Domain Join 80070774

Thomas Black 1 Reputation point
2021-06-20T18:41:18.473+00:00

Hello
Thanks for looking at my post - Newbie learning intune

My Environment
Running VMS on Exsi host
Everything seems to be ok with my on-premise environment and the connection to Azure

The Story so far
Set up a profile to enroll devices without on-prem domain join

The issue
Set up a new compliance profile to enable domain join and applied that policy to my device group in Azure AD
I have followed all of the guides from the Microsoft site, I reached my work and spent hours looking over the internet - but my own knowledge of intune is limited - hence my post
Getting error 8007044A something went wrong.
looked at my IntuneManagementExtension log attached, I not sure what to do next

Failed to get AAD token. len = 34 using client id fc0f3af4-6835-4174-b806-f7db311fd2f3 and resource id 26a4ae64-5862-427f-a9b0-044e62572a4f, errorCode = 3399548929 IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
Need user interaction to continue. IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
AAD User check is failed, exception is Intune Management Extension Error.
Exception: Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.TokenAquireException: Attempt to get token, but failed.
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.IntuneTokenManager.<GetTokenInternalAsync>d__41.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.IntuneTokenManager.<GetTokenForNewRequestUsingDeviceCheckInAppId>d__40.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<<IsAADUserInternal>b__17_0>d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.GetResult()
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.ImpersonateHelper.<DoActionWithImpersonation>d__4.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<IsAADUserInternal>d__17.MoveNext(), session is 1 IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
AAD User check using device check in app is failed, now fallback to the Graph audience. ex = Intune Management Extension Error.
Exception: Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.TokenAquireException: Attempt to get token, but failed.
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<IsAADUserInternal>d__17.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<IsAADUser>d__15.MoveNext() IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
starting impersonation, session id = 1 IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
After impersonation: DESKTOP-3NMGKE6\defaultuser0 IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
[TokenManager::GetTokenForNewRequestAsync] IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
provider id = https://login.microsoft.com, authority = organizations IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
get provider, provider name = Work or school account IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
Failed to get AAD token. len = 34 using client id fc0f3af4-6835-4174-b806-f7db311fd2f3 and resource id 00000002-0000-0000-C000-000000000000, errorCode = 3399548929 IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
Need user interaction to continue. IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
AAD User check is failed, exception is Intune Management Extension Error.
Exception: Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.TokenAquireException: Attempt to get token, but failed.
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.IntuneTokenManager.<GetTokenInternalAsync>d__41.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.IntuneTokenManager.<GetTokenForNewRequestAsync>d__39.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<<IsAADUserInternal>b__17_1>d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.GetResult()
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.ImpersonateHelper.<DoActionWithImpersonation>d__4.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<IsAADUserInternal>d__17.MoveNext(), session is 1 IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)

Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,239 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,274 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Nick Hogarth 3,436 Reputation points
    2021-06-20T22:11:14.033+00:00

    What do you mean "Set up a profile to enroll devices without on-prem domain join"? - Is this Autopilot with Azure AD Join? What type of profile did you exactly configure?

    "Set up a new compliance profile to enable domain join and applied that policy to my device group in Azure AD" - Do you mean a Device Configuration domain join profile? If so, that is meant to be used with Autopilot for Hybrid Azure AD Join (to join the on-prem domain).

    How are you trying to enroll the devices exactly? What version of Windows 10?

    0 comments No comments

  2. Jarvis Sun-MSFT 10,091 Reputation points Microsoft Vendor
    2021-06-21T06:52:52.543+00:00

    @Thomas Black Thanks for posting in our Q&A.

    For the error code “80070774” , it can mean a few different things. like “Intune never found a domain join policy” and “Intune failed to create a device object”. We can check out the ODJ Connector event log to see if there was even a request received. More details please refer to the following link:
    https://learn.microsoft.com/en-us/troubleshoot/mem/intune/troubleshoot-windows-enrollment-errors#something-went-wrong-error-code-80070774

    For user driven hybrid Azure AD join, some requirements need to be checked before next step.
    https://learn.microsoft.com/en-us/mem/autopilot/user-driven#requirements-1


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments