We cannot join User machine to EntraID

Question

We cannot join User machine to EntraID

Jon Honhart 0

I need help understanding why we cannot join a device to our EntraID? The user has a good password and has EntraID Lic and a Intune Lic. We have used the DSregtool.ps1 and it claims we should be able to join. Screenshot 2024-07-22 at 4.54.33 PM

We have tried using the Settings/Accounts and dsregcmd.exe

Rudy Ooms 701 Reputation points MVP

2024-07-23T04:52:45.5666667+00:00

what kind of error are you getting when you try to manually join entra?

2 answers

Your answer

Rudy Ooms 701 Reputation points MVP

2024-07-23T04:52:45.5666667+00:00

what kind of error are you getting when you try to manually join entra?

Answer 1

Crystal-MSFT 53,981 Microsoft External Staff

@Jon Honhart, Thanks for posting in Q&A. From your description, it seems the Microsoft Entra joined is failed. Before going on, I would like to confirm if we just want to do Microsoft Entra join or also want to enroll into Intune.

To do Microsoft Entra join, please firstly ensure it is supported on Microsoft Entra portal.

https://learn.microsoft.com/en-us/entra/identity/devices/device-join-plan#users-might-join-devices-to-microsoft-entra-id

Then go to the device and click Settings-> Accounts-> Access work or school, and then select Connect. On the Set up a work or school account screen, select Join this device to Azure Active Directory. then see if can be successful.

https://support.microsoft.com/en-us/account-billing/join-your-work-device-to-your-work-or-school-network-ef4d6adb-5095-4e51-829e-5457430f3973

However, if it is failed, please get screen shot of the error message we get.

Meanwhile, if we also want the device to enroll into Intune, please ensure the Automatic enrollment is configured and the MDM user scope: is set to all or the user group you select.

https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment-windows#automatic-enrollment-administrator-tasks

Please try the above suggestion and if there's any update, feel free to let us know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Jon Honhart 0 Reputation points

2024-07-23T02:51:30.93+00:00

Thanks so much but all the setting seem to be good :(

Screenshot 2024-07-22 at 3.38.Screenshot 2024-07-22 at 1.42.35 PM.png Screenshot 2024-07-22 at 3.21.52 PM.png 28 PM.png
Crystal-MSFT 53,981 Reputation points Microsoft External Staff

2024-07-23T05:16:10.34+00:00

@Jon Honhart, Thanks for the reply. For the setting "Users may join devices to Microsoft Entra", please set it under the following location. Please ensure the account sign in have enough permission.

https://entra.microsoft.com/#view/Microsoft_AAD_Devices/DevicesMenuBlade/~/DeviceSettings/menuId/Overview

From the dsregcmd /status, I notice it is AzureADjoined.

Meanwhile, for the error "your account was not set up on this device because device management could not be enabled.", it can be that the automatic enrollment is not configured. Please ensure the MDM user scope it set all. But if the device is already Microsoft Entra Joined, then you can use PowerShell script to enroll the devices.
Jon Honhart 0 Reputation points

2024-07-23T14:45:58.9633333+00:00

I will try your script for the machines that are EntraJoin (I bet its not running as "system"). will try your script for those machine.

For new and existing users they still cannot join Entra
Jon Honhart 0 Reputation points

2024-07-23T16:14:02.99+00:00

Update,

When joining with a new computer and newly created user we are auth and allowed to pick that user. Then it looses network connection and restarts the process.
Crystal-MSFT 53,981 Reputation points Microsoft External Staff

2024-07-24T02:02:18.5633333+00:00

@Jon Honhart, From your description, I know new users and existing users are failed to do Microsoft Entra join. Could you confirm if these users are allowed to do it by checking the following setting in Microsoft Entra admin center?

Answer 2

Jon Honhart 0

Screenshot 2024-07-24 at 8.31.51 AM

Thanks for the help, These are the settings.

Crystal-MSFT 53,981 Reputation points Microsoft External Staff

2024-07-25T02:12:31.4+00:00

@Jon Honhart, Thanks for the reply. From the screen shot, I notice it is configured to enable. Please go to Event Viewer, Applications and Services Log > Microsoft > Windows > User Device Registration to see if any related error we can find.

Share via

We cannot join User machine to EntraID

2 answers

Your answer