Omadmclient.exe keeps forcing Win10 computers to reboot shortly after login

Question

Hi,

I am in need of some advice. I have numerous Hybrid Azure AD Autopiloted computers in my organization forcing a reboot. After a domain user logs in, the computer presents a message on screen saying:

Your about to be signed out
Windows will shut down in 10 minutes. Shutdown will start on [Date/Time]

The system logs indicate that the omadmclient.exe is responsible for triggering the restart. From what I have read, that client talks back to InTune and applies configuration policies to the computer. Unfortunately, I can't see what specific setting or policy is triggering the omadmclient to force a reboot.

The event viewer log shows the following:

INFORMATION - 22-11-2022 9:03:19am - USER32 - 1074
The process C:\WINDOWS\system32\omadmclient.exe (XXXXXXXXXXXXXX) has initiated the restart of computer XXXXXXXXXXXXXX on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Reconfiguration (Planned)
Reason Code: 0x80020004
Shutdown Type: restart
Comment:

A few milliseconds before that log, another log can be found which says:

WARNING - 22-11-2022 8:49:34AM - GROUPPOLICY - 1085
Windows failed to apply the MDM Policy settings. MDM Policy settings might have its own log file. Please click on the "More information" link.

I browsed through the InTune Management Extension Logs but haven't found anything which helps determine what the omadmclient is doing specifically. I have seen other posts which point towards Application Control policies as being the cause of the problem, but we don't have any configured.

Any advice would be greatly appreciated!

Kind regards,
DBrown7567

Answer 1

The Autopilot diagnostics log will tell you exactly what triggered the reboot.

Windows Autopilot - Policy Conflicts