This article shows how to fix Windows Autopatch unlicensed admin error that appears in Intune when you run the Readiness Assessment tool for the first time during Tenant enrollment.
The Readiness assessment tool checks the readiness of your tenant to enroll in Windows Autopatch. You cannot run this tool once you enroll your tenant for Autopatch service.
This tool should be run before you enroll your tenant in Autopatch. It checks the settings in Microsoft Endpoint Manager (Microsoft Intune) and Azure Active Directory (Azure AD) to ensure they’ll work with Windows Autopatch.
When you setup Windows Autopatch, you first enroll your tenant in Windows Autopatch. Once the enrollment is successful, the next step is to run the Readiness Assessment tool.
If you have not run the Readiness Assessment tool for Autopatch Service, you will see the message Assessment not started – Select Run checks to begin assessment.
Fix Windows Autopatch Unlicensed Admin Error
The unlicensed admin error appears because the Intune administrator account doesn’t have enough permissions to interact with Azure AD organization.
If the Readiness assessment tool finds an error, you cannot enroll your tenant in Autopatch until you fix it. Refer to this excellent article on how to resolve Windows Autopatch issues found by the Readiness assessment tool.
The below screenshot illustrates the error where we see readiness status as Not Ready. This means you cannot enroll your tenant for Autopatch. You have to fix these errors that prevent the enrollment.
To know the error details, click View Details under Management Settings. The readiness error that we see here is Unlicensed admin. Clicking on the error will show the steps to resolve the error.
You can fix the Windows Autopatch unlicensed admin error with follows steps:
- Sign in to Microsoft Endpoint Manager admin center.
- Go to Tenant administration > Roles > Administrator Licensing.
- Select Allow access to unlicensed admins > Yes.
You will see the following message: Allow access to unlicensed admin? Once you allow unlicensed admins to access Intune, you can’t undo it. Allow access anyway. Click Yes.
From now on, users who sign in to the Microsoft Endpoint Manager admin center don’t require an Intune license. Their scope of access is defined by the roles assigned to them.
After you allow admins without an Intune license to access Intune, you must run the Readiness assessment tool again. You can run the Readiness assessment tool using following steps:
- Sign in to the Microsoft Endpoint Manager admin center.
- Select Tenant Administration and navigate to Windows Autopatch Tenant enrollment.
- Click on Run Checks to initiate Readiness Assessment Tool.
Now we see that Readiness Assessment Tool is complete, and the Readiness status is ready.