Token acquisition Test : FAIL [0xcaa20003/0xcaa1000e] when running dsregcmd /status

Question

I am trying to troubleshoot Hybrid AD azure Join
when i run dsregcmd /status

I see this
+----------------------------------------------------------------------+
| Diagnostic Data |
+----------------------------------------------------------------------+

 Diagnostics Reference : www.microsoft.com/aadjerrors
          User Context : SYSTEM
           Client Time : 2020-07-04 02:29:12.000 UTC
  AD Connectivity Test : PASS
 AD Configuration Test : PASS
    DRS Discovery Test : PASS
 DRS Connectivity Test : PASS
Token acquisition Test : FAIL [0xcaa20003/0xcaa1000e]
 Fallback to Sync-Join : ENABLED

 Previous Registration : 2020-07-04 01:26:34.000 UTC
           Error Phase : pre-check
      Client ErrorCode : 0x1

+----------------------------------------------------------------------+
| Ngc Prerequisite Check |
+----------------------------------------------------------------------+

        IsDeviceJoined : NO
         IsUserAzureAD : NO
         PolicyEnabled : NO
      PostLogonEnabled : YES
        DeviceEligible : YES
    SessionIsNotRemote : YES
        CertEnrollment : none
          PreReqResult : WillNotProvision

Answer 1

Hi @Kitaab-8535,

Are you using Hybrid Azure AD join with a federated environment?

If yes, you could check the authentication logs in the federation server.

https://learn.microsoft.com/en-us/azure/active-directory/devices/troubleshoot-hybrid-join-windows-current#other-errors-1