What happens if a device doesn't meet the MDM configured minimum operating system and tries to enroll using Automated Device Enrollment?

When a device that does not meet the configured minimum operating system requirements attempts to enroll using Automated Device Enrollment, it will automatically initiate an update to the appropriate operating system version, and then resume the Setup Assistant. This process is designed to ensure that all devices enrolled in the Mobile Device Management (MDM) system are operating on a version of the operating system that is deemed acceptable by the organization’s policies. By updating automatically, the device ensures compatibility with management features, security enhancements, and apps that might be essential for organizational use. This approach minimizes administrative overhead and enhances device security by ensuring that only devices with the latest OS versions can be managed effectively.

Other possible outcomes would not typically take place during this process; for instance, the device will not be outright rejected from enrollment without upgrading, nor would it require manual intervention to resolve the version incompatibility. The design of Automated Device Enrollment emphasizes a streamlined process to keep devices up to date and compliant with corporate policies.