How to resolve 'Your sign-in was successful but this device is not managed' errors in Microsoft 365

Security & Access KB-371

Summary

This guide helps you troubleshoot and resolve: How to resolve 'Your sign-in was successful but this device is not managed' errors in Microsoft 365. Follow the steps below to fix the issue.

Quick Tip: Need immediate assistance? 💻 Open a Ticket

Common Causes

This error typically occurs when your organisation has implemented Conditional Access policies. While your username and password are correct, Microsoft 365 is blocking access because the device you are using is not registered in the company's management system (Microsoft Intune) or does not meet specific security benchmarks, such as having an active firewall or encrypted disk.

Quick Fix Steps

Before attempting a full re-registration, try these common resolutions:

Restart your device: This forces a refresh of the security tokens and can resolve temporary synchronisation glitches.
Check for updates: Ensure Windows Update or macOS Software Update is fully up to date. Outdated OS versions often fail compliance checks.
Verify Internet connection: Ensure you are not on a restricted public Wi-Fi that might be blocking the communication between your device and the management server.

Detailed Instructions for Windows

If the quick fixes do not work, you likely need to register your device with your organisation's Azure AD (Entra ID).

Registering your device

Click the Start menu and select Settings.
Navigate to Accounts > Access work or school.
Look for your work email address. If it is not listed, click Connect.
Enter your corporate email address and password when prompted.
When asked "Allow my organisation to manage my device", ensure the checkbox is ticked and click OK.
Restart your browser and attempt to sign in to Microsoft 365 again.

Checking Compliance Status

Open the Company Portal app (if installed on your machine).
Select Devices from the menu.
Click on your current device.
Select Check Status to force the device to analyse its security settings against company policy.

If you have recently changed your password, you may need to perform a Password reset (Windows login) to ensure the local cached credentials match the cloud identity.

Detailed Instructions for macOS

Apple devices require the Company Portal app to be installed and configured to be recognised as "managed".

Enrolling your Mac

Download and install the Microsoft Company Portal app.
Launch the app and sign in with your work credentials.
Follow the on-screen prompts to download the Management Profile.
Open System Settings (or System Preferences) > Privacy & Security > Profiles.
Double-click the Management Profile and select Install.
Once the profile is installed, return to the Company Portal app and complete the device setup.

Do not manually remove the Management Profile from your System Settings, as this will immediately trigger the "device is not managed" error and block your access to email and Teams.

Troubleshooting Common Compliance Failures

If your device is registered but you still see the error, your device may be "non-compliant". Check the following:

Disk Encryption: Ensure BitLocker (Windows) or FileVault (macOS) is enabled.
Antivirus: Ensure Windows Defender or your approved security software is active and updated.
Password Complexity: Ensure your local device login password meets the organisation's length and complexity requirements.

If you have verified the above and still cannot access your account, please Open a Ticket so our team can analyse your device status in the Microsoft Endpoint Manager console.

Still Having Issues?

Need more help? If the issue persists after trying these steps, please open a support ticket and our team will assist you.

💻 Open a Ticket