Endpoint Security Complete

Situation:

The rollout fails during authentication. If untick Enable Authentication Check, the rollout to the device works correctly.

Environment:

Symantec Management Console 7.1.8280
Altiris Notification Server Version 7.1
Symantec Mobile Management Solution SP1 version 7.1.2154

Basic steps:

Check the values in the Mobile Management Server Settings under the Enrollment tab.
As an example if the environment looks like this:
- Notification Server with Mobile Management     = SymtestNS.symtest.com
- Active Directory Server \ LDAP Server               = SymtestAD.symtest.com
The necessary entries would be these:

Do not enter the IP address for the AD/LDAP Server.
If a child/parent domain is involve might enter something like: symtest.Irelan.Symantec for the Domain.
The value for the Extension does not contain the “.”.

Additional steps to check for other possible cause:

1. If the password contains an ampersand "&" character, authentication may fail.
   < This issue will be fixed in the Symantec Mobile Management 7.2 release >
2. Check if IIS SSL certificate match the name of the SMM Server.
   iOS Agent enrollment fails with a "Login failed - Authentication failure" message (TECH188822)
3. Leave the value for Allowed Groups blank if you want to authenticate across domains.
   Mobile Management Solution 7.1 SP1 is unable to authenticate across domains if there is an entry in the Allowed Groups field. A ticket has been filed with development about this issue.