Resolving “Administrator Does Not Allow User to Device Join” Error During OOBE
Question
Hi All,
Get the error msg “Administrator does not allow user to device join”. – in OOBE.
the device is in autopilot and assigned to the user.
should work
This is a reinstalled device old device deleted
dsregcmd/ status is “clean” no “join” at all.
device name is the “new std” so it seems to right…
any suggestions
Posted by Magnus Pettersson in HTMD FB Group

Answers ( 3 )
Replied by Nicky De Westelinck
Magnus Pettersson perfect! You’re welcome!
Replied by Nicky De Westelinck
There is a setting in Device Settings you need to check. What does is say?
Replied by Mathieu Ait Azzouzene
MDM user scope or Entra registration scope
Replied by Magnus Pettersson
Nicky De Westelinck
It was set to none
I was under the impression that it could If autopilot hash was uploaded (before hybrid join via GPO => azure was used)
Replied by Nicky De Westelinck
Magnus Pettersson that’s the reason, you need to scope this to a user group. I always create a dynamic user group based on when the Intune license feature is active for that user. Try setting it to all and test, after testing you can scope to a dedicated user group.
Replied by Magnus Pettersson
Nicky De Westelinck worked fine
Also implemented plan based dynamic group – really smart idea
Thanks
For More Details FIX Windows Autopilot Enrollment with Error 0x801C03ED
https://www.anoopcnair.com/windows-autopilot-enrollment-error-0x801c03ed/
Replied by Joseph Lavallee
Are users allowed to join devices in your domain?
Replied by Magnus Pettersson
Joseph Lavallee
No that is blocked at least on personal devices but this device is autopilot device so that would solve it??
Replied by Joseph Lavallee
Magnus Pettersson that error says the user doesn’t have permission