Visual Studio for macOS Always Prompts to Enrol Mac under MDM - mdm

I have Visual Studio Enterprise license issued by my Employer. I am using the MacBook Pro provided by them which is already enrolled for mobile device management with my email id by my employer with Microsoft Intunes Company Portal.
But every time I try to login to my account in VS, I get an error saying Your login was successful but your admin requires your device to be managed by MyEmployer to access this resource.
My device is already enrolled with MDM profile. I reported this issue as a service request in our IT support. But they have no idea of the actual error.
Please let me know if I am doing anything wrong or need additional steps.

Sounds like your IT has configured Conditional Access incorrectly for Visual Studio. They should check the Conditional Access controls in Azure AD, and could also try unenrolling/reenrolling your device.
If IT can't resolve the issue, they should contact Microsoft Support who would be more helpful than StackOverflow.

Updating to Visual Studio for Mac 8.6 released on May 19, 2020 (today) fixed my issue. Their release notes state the following for Shell. Learn more at this link
Shell
Visual Studio for Mac now has new identity libraries that should
ease many of the issues that users have faced signing in. In addition,
Visual Studio for Mac now supports device code authentication and
system browser. You can enable these two options in Preferences should
you need them. As a result of the new authentication flow, users who
have been signed in previously will need to re-authenticate.

Related

How to execute Microsoft Teams app again when the app was removed from App Studio

I have tried different samples apps and I am getting the same error. If I create a new team app it works fine but if I remove the app from AppStudio or teams, then I cannot install/execute the app again.
I am using visual studio code with a simple Teams Tab Application code.
This is the error in teams (web with Chrome or Edge)
"App not found, Please verify the app and it's access permissions".
This is the main log error:
TypeError: Cannot read property 'customBots' of undefined
at Function.t.getAppAnalyticsData (https://statics.teams.cdn.office.net/hashed/3.1-app.min-46191d5.js:1:3875125)
at e.getAppInformationForTelemetry (https://statics.teams.cdn.office.net/hashed/lazy-ng1-mod-extensibility-dialogs.min-4642d77.js:1:202134)
at e.logViewAppActionForTelemetry (https://statics.teams.cdn.office.net/hashed/lazy-ng1-mod-extensibility-dialogs.min-4642d77.js:1:200224)
at https://statics.teams.cdn.office.net/hashed/lazy-ng1-mod-lpc-services.min-72bf322.js:1:134587 undefined
Presumably you are using Teams Toolkit? If so, when you create the app in Visual Studio/ Visual Studio Code it is ALSO creating an app in App Studio in your personal account behind the scenes. If you choose to DELETE that app in App Studio, then Teams Toolkit has nothing behind the scenes to hook in to to redeploy. I think (can't check right now) that the app source code will have a manifest file somewhere - you can add this manually back to App Studio using the "import" function.

Cannot create a work profile The security policy prevents the creation of a managed device because a custom os is or has been installed on this device

I have 5000 devices enrolled with EMM using android management API and recently I am getting issues with multiple devices out of nowhere and getting and error prompt after scanning the QR code on re-enrollment. All of my enrolled devices are Samsung Tab with the older version of android(7-9) and the issue doesn't seem to be related to the android version. Also, The issue has been experienced for the device which was earlier enrolled and was working fine but recently has this issue, we tried re-enrolling it but it gives us the same following error prompt after QR scan.
Cannot create a work profile - The security policy prevents the
creation of a managed device because a custom os is or has been
installed on this device
For your kind information, there is no custom os installed on the device and the device is not rooted or bootloader is not unlocked. I have researched a lot over the internet but cannot find a solution to the problem I have tried following approaches but it doesn't seem to work in my case
To fix this, you will need to update the time on the device by either connecting to wifi or cellular data (insert SIM-card), or by manually changing it in the set-up screen. After this is done you will be able to provision the device.
Tried DPC Identifier method for enrollment, When prompted to sign in on fresh factory reset device, enter afw#setup, which downloads Android Device Policy. Scan a QR code or manually enter an enrollment token to provision the device.
None of the above seems to work for me, I have also seen that its an issue related to Samsung Knox version, so can anyone from Samsung or google help me debugging and solving this issue, will removing the Knox app from the device work in my case.
Eagerly awaiting for the response as most of my device has started getting affected with this issue, please let me know your thoughts and resolution on this.
Not sure if that's an option for you as you have multiple devices, but on my single device, manually downloading and installing "google apps device policy" resolved the issue.
Been a lurker for a while and posting for the first time
Work as IT helpdesk and found a fix for us (context below)
We use Azure, InTune and Samsung Knox
Needing to assign a Knox profile so an application installs and runs
How we fixed this
Unassigned Knox profile
Ran tablet normally, skipping setup of Google, Samsung account and security
Running Samsung updates until current (24th Feb 2021)
Reassign the Knox profile
Factory resetting through settings
run through the setup process
Error has stopped at this point
You can either use Wi-Fi or SIM Card Data for OS updates through Knox
I had the same problems and this is how i fixed it. I have Samsung Tablet Android 10 and need to set it up under Enterprise.
Straight out of the box, you expand the OS, set up Network connection and than type in the google gmail space: afw#mobicontrol. This Does Not install the custom OS. Once expanded the OS has all the bloated software in tact plus the Mobicontrol app. I kept getting an error 'Can't Create Work Profile because Custom OS is installed on this device'. I did a factory reset but did so by powering it off than using the Power Button and Up Arrow to force it to the Android Recovery Screen. There is a factory reset option to choose from. "This Does Not Work". It still keeps the bloated software in tact.
You need to expand the Android OS first than do a reset. Go to SETTINGS. than ABOUT. at bottom is a RESET option. Choose that. Choose Factory Reset. This will delete all those apps. It reboots. Now you can enter afw#mobicontrol at the google email screen and it will install the custom OS and works under Soti.
Reset From the SETTINGS and do a Factory Reset. Than type in AFW#MOBICONTOL and the custom OS will work.

Can't login to Visual Studio Marketplace

I want to login to Visual Studio Marketplace.
Running MacOS Sierra 10.12.6 using Google Chrome 62.0.3202.94.
It is basically stuck on this screen for a while...
...then it finishes with this.
Already tried several browsers, incognito / private modes without any success. Of course I contacted Microsoft first, without any progress on the issue.
It was not the VS extension issue, it would be related to the network or the Visual Studio Marketplace site. I could visit it in my side, maybe you could test it later or using different network. View the result.
If it still has this issue, you could get support from the Marketplace directly using "General marketplace help" here:
https://learn.microsoft.com/en-us/vsts/billing/_shared/qa-marketplace-support
I added these DNS servers at System Preferences / Network Settings / Wifi / Advanced / DNS, and now it can resolve login.microsoftonline.com (so I can login to Visual Studio Marketplace).
PC USERS: Check your Windows version
I resolved it today!! The problem was my PC was running Windows 8.0 and since it is no longer supported by Microsoft apparently, you need at least 8.1 to access the marketplace. I had to run the updates for windows a few times, and then by the 3rd restart I was able to access an upgrade to 8.1 and now I can access the marketplace in VS!!

windows mobile 6 emulator not signed with a trusted certificate error

I´m trying to install a program in the windows mobile 6 emulator, running it as standalone image (PPC_USA.BIN). The program installs sucessfully, but when i try to run it, the error msg is:
The file '' cannot be opened. Either is not signed with a trusted certificate, or one of its components cannot be found. If the problem persists, try reinstalling or restoring the file.
Any suggestions?
The application probably requires that security be lowered. So to be able to run it, the device needs to have security lowered at least to the level at which the user is asked for permission when he/she is running an unsigned executable. In the context of Windows Mobile security, it means that the device's security configuration needs to be set to Two-Tier-Prompt, One-Tier-Prompt or Security-Off (see MSDN for more details).
Changing of the security configuration might require device manufacturer's or operator's assistance.
In some cases it can be done by the user. Some of them are listed below:
If the user has a registry editor application which can run on
the device and can change the device registry (such application
needs to be signed by a certificate which is trusted by the device
though, or the same issue will repeat itself.)
The device has installed Microsoft Windows Mobile development
certificates.
The device allows the user to install the Microsoft Windows
Mobile development certificates.
Of the above, 2 and 3 are more than likely be the case; if so then try the following:
Install Windows Mobile SDK (Here)
Install <WM SDK>/Tools/Security/SDK Development
Certificates/Certs.cab on the device.
Go to <WM SDK>/Tools/PocketPC/Security/Security Configuration and
use one of the cpf file to change the device's security
configuration (see the Readme File located at <WM
SDK>/Tools/PocketPC/Security/Security Configuration/ReadMe.txt)
Hope this helps someone, even-though I'm a year or so late...

The debugger was unable to find the registration for the target application

I am testing my Windows 8 app by logging in as the guest account. I want to see how it works installing with limited permissions.
It seems I cannot debug any apps. Here are the steps:
Login as the Windows 8 Guest Account
Open Visual Studio.
Create a new Windows Store app, using the grid template
Click the play button to deploy to the simulator or the local machine.
Upon deployment, I receive this error:
Unable to debug Windows Store app App1/App1/bin/Debug/App1.exe
The debugger was unable to find the registration for the target application. If the problem persists, try uninstalling and then reinstalling the application.
Am I unable to deploy apps without being an administrator? If not, is there a way around this problem?
It doesn't make sense to try to debug installing an app as a guest. Guest accounts are not allowed to install apps. There is a short forum post regarding accounts here.
If you are wanting to see how the app performs for a guest after it has already been installed, you can run the app from the desktop tile, but I don't know how to run the debugger on it, or even if you can.