Intune Microsoft Endpoint Manager: Update from iOS 15 to iOS 16 may fail …

[German]Brief note for administrators who use Microsoft Endpoint Manager to manage mobile devices. Microsoft has just announced that iOS/iPadOS 15 devices that are logged in with a user registry cannot be successfully updated to iOS 16.


On  Monday, September 12, 2022, Apple will indeed release iOS 16 for newer iPhone models – I had reported in the post iOS 16: Release on September 12, 2022. Now the following tweet has come to my attention, which warns about problems when upgrading to iOS 16 if Microsoft Endpoint Manager is used.

Issues with iOS/iPadOS 15 devices enrolled in Endpoint Manager

Microsoft's Intunes team goes into details in the post  iOS/iPadOS 15 devices enrolled with User Enrollment are unable to successfully update to iOS 16. The team has tested every beta of iOS 16 so far and recently encountered an issue. Both Intune and Apple are working on updates, but there is no solution yet.

auf die Details ein. Das Team hat bisher jede Beta von iOS 16 getestet und ist kürzlich auf ein Problem gestoßen. Sowohl Intune als auch Apple arbeiten an Updates, aber eine Lösung gibt es noch nicht.

  • Microsoft states that devices enrolled with User Enrollment and running iOS 15 or iPadOS 15 are affected by the upgrade issue.
  • Affected devices are those enrolled in Intune between September 16, 2021 (Intune service release 2109) and the August Intune releases (2208).

The device enrollment date can be viewed in the Microsoft Endpoint Manager Admin Center. To do so, go to Devices > iOS/iPadOS and view the Enrollment Date column on the Overview page. For a current iOS device, the enrollment date can be viewed under Settings > General > VPN and Device Management -> Management Profile. It is necessary to check when the device identity certificate expires. If this is between September 2022 and September 2023, the device is likely affected (most customers use a one-year certificate).


Microsoft has posted IT428176 in the Service Health Dashboard for affected devices. When an affected device is upgraded from iOS/iPadOS 15 to iOS/iPadOS 16, the user receives the error message "New MDM payload does not match old payload." At the device level, the enrolled devices cannot update their management profile. If the management profiles are not updated, the device may lose compliance, which may block access to enterprise resources, depending on your policies.

The Intune team plans to release a fix by September 16 that will be fully rolled out across the Intune environment. Apple is working on an update for iOS/iPadOS 16, though it is unknown to Microsoft whether this will be released with 16 or 16.x. Microsoft wants to inform if there are any news about that issue.

Cookies helps to fund this blog: Cookie settings

This entry was posted in ios, issue, Software and tagged , . Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *