I'm facing the same issue. Is there a fix for this?
Is this affecting only some or all of your users?
Do you have any compliance policy in place that may remove the mail profile/MEM config when a device is not compliant?
It's just affecting one user. The device is compliant and there is no compliance policy configured to remove a device or profile. The logs show the email profile is installed. I have checked with our Exchange team and there are no issues with their mailbox or permissions. The user has enrolled twice already.
Do you use either Secure Email Gateway or PowerShell integration in front of your Exchange?
Have you tried enrolling the same user on a different device and see if the issue exists as well?
I've seen a weird issue with this when the device was restored with backup.