A device that was fully enrolled, compliant, and up to date still failed sign-in with error 530003 – and why the fix had nothing to do with the browser.