How to Fix “Installation exceeded the time limit set by your organisation. Please try again or contact your IT support person for help”

Posted on by Summa Lai

Symptoms

I can understand you are having issues related to Autopilot timeout.

Please try to increase timeout -> try to edit the Enrollment Status page and try to increase the “Show an error when installation takes longer than the specified number of minutes” setting. And then check if it is successful to enroll.

Create new profile

  1. Sign in to the Microsoft Intune admin center and select Devices.
  2. Select Windows > Windows enrollment > Enrollment Status Page.
  3. Select Create.
  4. In Basics, enter the following properties:
    • Name: Name your profile so you can easily identify it later.
    • Description: Enter a description for the profile. This setting is optional, but recommended.
  5. Select Next.
  6. In Settings, configure the following settings:
    • Show app and profile configuration progress: Your options:
      • No: The enrollment status page doesn’t appear during device setup. Select this option if you don’t want to show the ESP to users.
      • Yes: The enrollment status page appears during device setup.
    • Show an error when installation takes longer than specified number of minutes: The default time-out is 60 minutes. Enter a higher value if you think more time is needed to install apps on your devices.
    • Show custom message when time limit or error occur: Include a message that tells people what happened and who to contact for help. Your options:
      • No: The default message is shown to users when an error occurs. That message is: “Setup could not be completed. Please try again or contact your support person for help.”
      • Yes: Your custom message is shown to users when an error occurs. Enter your message in the provided text box.
    • Turn on log collection and diagnostics page for end users: The user’s logs and diagnostics could aid with troubleshooting, so we recommend turning this on. Your options:
      • No: The collect logs button isn’t shown to users when an installation error occurs. The Windows Autopilot diagnostics page isn’t shown on devices running Windows 11.
      • Yes: The collect logs button is shown to users when an installation error occurs. The Windows Autopilot diagnostics page is shown on devices running Windows 11.
    • Only show page to devices provisioned by out-of-box experience (OOBE): Use this setting to stop the enrollment status page from reappearing to every new user who signs into the device. Your options:
      • No: The enrollment status page is shown during the device phase and the out-of-box experience (OOBE). The page is also shown during the user phase to every user who signs into the device for the first time.
      • Yes: The enrollment status page is shown during the device phase and the OOBE. The page is also shown during the user phase, but only to the first user who signs into the device. It is not shown to subsequent users who sign into the device.
    • Block device use until all apps and profiles are installed: Your options:
      • No: Users can leave the ESP before Intune is finished setting up the device.
      • Yes: Users can’t leave the ESP until Intune is done setting up the device. This option unlocks additional settings for this scenario.
    • Allow users to reset device if installation error occurs: Your options:
      • No: The ESP doesn’t give users the option to reset theirs devices when an installation fails.
      • Yes: The ESP gives users the option to reset their devices when an installation fails.
    • Allow users to use device if installation error occurs: Your options:
      • No: The ESP doesn’t give users the option to bypass the ESP when an installation fails.
      • Yes: The ESP gives users the option to bypass the ESP and use their devices when an installation fails.
    • Block device use until these required apps are installed if they are assigned to the user/device: Your options:
      • All: All assigned apps must be installed before users can use their devices.
      • Selected: The selected-apps must be installed before users can use their devices. Choose Select apps to start a Blocking apps list. This option unlocks the Blocking apps settings.
    • Only fail selected blocking apps in technician phase: Use this setting with Windows Autopilot pre-provisioned deployments to control how your required apps are prioritized during the technician flow. This setting is only available if you’ve added blocking apps and only applies to devices going through pre-provisioning. Your options:
      • No: An attempt will be made to install the blocking apps. Autopilot deployment will fail if a blocking app fails to install. No attempt is made to install non-blocking apps. When the end user receives the resealed device and signs in for the first time, the ESP will attempt to install the non-blocking apps.
      • Yes: An attempt will be made to install all required apps. Autopilot deployment will fail if a blocking app fails to install. If a non-blocking app that’s targeted to the device fails to install, the ESP ignores it and deployment continues as normal. When the end user signs into the resealed device for the first time, the ESP will reattempt to install the apps that it couldn’t in the technician phase. This is the default setting for pre-provisioned deployments.
       TipWhen using this feature, expect provisioning time to increase during the technican phase. The more apps assigned, the longer it could take. If you’re using a third party to provision your devices, tell them about the potential for increased provisioning time. Increase the ESP time-out duration to prevent deployment from failing due to a time out.
  7. Select Next.
  8. In Assignments, select the groups that will receive your profile. Optionally, select Edit filter to restrict the assignment further. NoteDue to OS restrictions, a limited selection of filters are available for ESP assignments. The picker only shows filters that have rules defined for osVersion, operatingSystemSKU, and enrollmentProfileName properties. Filters that contain other properties aren’t available.
  9. Select Next.
  10. Optionally, in Scope tags, assign a tag to limit profile management to specific IT groups, such as US-NC IT Team or JohnGlenn_ITDepartment. Then select Next. NoteScope tags limit who can see and reprioritize ESP profiles in the admin center. A scoped user can tell the relative priority of their profile even if they can’t see all of the other profiles in Intune. For more information about scope tags, see Use role-based access control and scope tags for distributed IT.
  11. In Review + create, review your settings. After you select Create, your changes are saved, and the profile is assigned. Once deployed, the profile will be applied the next time the devices check in. You can access the profile from your profiles list.

Ref: https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-enrollment-status#available-settings