Mobile Devices

Practical troubleshooting paths for MSP technicians dealing with real-world support failures.

MDM certificate renewal completes but old SCEP profiles remain on phones

Field Summary

MDM certificate renewal completes but old SCEP profiles remain on phones is a Mobile Device Management ticket where the visible symptom can be misleading. Endpoint tickets usually live in profile state, local services, drivers, update health, management policy, encryption, or security tooling. Prove whether the issue follows the user or the machine before rebuilding anything. Record subject, issuer, SAN, expiration, binding, and trust chain before replacing certificates.

Android zero touch or Samsung enrollment token assigns wrong configuration profile

Field Summary

Android zero touch or Samsung enrollment token assigns wrong configuration profile is a Mobile Device Management ticket where the visible symptom can be misleading. Endpoint tickets usually live in profile state, local services, drivers, update health, management policy, encryption, or security tooling. Prove whether the issue follows the user or the machine before rebuilding anything. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Push notification service healthy but iOS app inventory stops updating in portal

Field Summary

Push notification service healthy but iOS app inventory stops updating in portal is a Mobile Device Management ticket where the visible symptom can be misleading. Endpoint tickets usually live in profile state, local services, drivers, update health, management policy, encryption, or security tooling. Prove whether the issue follows the user or the machine before rebuilding anything. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Enrollment restriction blocks personally owned phones after platform filter change

Field Summary

Enrollment restriction blocks personally owned phones after platform filter change is a Mobile Device Management ticket where the visible symptom can be misleading. Endpoint tickets usually live in profile state, local services, drivers, update health, management policy, encryption, or security tooling. Prove whether the issue follows the user or the machine before rebuilding anything. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

App assignment required for phones remains available only because filter excludes device model

Field Summary

App assignment required for phones remains available only because filter excludes device model is a Mobile Device Management ticket where the visible symptom can be misleading. Endpoint tickets usually live in profile state, local services, drivers, update health, management policy, encryption, or security tooling. Prove whether the issue follows the user or the machine before rebuilding anything. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Conditional Access requires compliant device but browser session sees phone as unknown

Field Summary

Conditional Access requires compliant device but browser session sees phone as unknown is a Mobile Device Management ticket where the visible symptom can be misleading. Endpoint tickets usually live in profile state, local services, drivers, update health, management policy, encryption, or security tooling. Prove whether the issue follows the user or the machine before rebuilding anything. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

MDM Wi-Fi profile installs but hidden SSID settings differ between iPhone and Android

Field Summary

MDM Wi-Fi profile installs but hidden SSID settings differ between iPhone and Android is a Mobile Device Management ticket where the visible symptom can be misleading. Endpoint tickets usually live in profile state, local services, drivers, update health, management policy, encryption, or security tooling. Prove whether the issue follows the user or the machine before rebuilding anything. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Device cleanup rule retires active phones because last check-in timestamps are stale

Field Summary

Device cleanup rule retires active phones because last check-in timestamps are stale is a Mobile Device Management ticket where the visible symptom can be misleading. Endpoint tickets usually live in profile state, local services, drivers, update health, management policy, encryption, or security tooling. Prove whether the issue follows the user or the machine before rebuilding anything. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Managed app protection policy applies to tablets but not phones in same user group

Field Summary

Managed app protection policy applies to tablets but not phones in same user group is a Mobile Device Management ticket where the visible symptom can be misleading. Endpoint tickets usually live in profile state, local services, drivers, update health, management policy, encryption, or security tooling. Prove whether the issue follows the user or the machine before rebuilding anything. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Intune device record duplicates after phone replacement and blocks new compliance state

Field Summary

Intune device record duplicates after phone replacement and blocks new compliance state is a Mobile Device Management ticket where the visible symptom can be misleading. Endpoint tickets usually live in profile state, local services, drivers, update health, management policy, encryption, or security tooling. Prove whether the issue follows the user or the machine before rebuilding anything. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.