Autopilot error 80180003 means the signed-in user is not authorized to enroll a device into mobile device management (MDM). Windows shows the message: "Something went wrong. This user is not authorized to enroll. You can try to do this again or contact your system administrator with the error code 80180003." Clicking Try again restarts the device and repeats the same failure after sign-in.
This is a permissions or configuration issue on the tenant side, not a defect in Autopilot itself. Microsoft's own troubleshooting article, Windows user is not authorized to enroll devices, lists several root causes. This guide walks through all of them plus two additional checks worth verifying on a new tenant.
Before you start
What you will learn
- How to identify and fix each cause of Intune Autopilot error 80180003, from Entra join permissions to MDM authority and licensing.
- Error 80180003 blocks Autopilot device preparation entirely. Until it is fixed, no affected user can enroll a Windows device into the tenant.
Requirements
- Global Administrator or Intune Administrator role
- Microsoft Intune admin center, Microsoft Entra admin center, Microsoft 365 admin center
- Intune Administrator
- Global Administrator
Good to know
- 10 to 20 minutes
- Applies to Microsoft Intune and Microsoft Entra ID admin centers as of August 2026.
- Most of the checks in this guide are read-only reviews. Only apply a change once you have identified which setting is actually misconfigured.
Quick answer
Error 80180003 usually comes from one of seven causes: blocked Entra device join, MDM user scope set to None, Windows platform restrictions, a Home edition of Windows, a device limit reached, an unset MDM authority, or a missing Intune license. Check each setting in order until enrollment succeeds.
Microsoft Entra admin center > Entra ID > Devices > Device settingsStep-by-step tutorial
7 stepsConfirm the user can join devices to Microsoft Entra ID
Check that the Entra setting controlling device joins is not blocking the user.
Entra ID > Devices > Manage > Device settingsSign in to the Microsoft Entra admin center with an administrator account. Go to Entra ID > Devices > Manage > Device settings.
Under Users may join devices to Microsoft Entra, choose All or Selected. If you choose Selected, add the affected user or their group. Click Save.
If this setting was previously set to None, this alone can cause error 80180003, since no user is then allowed to join a device to Entra ID.
This setting change can take a few minutes to apply across the tenant before a retry succeeds.
Verify Windows automatic MDM enrollment (MDM user scope)
Ensure the MDM user scope in Entra ID allows the user's devices to auto-enroll into Intune.
Entra ID > Mobility (MDM and MAM) > Microsoft Intune > MDM user scopeIn the Microsoft Entra admin center, go to Entra ID > Mobility (MDM and MAM) and select Microsoft Intune.
Under MDM user scope, there are three options: None disables automatic enrollment for everyone, Some enables it only for selected users or groups, and All enables it for every user.
Select All or Some with the affected user included, then save. This is the setting most often responsible for error 80180003 on a freshly configured tenant.
WIP user scope is a separate setting for Windows Information Protection. Do not confuse the two.
Check Windows device platform restrictions
Confirm Windows MDM enrollment is allowed by the device type restriction policy.
Devices > Enrollment > Device platform restrictions > Default > Platform settingsSign in to the Microsoft Intune admin center. Go to Devices > Enrollment > Device platform restrictions.
Open the Default restriction (or the policy that applies to the affected user) and select Platform settings. Confirm Windows (MDM) is set to Allow, not Block.
If multiple users are hitting error 80180003 at once, this platform-level block is a likely cause, since it affects every enrolling device rather than a single account.
Verify the edition of Windows
Confirm the device runs an edition of Windows that supports Entra join and Intune enrollment.
Settings > System > About > Windows specificationsOn the affected device, select Start > Settings > System > About. Under Windows specifications, check the Edition field.
Joining Microsoft Entra ID and enrolling in Intune requires Windows 11 Pro, Enterprise, or Education. Windows Home edition does not support these features and will fail Autopilot enrollment with error 80180003.
If the device is running Home edition, upgrade it to Pro before continuing, then restart and retry the Autopilot enrollment.
An in-place edition upgrade does not require reinstalling Windows.
Check device limit restrictions
Confirm the user has not reached their maximum allowed enrolled devices.
Devices > Enrollment > Enrollment options > Device limit restrictionsIn the Intune admin center, go to Devices > Enrollment > Enrollment options > Device limit restrictions.
Open the restriction profile assigned to the user (Intune allows a device limit between 1 and 15) and check the configured value. If the user has already enrolled that many devices, new enrollments fail with error 80180003.
Either raise the device limit on the policy, or remove old and unused devices from the user's account under Users > select the user > Devices, then retry enrollment.
Raising the device limit on the Default profile applies to every user in the tenant, not just the one affected.
Confirm Intune or Microsoft 365 licensing
Verify the enrolling user has a license that grants Intune enrollment rights.
Microsoft 365 admin center > Users > Active users > Licenses and appsGo to the Microsoft 365 admin center, expand the navigation menu, and select Users > Active users. Click the affected user to open their details pane, then select the Licenses and apps tab.
Confirm the user has one of: Microsoft Intune Plan 1, Microsoft Entra ID P1 or P2, or a Microsoft 365 plan that includes Intune, such as Business Premium, E3, E5, F1, F3, or the Academic equivalents.
A missing or incorrect license produces either error 80180003 or error 80180008. Assign the correct license and wait a few minutes for it to propagate before retrying.
Confirm the fix worked
After correcting the setting that applied to your case, restart the Autopilot enrollment. On the sign-in screen, enter the user's credentials again and let the device proceed through the Autopilot device preparation phase.
If enrollment completes without the 80180003 message, the device finishes provisioning and the user reaches the desktop. If the same error reappears, move to the next check in the list, since more than one setting can be misconfigured at once.
- The device completes Autopilot enrollment and the user reaches the Windows desktop without any enrollment error.
- Error 80180003 reappears after sign-in, or a different error code such as 80180008 appears instead.
Troubleshooting
Error 80180003 persists after fixing one setting
Cause: More than one misconfiguration can exist at the same time, for example a blocked platform restriction combined with a missing license.
Work through all seven checks in order rather than stopping at the first one applied. Retry enrollment after each change to isolate which one actually fixes it.
Device limit change does not take effect immediately
Cause: Policy changes to device limit restrictions can take a few minutes to sync to the device.
Wait several minutes after saving the updated device limit restriction before retrying enrollment. If it still fails, confirm the correct restriction profile is assigned to the user's group.
Error 80180008 appears instead of 80180003
Cause: This is a related enrollment error that also points to a missing or incorrect Intune-qualifying license.
Follow the same licensing check in step 7: confirm the user has Intune Plan 1, Entra ID P1/P2, or a Microsoft 365 plan that includes Intune.
Frequently asked questions
What does Autopilot error 80180003 mean?
Error 80180003 means the signed-in user is not authorized to enroll their device into mobile device management (MDM). It is a permissions or configuration issue in Entra ID or Intune, not a defect in Autopilot itself.
What is the most common cause of error 80180003?
On newly configured tenants, the MDM user scope setting in Entra ID being set to None is one of the most common causes, since it disables automatic MDM enrollment for every user until changed to All or Some.
Can Windows Home edition cause this error?
Yes. Joining Microsoft Entra ID and enrolling in Intune requires Windows 11 Pro, Enterprise, or Education. A device running Windows Home fails Autopilot enrollment with error 80180003 until it is upgraded to Pro or higher.
How many devices can a user enroll in Intune?
Intune's device limit restriction can be set anywhere from 1 to 15 devices per user. Once a user reaches that limit, new enrollment attempts fail with error 80180003 until old devices are removed or the limit is raised.
Does MDM authority affect Autopilot enrollment?
Yes. If a tenant's MDM authority is still set to Unknown instead of Microsoft Intune, every device enrollment attempt fails, including Autopilot, since no authority has been designated to manage the devices.
