'Configuration Profile' not beeing installed on Windows-devices

[robuch]

We recently bought the Systems Manager Licenses for our company, set it up and startet to enroll devices. While iOS and macOS devices could be enrolled without problems, windows devices cause us problems.

More precisely, the 'configuration profiles' are causing us problems. Installed on iOS and macOS without any problems, no 'configuration profiles' are installed on Windows devices.

The manual synchronization in the device overview has not helped, just as little as a new enrollment in MDM.

The windows devices are in scope, at least that's what the 'configuration profiles' say.

Does anyone know what else can cause this issue?

The Cisco support was not very helpful until now.

[PhilipDAth]

I don't know the answer.

I do recall on Windows, you need to configure two things to make everything work.  You have to deploy the agent, and you have to configure the MDM settings.

The MDM bit is located here in the deployment instructions:

https://documentation.meraki.com/SM/Device_Enrollment/Windows_Enrollment#Open_Work_Access_Settings 

[PaulF]

Further to @PhilipDAth comment, don't forget that MDM only manages the user's account that enrolled. If that user is not logged in, the profile can't (and won't be pushed)

But, ensuring that the SM client is installed AND MDM enrolled should be the first diagnostic step

[robuch]

Thank you both for the quick responses!

I'm testing this on my own laptop (while logged in myself of course) and have both the Windows profile and agent installed.

Do you have any other suggestions on what I can look for?

[PaulF]

Is this Windows 10 ENTERPRISE or Pro (or some other version)?

[robuch]

I got two devices with Windows 10 Enterprise and the other with Windows 11 Pro. Both are configured the same as stated above and the profile is not installed on both.

[PaulF]

can you check that the device is checking in?

On Windows Enterprise Machines:

Click the start menu, then settings. Click Access work or school

 If you then click on the Connected to.....

and then Info

You'll have the ability to Sync. This should bring down any new policies

If it doesn't, please report back

[robuch]

The device is checking in when I sync, the security policy is already on the devcie but the config profile stays away from my Windows PC 😕

I also tried checking the device in from the dashboard but with the same result. 

[PaulF]

Can you privately message me your case number?