{"id":1069,"date":"2023-08-17T23:25:12","date_gmt":"2023-08-17T21:25:12","guid":{"rendered":"https:\/\/www.graber.cloud\/?p=1069"},"modified":"2023-08-17T23:25:16","modified_gmt":"2023-08-17T21:25:16","slug":"aadsts50131-device-not-required-state","status":"publish","type":"post","link":"https:\/\/www.graber.cloud\/en\/aadsts50131-device-not-required-state\/","title":{"rendered":"AADSTS50131: Device is not in required device state"},"content":{"rendered":"\n

Dem Fehler \u00abAADSTS50131: Device is not in required device state\u00bb begegnet man nicht alle Tage. Doch wenn dieser auftritt, so sind viele oft ratlos. Nicht zuletzt auch, da dieser Fehler und dessen Ursache kaum dokumentiert oder nur schwer zu finden ist. Wie du den AADSTS50131 Fehler beheben kannst, erf\u00e4hrst du hier.<\/p>\n\n\n\n

Auftreten des AADSTS50131 Fehlers<\/h2>\n\n\n\n

Der Fehler \u201cAADSTS50131: Device is not in required device state\u201d kann in verschiedenen Situationen auftreten. In der Regel ist das der Fall, wenn die APIs vom Windows Defender for Endpoint<\/a> angesprochen werden. Der Fehler kann somit bei Eigenentwicklungen auftauchen, welche die APIs ansprechen. Viel wahrscheinlicher aber wird der Fehler durch eine von Microsoft vorgesehene Integration basierend auf diesen APIs herbeigerufen. Beispielsweise \u00fcber PowerBI, dem zuweisen von Threat Policies oder beim Verbinden eines entsprechenden Microsoft Sentinel Konnektoren wie Microsoft 365 Defender.<\/p>\n\n\n\n

Der Fehler besagt, dass das Ger\u00e4t nicht dem definierten Status entspricht oder die Anfrage aufgrund von verd\u00e4chtigen Aktivit\u00e4ten, Zugriffsrichtlinien oder Sicherheitsrichtlinien blockiert ist. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Diese Aussage ist leider sehr weit gesteckt und somit schwierig das effektive Problem zu identifizieren. Und dies, obschon die Ursache nach meinen Erfahrungen in jedem Fall die gleiche und der Fehlercode somit eindeutig ist. Es handelt sich um eine klassische Conditional Access Policy (legacy) mit dem Namen \u00ab[Windows Defender ATP] Device policy\u00bb, welche den Zugriff blockiert. Diese Policy wird automatisch erstellt, wenn Microsoft Defender for Endpoint mit Intune verbunden wird und ist von Microsoft unter diesem Link dokumentiert<\/a>. Unter anderem steht dort auch, dass diese keinen Einfluss auf andere Cloud Apps oder Ressourcen hat, was erwiesenermassen eine Fehlinformation ist.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Behebung des AADSTS50131 Fehlers<\/h2>\n\n\n\n

Die Ursache des Fehlers zu beheben ist grunds\u00e4tzlich ganz einfach. Du brauchst nur die entsprechende, oft einzige Policy mit einer Ausnahme zu versehen.<\/p>\n\n\n\n

    \n
  1. Navigiere dazu im Azure Active Directory \u00fcber Security, Conditional Access zu Classic Policy oder verwende diesen direkten Link<\/a>.<\/li>\n\n\n\n
  2. W\u00e4hle die Policy \u00ab[Windows Defender ATP] Device policy\u00bb.<\/li>\n\n\n\n
  3. Definiere die n\u00f6tige Ausnahme.<\/li>\n<\/ol>\n\n\n\n
    \"\"<\/figure>\n\n\n\n

    Ist das erledigt, funktioniert die gew\u00fcnschte Authentifizierung zur Nutzung der APIs umgehend und wie gew\u00fcnscht.<\/p>\n\n\n\n

    Achtung: Es ist weder m\u00f6glich noch unterst\u00fctzt die Policy an sich zu editieren. Sie sollte daher nicht komplett deaktiviert oder gar gel\u00f6scht werden. Wird die Policy gel\u00f6scht, kann sie nur wiederhergestellt werden, indem die Verbindung von Intune und Microsoft Defender for Endpoint unterbunden und neu eingerichtet wird.<\/p>\n","protected":false},"excerpt":{"rendered":"

    The error \"AADSTS50131: Device is not in required device state\" is not encountered every day. But when it does occur, many are often at a loss. Not least because this error and its cause is hardly documented or difficult to find. You can find out how to fix the AADSTS50131 error here.<\/p>","protected":false},"author":1,"featured_media":1075,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[7],"tags":[60,15,92,91,90,14,79,19],"class_list":["post-1069","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-authentication","tag-azuread","tag-defender","tag-defender-for-endpoint","tag-entra","tag-howto","tag-intune","tag-security"],"yoast_head":"\nAADSTS50131: Device is not in required device state<\/title>\n<meta name=\"description\" content=\"AADSTS50131: Device is not in required device state - and how to deal with it - Blogpost available in german and english.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.graber.cloud\/en\/aadsts50131-device-not-required-state\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AADSTS50131: Device is not in required device state\" \/>\n<meta property=\"og:description\" content=\"AADSTS50131: Device is not in required device state - and how to deal with it - Blogpost available in german and english.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.graber.cloud\/en\/aadsts50131-device-not-required-state\/\" \/>\n<meta property=\"og:site_name\" content=\"Cloud Business & Technology\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-17T21:25:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-17T21:25:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.graber.cloud\/wp-content\/uploads\/2023\/08\/banner-aadsts50131.png\" \/>\n\t<meta property=\"og:image:width\" content=\"4381\" \/>\n\t<meta property=\"og:image:height\" content=\"2475\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Yannic Graber\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@GraberYannic\" \/>\n<meta name=\"twitter:site\" content=\"@GraberYannic\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Yannic Graber\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/\"},\"author\":{\"name\":\"Yannic Graber\",\"@id\":\"https:\/\/www.graber.cloud\/en\/#\/schema\/person\/50b8d88e3d433af9d16d73f354d897fe\"},\"headline\":\"AADSTS50131: Device is not in required device state\",\"datePublished\":\"2023-08-17T21:25:12+00:00\",\"dateModified\":\"2023-08-17T21:25:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/\"},\"wordCount\":396,\"commentCount\":8,\"publisher\":{\"@id\":\"https:\/\/www.graber.cloud\/en\/#\/schema\/person\/50b8d88e3d433af9d16d73f354d897fe\"},\"image\":{\"@id\":\"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.graber.cloud\/wp-content\/uploads\/2023\/08\/banner-aadsts50131.png\",\"keywords\":[\"Authentication\",\"AzureAD\",\"Defender\",\"Defender for Endpoint\",\"Entra\",\"HowTo\",\"Intune\",\"Security\"],\"articleSection\":[\"Technology\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/\",\"url\":\"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/\",\"name\":\"AADSTS50131: Device is not in required device state\",\"isPartOf\":{\"@id\":\"https:\/\/www.graber.cloud\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.graber.cloud\/wp-content\/uploads\/2023\/08\/banner-aadsts50131.png\",\"datePublished\":\"2023-08-17T21:25:12+00:00\",\"dateModified\":\"2023-08-17T21:25:16+00:00\",\"description\":\"AADSTS50131: Device is not in required device state - and how to deal with it - Blogpost available in german and english.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#primaryimage\",\"url\":\"https:\/\/www.graber.cloud\/wp-content\/uploads\/2023\/08\/banner-aadsts50131.png\",\"contentUrl\":\"https:\/\/www.graber.cloud\/wp-content\/uploads\/2023\/08\/banner-aadsts50131.png\",\"width\":4381,\"height\":2475,\"caption\":\"Banner for blogpost on how to resolve aadsts50131 error\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.graber.cloud\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AADSTS50131: Device is not in required device state\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.graber.cloud\/en\/#website\",\"url\":\"https:\/\/www.graber.cloud\/en\/\",\"name\":\"Cloud Business & Technology\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.graber.cloud\/en\/#\/schema\/person\/50b8d88e3d433af9d16d73f354d897fe\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.graber.cloud\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/www.graber.cloud\/en\/#\/schema\/person\/50b8d88e3d433af9d16d73f354d897fe\",\"name\":\"Yannic Graber\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.graber.cloud\/en\/#\/schema\/person\/image\/\",\"url\":\"\/wp-content\/uploads\/2020\/03\/Techdata-Yannic_Graber_downsized.jpg\",\"contentUrl\":\"\/wp-content\/uploads\/2020\/03\/Techdata-Yannic_Graber_downsized.jpg\",\"width\":264,\"height\":267,\"caption\":\"Yannic Graber\"},\"logo\":{\"@id\":\"https:\/\/www.graber.cloud\/en\/#\/schema\/person\/image\/\"},\"description\":\"Experienced technical cloud consultant, certified Azure solutions architect and MCT, focusing on Microsoft Cloud related topics. As a graduate business informatics specialist HF, I consider both the technology and economics. Born in Lucerne, Switzerland and still living there.\",\"sameAs\":[\"https:\/\/www.graber.cloud\",\"https:\/\/www.linkedin.com\/in\/ygr\/\",\"https:\/\/x.com\/GraberYannic\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AADSTS50131: Device is not in required device state","description":"AADSTS50131: Device is not in required device state - and how to deal with it - Blogpost available in german and english.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.graber.cloud\/en\/aadsts50131-device-not-required-state\/","og_locale":"en_GB","og_type":"article","og_title":"AADSTS50131: Device is not in required device state","og_description":"AADSTS50131: Device is not in required device state - and how to deal with it - Blogpost available in german and english.","og_url":"https:\/\/www.graber.cloud\/en\/aadsts50131-device-not-required-state\/","og_site_name":"Cloud Business & Technology","article_published_time":"2023-08-17T21:25:12+00:00","article_modified_time":"2023-08-17T21:25:16+00:00","og_image":[{"width":4381,"height":2475,"url":"https:\/\/www.graber.cloud\/wp-content\/uploads\/2023\/08\/banner-aadsts50131.png","type":"image\/png"}],"author":"Yannic Graber","twitter_card":"summary_large_image","twitter_creator":"@GraberYannic","twitter_site":"@GraberYannic","twitter_misc":{"Written by":"Yannic Graber","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#article","isPartOf":{"@id":"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/"},"author":{"name":"Yannic Graber","@id":"https:\/\/www.graber.cloud\/en\/#\/schema\/person\/50b8d88e3d433af9d16d73f354d897fe"},"headline":"AADSTS50131: Device is not in required device state","datePublished":"2023-08-17T21:25:12+00:00","dateModified":"2023-08-17T21:25:16+00:00","mainEntityOfPage":{"@id":"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/"},"wordCount":396,"commentCount":8,"publisher":{"@id":"https:\/\/www.graber.cloud\/en\/#\/schema\/person\/50b8d88e3d433af9d16d73f354d897fe"},"image":{"@id":"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#primaryimage"},"thumbnailUrl":"https:\/\/www.graber.cloud\/wp-content\/uploads\/2023\/08\/banner-aadsts50131.png","keywords":["Authentication","AzureAD","Defender","Defender for Endpoint","Entra","HowTo","Intune","Security"],"articleSection":["Technology"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/","url":"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/","name":"AADSTS50131: Device is not in required device state","isPartOf":{"@id":"https:\/\/www.graber.cloud\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#primaryimage"},"image":{"@id":"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#primaryimage"},"thumbnailUrl":"https:\/\/www.graber.cloud\/wp-content\/uploads\/2023\/08\/banner-aadsts50131.png","datePublished":"2023-08-17T21:25:12+00:00","dateModified":"2023-08-17T21:25:16+00:00","description":"AADSTS50131: Device is not in required device state - and how to deal with it - Blogpost available in german and english.","breadcrumb":{"@id":"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#primaryimage","url":"https:\/\/www.graber.cloud\/wp-content\/uploads\/2023\/08\/banner-aadsts50131.png","contentUrl":"https:\/\/www.graber.cloud\/wp-content\/uploads\/2023\/08\/banner-aadsts50131.png","width":4381,"height":2475,"caption":"Banner for blogpost on how to resolve aadsts50131 error"},{"@type":"BreadcrumbList","@id":"https:\/\/www.graber.cloud\/aadsts50131-device-not-required-state\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.graber.cloud\/en\/"},{"@type":"ListItem","position":2,"name":"AADSTS50131: Device is not in required device state"}]},{"@type":"WebSite","@id":"https:\/\/www.graber.cloud\/en\/#website","url":"https:\/\/www.graber.cloud\/en\/","name":"Cloud Business & Technology","description":"","publisher":{"@id":"https:\/\/www.graber.cloud\/en\/#\/schema\/person\/50b8d88e3d433af9d16d73f354d897fe"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.graber.cloud\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":["Person","Organization"],"@id":"https:\/\/www.graber.cloud\/en\/#\/schema\/person\/50b8d88e3d433af9d16d73f354d897fe","name":"Yannic Graber","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.graber.cloud\/en\/#\/schema\/person\/image\/","url":"\/wp-content\/uploads\/2020\/03\/Techdata-Yannic_Graber_downsized.jpg","contentUrl":"\/wp-content\/uploads\/2020\/03\/Techdata-Yannic_Graber_downsized.jpg","width":264,"height":267,"caption":"Yannic Graber"},"logo":{"@id":"https:\/\/www.graber.cloud\/en\/#\/schema\/person\/image\/"},"description":"Experienced technical cloud consultant, certified Azure solutions architect and MCT, focusing on Microsoft Cloud related topics. As a graduate business informatics specialist HF, I consider both the technology and economics. Born in Lucerne, Switzerland and still living there.","sameAs":["https:\/\/www.graber.cloud","https:\/\/www.linkedin.com\/in\/ygr\/","https:\/\/x.com\/GraberYannic"]}]}},"_links":{"self":[{"href":"https:\/\/www.graber.cloud\/en\/wp-json\/wp\/v2\/posts\/1069","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.graber.cloud\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.graber.cloud\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.graber.cloud\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.graber.cloud\/en\/wp-json\/wp\/v2\/comments?post=1069"}],"version-history":[{"count":2,"href":"https:\/\/www.graber.cloud\/en\/wp-json\/wp\/v2\/posts\/1069\/revisions"}],"predecessor-version":[{"id":1077,"href":"https:\/\/www.graber.cloud\/en\/wp-json\/wp\/v2\/posts\/1069\/revisions\/1077"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.graber.cloud\/en\/wp-json\/wp\/v2\/media\/1075"}],"wp:attachment":[{"href":"https:\/\/www.graber.cloud\/en\/wp-json\/wp\/v2\/media?parent=1069"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.graber.cloud\/en\/wp-json\/wp\/v2\/categories?post=1069"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.graber.cloud\/en\/wp-json\/wp\/v2\/tags?post=1069"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}