Error 0x87D13BA9: User Enrollment VPP Licensing Mismatch

Error Message

The app installation has failed. (ErrorUserEnrollmentUnsupported)

Error Details

Property	Value
Error Code (Hex)	0x87D13BA9
Error Code (Dec)	-2016345112

Description

info

This error occurs when attempting to deploy a VPP app with device-based licensing to a BYOD device enrolled through Apple User Enrollment. User Enrollment only supports user-based licensing for VPP apps, requiring either a licensing type change or separate assignment configuration.

Common Causes

📱 Enrollment Type Mismatch

The fundamental issue often stems from enrollment configuration incompatibilities. BYOD devices utilizing User Enrollment have specific licensing requirements that differ from corporate-owned devices. When device-based licensing is attempted on these user-enrolled devices, the system enforces strict security boundaries that prevent installation. Account-driven enrollment scenarios require specific licensing configurations that align with Apple's management framework. These unsupported configurations create barriers between the intended deployment and actual device capabilities.

🔑 License Assignment Issues

License management complexities frequently contribute to deployment failures. Incorrect license type assignments often result from misunderstanding the relationship between enrollment types and licensing requirements. Mixed deployment targets can create conflicts when attempting to apply a single licensing strategy across diverse device management scenarios. Assignment configuration errors may occur during the initial setup or subsequent modifications of app deployment policies. VPP token mismatches between the intended license type and actual device enrollment state can prevent successful app installation.

Impact

note

• App installation blocked
• BYOD deployments affected
• User Enrollment limitations
• Assignment reconfiguration needed

Enrollment Context

• 🚫 Unsupported Configuration:
  • Device licensing blocked
  • User Enrollment restrictions
  • BYOD limitations
• ✅ Supported Configuration:
  • User-based licensing
  • Personal device management
  • User-centric deployment

Deployment Scenarios

• 📲 BYOD Devices:
  • User Enrollment required
  • Personal device management
  • Limited management scope
• 🏢 Corporate Devices:
  • Supervised enrollment
  • Full device management
  • All licensing types supported

Resolution Steps

1️⃣ Enrollment Verification

Begin with a comprehensive assessment of the device's enrollment status. Thoroughly examine the current enrollment type through the Intune portal and device settings. Confirm the User Enrollment status by reviewing the management profile details. Review the device status to understand its current management scope and limitations. Identify any management restrictions that might affect app deployment capabilities.

2️⃣ License Configuration

Address licensing configuration to align with enrollment requirements. Modify existing app assignments to utilize user-based licensing for User Enrolled devices. Create separate assignment groups based on enrollment types to prevent licensing conflicts. Ensure target groups accurately reflect the intended deployment scope and licensing model. Verify that all configuration changes align with organizational security policies.

3️⃣ Deployment Validation

Implement a systematic validation process for the updated configuration. Test the modified deployment settings with a pilot group before broader implementation. Monitor the installation process to ensure proper license application. Verify successful app installation and functionality under the new licensing model. Document any issues or anomalies for future reference and process improvement.

Best Practices

👨‍💻 For IT Administrators

Successful management of User Enrollment scenarios requires careful planning and ongoing oversight. Develop comprehensive enrollment strategies that account for different device ownership models. Maintain separate deployment configurations for BYOD and corporate devices to prevent licensing conflicts. Implement thorough documentation practices for all licensing decisions and configurations. Regular monitoring of deployment success rates helps identify potential issues before they impact users. Establish clear policies regarding device enrollment types and corresponding app licensing requirements.

🔄 For Deployment Management

Effective deployment management requires attention to both technical and organizational aspects. Implement appropriate licensing models based on careful analysis of enrollment scenarios. Maintain clear separation between different enrollment types in deployment configurations. Conduct regular reviews of configuration settings to ensure continued alignment with requirements. Test deployment scenarios thoroughly before implementing changes in production environments. Monitor and document deployment patterns to optimize future configurations.

Troubleshooting Tips

License Configuration

Successful license management requires systematic verification and configuration processes. Begin by thoroughly reviewing the current enrollment type and its implications. Carefully examine all licensing settings to ensure alignment with enrollment requirements. Verify all assignments to confirm proper targeting and configuration. Conduct thorough testing with representative sample groups before full deployment.

Common Pitfalls

Organizations should be aware of several critical challenges in managing User Enrollment scenarios. Mixed licensing types can create confusion and deployment failures if not properly managed. Incorrect assumptions about enrollment types often lead to misconfiguration of licensing settings. Unsegmented assignments may cause conflicts between different device management models. Proper enrollment verification is essential before making licensing changes.

Additional Notes

💡 User Enrollment restriction

🔑 License type critical

⚠️ BYOD specific issue

📱 Enrollment dependent

Related Links

Enrollment Type Requirements

1. User Enrollment Characteristics

   • Personal device management
   • Limited management scope
   • User-based licensing required
   • Privacy-focused approach

2. Licensing Requirements

   • User-based VPP licensing
   • Apple ID association
   • App Store authentication
   • Personal app management

3. Assignment Configuration

   • Separate BYOD assignments
   • User group targeting
   • Appropriate license type
   • Clear deployment scope

Best Practice

Create separate app assignments for User Enrolled devices with appropriate licensing types to prevent deployment failures.