TenantInfo::Discover: Failed reading registration data from AD. Defaulting to autojoin disabled 0x80070002

Michael Farber 2 Reputation points
2022-10-07T13:02:23.357+00:00

I am looking for help with AAD domain join.
Running dsregcmd /join /debug, i am getting the following error:
Automatic device join pre-check tasks completed.
TenantInfo::Discover: Failed reading registration data from AD. Defaulting to autojoin disabled 0x80070002
DsrCmdJoinHelper::Join: TenantInfo::Discover failed with error code 0x801c001d.

dsregcmd /status:
AD Configuration Test : FAIL [0x80070002]
Error Phase : discover
Client ErrorCode : 0x801c001d

I also have 304 and 307 in the eventvwr:
248564-image.png

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\MDM\AutoEnrollMDM is set yo "1"

And i have a bunch of 76 errors under Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostic-Provider
248565-image.png

I have checked access to the folloing URLs:
https://enterpriseregistration.windows.net
https://login.microsoftonline.com
https://device.login.microsoftonline.com

I also tried running cmd as a system and set the proxy: netsh winhttp set proxy PROXY01:8080
but getting the same error:
TenantInfo::Discover: Failed reading registration data from AD. Defaulting to autojoin disabled 0x80070002
DsrCmdJoinHelper::Join: TenantInfo::Discover failed with error code 0x801c001d.

I was looking at the permission issues in AD but could not find anything.

Please help with any other troubleshooting steps or what else i can check to resolve an issue?

Thank you.

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Most helpful
  1. Alexander Scheewe 0 Reputation points
    2024-02-19T14:46:57.9766667+00:00

    How to solve the issue:

    "TenantInfo::Discover: Failed reading registration data from AD. Defaulting to autojoin disabled 0x80070002
    DsrCmdJoinHelper::Join: TenantInfo::Discover failed with error code 0x801c001d."
    follow this guide: https://blog.alschneiter.com/2018/08/16/configure-device-registration-with-azure-ad-connect/ But to successfully hybrid join your device, you should do the following steps afterwards:

    1. Use dsregcmd /leave on the maschine
    2. You may also need to delete all user certificates from the device's local AD container
    3. You can use dsregcmd /debug /join to join the device. It may take 2-3 attempts, but at some point it will register successfully.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.