Thousands of sign-in errors in Entra ID

Question

Hello,

I have problem with sign ins into Windows Sign In. Infra:

• local AD synced into Entra ID
• Windows 10/11 hybrid joined devices
• only GPO managed, we don't have Intune yet

Problem is that I see THOUSANDS of failed sign ins into Windows.

Almost 50% of all sign ins into Windows are failures...

Basically 90% of all my failures are about of those errors "Device auth failed for this user":

Deep dive into one of affected user's sign ins:

And successful sign in for the same user:

Funfact is that I'm not hearing of anyone having any issues related to this though. Any ideas why it is going like that?

Answer 1

Hi adv_kd,

Thank you for posting your query on Microsoft Q&A!

The most likely cause of these errors is a problem with your hybrid join config.

If you can get onto one of the devices throwing the error, run this command in cmd "dsregcmd /status"

We have a guide here on using this to diagnose these issues - https://learn.microsoft.com/en-us/entra/identity/devices/troubleshoot-hybrid-join-windows-current#troubleshoot-join-failures

It can also happen if the hybrid join failed, or if the domain is federated and the federation is not configured for Windows login.

Do let me know what the command shows up and if you have any further queries.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Kind Regards,

Donal