License is downgraded repeatedly

Tom Speirs 11 Reputation points
2021-05-28T09:46:42.54+00:00

Hybrid Azure/AD environment. Windows 10 Enterprise license is being downgraded to Pro on some devices. Devices ship with Home license, and are rebuilt using corporate Enterprise build via WDS.
Devices lose network connectivity for a few seconds, and license is downgraded to Pro. This can happen several times daily.
One device was licensed using corporate Enterprise MAK code and was downgraded to Pro inside 2 hours ruling out KMS as point of failure.
No errors re events 12288-12290 in application logs

Windows for business | Windows Client for IT Pros | User experience | Other
{count} votes

3 answers

Sort by: Most helpful
  1. Teemo Tang 11,471 Reputation points
    2021-05-31T01:49:32.537+00:00

    An issue has been identified with Hybrid Azure AD joined devices that have enabled multi-factor authentication (MFA). If a user signs into a device using their Active Directory account and MFA is enabled, the device will not successfully upgrade to their Windows Enterprise subscription.
    To resolve this issue:
    If the device is running Windows 10, version 1703, 1709, or 1803, the user must either sign in with an Azure AD account, or you must disable MFA for this user during the 30-day polling period and renewal.
    If the device is running Windows 10, version 1809 or later:
    Windows 10, version 1809 must be updated with KB4497934. Later versions of Windows 10 automatically include this patch.
    When the user signs in on a Hybrid Azure AD joined device with MFA enabled, a notification will indicate that there is a problem. Click the notification and then click Fix now to step through the subscription activation process

    Source:
    https://learn.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation#multi-factor-authentication

    Also check this similar case:
    Windows 10 Professional Hybrid Azure AD joined will not update to Enterprise when license assigned - Microsoft Q&A
    https://learn.microsoft.com/en-us/answers/questions/29465/windows-10-professional-hybrid-azure-ad-joined-wil.html

    -------------------------------------------------------------------------------------

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  2. Tom Speirs 11 Reputation points
    2021-05-31T15:42:34.713+00:00

    No notification in these cases.
    It would appear the same issue in https://learn.microsoft.com/en-us/answers/questions/29465/windows-10-professional-hybrid-azure-ad-joined-wil.html was never resolved.


  3. toca poca 1 Reputation point
    2021-11-24T12:33:44.043+00:00

    Hi Tom,

    Did you ever get this resolved; im having the exact same issue

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.