Launching soon: The world's first vendor agnostic bug scrubLearn more & join waitlist
OPERATIONAL DEFECT DATABASE
...
...
When attempting to enroll an iOS device with Workspace ONE, you are presented with the following error message: "Device Not Approved, You are not allowed to enroll your device. Please contact your administrator if you feel you have received this message in error"
This error may occur when: The account has been blocked, or another user is registered to the device, or when settings are not configured as expected in the Workspace ONE UEM Console.The organization group (OG) that you are attempting to enroll in has the setting Registered Device Only enabled.There is an enrollment restriction policy in the OG where the device is trying to enroll which restricts a particular model or OS from enrolling.
To resolve this issue, use one of these options: Option 1: Register the device Create a device registration record for the user in the Workspace ONE UEM Console: Navigate to Device List View and click on Add Device to register the device for the user. Alternatively, you can enable Open Enrollment by navigating to Groups & Settings > All Settings > Devices & Users > General > Enrollment, and selecting Open Enrollment. Option 2: Check if there is any enrollment restriction in the OG (Organization Group) Update your view in the Console to the OG where enrollment is being attempted.Navigate to Groups & Settings > All Settings > Devices & Users > General > Enrollment.Go to the Restrictions tab and view Policy Settings. A restriction policy to block or allow certain OS/Platform will likely be present. Change the setting to ensure the OS/Platform of the device you are going to enroll in is allowed. Option 3: Check if the device is added to the Denylist (also known as Blacklist in some older console versions) In the Console, navigate to Devices > LifeCycle > Enrollment Status.Select Filters and choose Denylist under Enrollment Status. Verify whether the device you are enrolling on a denylist. Note: Older versions of the Console may have this filter labeled as Blacklisted. If the device is present, it is likely that the device was placed on the denylist when the device was last unenrolled, as the option to add the device to the denylist is presented upon unenrolling from the Console. Remove the device from the denylist. For more information, see How to remove a device from the Deny List on Workspace ONE.
Refer to "Enrollment Blocked" error during Workspace ONE enrollment if you receive one of these similar error messages below: "Your account is not allowed to enroll. Please contact your system administrator.""Enrollment Blocked: You are not allowed to enroll your device.""This device is registered to another user. Contact your administrator" For resolutions to additional enrollment issues, see Troubleshooting common enrollment issues in Workspace ONE.