I'm having an issue auto enrolling all devices to EndPoint Manager/Intune, the devices are successfully joining as Azure AD joined devices.
I have recently configured EndPoint Manager with Hybrid autoenrollment, i have configured the following:
- AAD Connect - Hybrid Azure AD devices
- created a GPO to autoenrol the device to Intune - I have configured this to use 'User Credentials'
- MFA is not enabled on the account
dsregcmd /status clearly shows the devices joined as Azure AD Joined
Joining the device manually (Enrol only in device management) via Access and work or school joins the device successfully.
Checking the logs DeviceManagement Logs i get event ID 81 (warning) and 76 (error)
Auto MDM Enroll Impersonation Failure (Unknown Win32 Error code: 0x82aa0008)
Auto MDM Enroll: Device Credential (0x0), Failed (Unknown Win32 Error code: 0x82aa0008)
Edited: now seeing error Auto MDM Enroll: Device Credential (0x0), Failed (Unknown Win32 Error code: 0x80192ee2)
I have rebooted a device several times
disjoined and removed the AAD
removed the sync scope of AAD
then repeated to join process (moving it back into the Sync OU)
Will appreciate any help