An IT Admin notices that enrollment consistently fails when updating Google Play services over Wi-Fi. This issue occurs during deployment, on a variety of different devices. The Admin notes that when the devices are on cellular data, enrollment is successful. What next step would you take to try to resolve this issue?

The problem describes enrollment failing over Wi-Fi but succeeding over cellular data, strongly indicating a network-specific issue. Google Play services updates, like many other network operations, require specific ports to be open for communication. A firewall blocking these essential ports on the Wi-Fi network would prevent successful updates and subsequent enrollment. Checking firewall rules to ensure all necessary ports are open is a direct and logical troubleshooting step. Disabling all SSL inspection is too broad and might introduce security risks without directly addressing the port issue. Checking ADB logs is useful for device-side issues, but the problem's network-dependent nature points away from a device-specific fault. Managed configurations for Google Play services are for app behavior, not network connectivity during updates.