Cloud managment gateway and no users deployments

Question

Hi ,

I have a problem with CMG where users deployments are not showing in software center , looking at the PolicyAgent.log I see this error

[Assignment Request] Assignments request for User xxxx completed with status 0x80070005

The machine is not hybrid joined in Azure but just Azure registered , certs for the machine are exist and there fore deployments targeting the machine are showing up.

My understanding is this error means "access denied".

also MFA is enabled , do you think this is related ?

Answer 1

From: https://learn.microsoft.com/en-us/mem/configmgr/core/clients/manage/cmg/cloud-management-gateway-faq#do-i-need-any-certificates

Client authentication certificate: Depending upon your environment and CMG design, you can use PKI certificates for client authentication. This authentication method doesn't support user-centric scenarios, but supports devices running Windows 8.1 or Windows 10. For more information, see Configure client authentication for CMG: PKI certificate.

2010 will address this by prompting the user for their AAD identity.

Side question: Why aren't you at least hybrid AAD joining the systems?