Sometimes enrollment delays aren’t errors – they’re just the sequence in action!
A client reported enrollment delays for iOS BYOD devices through Company Portal. Devices appeared to “top out” during enrollment, and reports showed generic errors with no obvious configuration issue.
Initial review found no:
- Device restriction conflicts
- Enrollment profile misconfiguration
- Conditional Access enforcement
- Policy errors
MDM enrollment completed, but users experienced significant delay before the process finalized. To replicate the issue, I enrolled a test device.
Observation
The device reached the compliance evaluation stage and remained there.
At that time:
- The active compliance policy was assigned to a dynamic device group.
- The device did not appear in that group for ~30 minutes.
- Once membership updated, the policy was assigned.
- The enrollment experience completed shortly after.
The enrollment report showed a temporary error state during this waiting period. Enrollment itself wasn’t failing – it was waiting on policy assignment.
Validation
To isolate the variable, I created a test compliance policy assigned to a user group instead of a dynamic device group and re-enrolled the same device.
Enrollment completed in under 8 minutes.
The only change was the assignment model.
Technical Interpretation
Dynamic device group membership in Microsoft Entra ID is processed asynchronously. Policy assignment depends on:
- Device registration
- Attribute population
- Dynamic rule evaluation
- Group membership update
- Intune policy processing
If membership evaluation is delayed, policy assignment is also delayed. In this case, enrollment timing was influenced by that dependency chain.
Key Point
Dynamic device groups are valid and widely used. However, when enrollment timing is critical, it’s worth understanding whether policy assignment depends on asynchronous group membership processing.
The issue here wasn’t misconfiguration. It was sequencing.
Sometimes the system is working as designed – just not in the sequence you expect.
