Yealink Teams phone Intune enrolment blocked

[Trixxz]

Hi all

I am having trouble with getting teams phones to successfully enrolled. I've pretty much ruled out everything other than potential Meraki issues.

I've put exceptions in for all of the recommended M365 addresses in AMP.

Is there anything I am potentially missing? 

[alemabrahao]

Do you have any L3 or L7 rules configured? Have you tried doing a packet capture or even checking the MX logs?

[PhilipDAth]

Try applying the "Allow list" group policy to a phone.  This allows everything and nothing is blocked.

If the phone works - you know it is something in your Meraki configuration.  If the phone does not work - you know it is something to do with the phone/Intune configuration.