Jason Misleh

Is the application configured in the console as a purchased app or public app?

Can you confirm that there are no GPOs or third party products that might also be setting this setting and overwriting the baseline?

@ivan_531 - sorry for the delay on this. I missed the notification with your response. Can you share your unescaped XML? If you do not want to share it here, feel free to DM me or email it to me at jmisleh@omnissa.com. I have seen this happen when you configure User Authentication, but there is no User certificate on the device that matches if you are using Cert Auth. If you want to share the XML file, I can take a look at it, as well as try writing a custom XML profile for you. Additionally, you can engage support if you need immediate assistance with this.

@Moni_26 can you outline the process you are using? This change only affects PDUE (profile download user enrollment) workflows. are you enrolling via Intelligent Hub, Web, or Settings?

One easy way to do this is to configure the device the way you want it without UEM. Once the device is connected and working, export the interface configuration using netsh. Make any changes to the file to generalize it. Once you are done, you need to escape characters. Once it is escaped, you can copy/paste it into the Lan XML field. You can also use a custom profile (CSP) configuration if you don't want to use the Beta configuration screen.