Crossposted using Lemmit.
Original post from /r/intune by /u/bobmanuk on 2023-07-04 13:13:04+00:00.
Good Afternoon All,
I have a case open for this already but im hoping to put it out there and gain a quicker response/fix.
we normally enrol devices using:
.\Get-WindowsAutoPilotInfo.ps1 -Online
During a devices OOBE (shift + f10 after connecting the device to wifi/ethernet)
this has worked for quite a long time, but admittedly, we havent enrolled a lot of new devices until now, so no idea how long it hasn’t been working for.
after running a script to download and run the PS script above, it prompts for credentials as you would expect, we have a service account setup specifically for the task or enrolling PCs.
After logging in we get a screen that asks for “Approval Required” Obviously company logo and email address has been redacted
I have already checked enterprise apps in Azure for “Microsoft Intune Powershell”, “Microsoft Graph Powershell” and “Graph Explorer (Official Site)” all have admin consent approved for every item and the service account we use is also has “Intune Administrator” roll assigned.
Im not sure what “app” is requiring approval since it says unverified, and also submitting a justification also does not show anywhere, I read it should send an email to the global admins, of which I am one, but have not received any email.
Can someone point me in the right direction?
Many Thanks