MDM enrolment blocked — 'organisation does not support this version of Windows'

in plain english

Intune refused to enrol the device with the user-facing message 'Your organization does not support this version of Windows'. The actual cause is almost always Intune's enrolment restrictions blocking Windows MDM enrolment for this user, group, or device type — not a real Windows version problem.

most likely causes

• Intune enrolment restriction has Windows (MDM) set to Block on the device-type platform settings
• Personal Windows enrolment is blocked but the device was enrolled as personally-owned
• Enrolment restriction policy is scoped to a group that doesn't include this user
• Custom enrolment restriction blocks specific Windows versions (e.g. Home edition, or below a min build)
• Less common: clock skew >5 min breaks the certificate request — enrolment fails before reaching the restriction policy

fix path

1. Intune admin centre → Devices → Enrollment → Enrollment restrictions → Default (or the assigned restriction) → Properties → Platform settings → set Windows (MDM) = Allow
2. Confirm Personally-owned vs Corporate-owned column is set the way you want — Block on either side will surface as 0x80180014
3. If using a custom restriction: check assignments → ensure the user/group is in scope and the restriction allows this Windows edition + build
4. Re-run enrolment on the device after the restriction change (it's near-realtime, no Intune sync needed for a fresh enrolment attempt)
5. If the user's clock is >5 min off: sync with time.windows.com first, then retry
6. Pull MDM diagnostics for confirmation: Settings → Accounts → Access work or school → Info → Export

seen in

Intune device enrolment · Autopilot first-run experience · BYOD self-enrolment via Company Portal