MDM status stuck on off

[mason-buettner]

Fleet versions

• Discovered: 4.78.3
• Reproduced:

Web browser and operating system: Windows 11 Education

---

💥  Actual behavior

Customer-Redqueen reports an issue with roughly 10% of their enrolled PCs where the MDM status is stuck on "off" until manually remediated. This is accompanied by the disk encryption profile staying on "Enforcing (pending)".

• This appears to only impact hosts that were manually enrolled via an MSI installer.
• After removing the host record and re-enrolling the device, the enrollment will proceed as expected.

🛠️ Expected behavior

TODO

🧑‍💻  Steps to reproduce

These steps:

• Have been confirmed to consistently lead to reproduction in multiple Fleet instances.
• Describe the workflow that led to the error, but have not yet been reproduced in multiple Fleet instances.

1. Manually enroll a PC via an MSI installer.
2. Observe that the reported MDM status never changes from "Off".

🕯️ More info (optional)

Customer thread: https://fleetdm.slack.com/archives/C08UZKFR7LM/p1768603067352429