Issue
When attempting to set up a device using an enrollment token, you encounter an error indicating that your IT administrator does not allow a work profile on your device.
Environment
- NinjaOne MDM
- Android
Cause
You are trying to set up an already-configured device using an enrollment token set to For Work rather than For personal and work.
Resolution
- Create a new token and select the For personal and work for usage type. For more information, refer to NinjaOne MDM: Android Policy Management.
- Reset the device to factory settings.
- On the Welcome screen, tap six times to open the QR code scanner.
Rather than provisioning as a fully managed, work-only device, the device will provision into Corporate-Owned, Personally Enabled (COPE) mode, which permits the organization more control over the personal profile without invading user privacy, and also allows continued personal use.
Additional Resources
The following articles provide additional context for Android Work Profile management and troubleshooting in NinjaOne:
- NinjaOne MDM: Troubleshooting Android Work Profile Issues
- NinjaOne MDM: Troubleshooting: Cannot Select the “For Work” Usage Type When Enrolling a Device
- NinjaOne MDM: Troubleshooting: Android Attempts to Set Up a Work Profile When I Try to Add a Company Google Account
- NinjaOne MDM: Troubleshooting: Work Profile Device Serial Number Mismatch in NinjaOne
- NinjaOne MDM: Troubleshooting: My Android Device was Automatically Wiped
- Enroll an Android Phone After Factory Reset
- Android MDM: Policy Management