe them or unenroll them? Have you checked if this is possible?

[steveg]

Are they finding a way to wipe them or unenroll them? Have you checked if this is possible?

 

Through the company portal or settings app I cannot work out a way to remove the profile to unenroll them, and with the range of users it has come from I'm pretty certain they aren't trying to do it on purpose.

 

If they factory reset the iPad they would get stuck during the setup and bring it to me so I'm sure they haven't been reset.

[steveg]

I've checked the tenant admin audit logs as well and there is no mention of any actions happening to the devices in there, I can see 1 which I deleted while troubleshooting but none of the others show anything for the last month, it's very strange!