Failed to enroll with RegisterDeviceWithManagementUsingAADDeviceCredentials with error code 0x80192ee2.

Question

Failed to enroll with RegisterDeviceWithManagementUsingAADDeviceCredentials with error code 0x80192ee2.

Vivak Hangloo 91

We have configured co-management , enabled clinet settings in SCCM 2002 to Auto-enroll Pilot colelction devices
However i see the following error in the comanagementhandler.log

Any suggestion??

Machine is Hybrid AD joined
Internet access is working fine of the machine

Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2020-08-06T02:26:33.213+00:00
To clarify our issue, please check the following information:

Check if there's any GPO which configured for MDM enrollment assigned to this device.

Could you let us know how many devices are affected? What are the affected windows version?

Is there any device enrolled successfully?

What is the result when running "dsregcmd /status"?

Note: If there's any privacy information existing when we collect the information, please hide it.
Vivak Hangloo 91 Reputation points

2020-08-08T19:27:52.837+00:00
No GPO configured, co-managedmt is enabled with SCCM client settings for a coolection where the machine is part of. I have 4 machine in there . 2 show co-manged but other 2 has the error as asked in the question.

i have a pilot collection in SCCM with 4 Mahines , 2 machines have this error

Yes , 2 devices show enrolled . I notices there are 2 entries in Intune portal for each devices which is enrolled. On entry shows Managed bu congigMgr and other shows Co-managed. Any idea why 2 entries show for same machine.

For working and non-working device dsregcmd /status

AzureAdJoined : YES EnterpriseJoined : NO DomainJoined : YES DomainName : ABC AzureAdPrt : YES
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2020-08-10T08:25:47.967+00:00

Hi,

For the device with 2 record, one managed by ConfigMgr and the other is co-management. These days, I have built a co-management environment. I find when I set "Pilot Intune" under workloads, I find the devices auto-enroll into Intune will generate two records. The same phenomenon as yours. it seems to be by design. After changing the workloads to Intune, only the record with "co-management" will be kept.

For other 2 devices which are failed to enroll, For the status provided, it is OK. Please also check if the windows version is the same as the other two working devices. On the other hand, go to event viewer->Applications and Services Logs->Microsoft->Windows->DeviceManagement-Enterprise-diagnostics-Provider->Admin to check if there's any error there. And at the same time, check if there's any error under Applications and Services Logs->Microsoft->Windows->AAD.
Jason Sandys 31,411 Reputation points Microsoft Employee Moderator

2020-08-10T18:19:19.117+00:00

Have you installed the HFRU for 2002?
Have you been through the article I linked to in my other response?
Have you validated connectivity from the system experiencing issues to the Intune endpoint URLs?
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2020-09-10T02:14:54.847+00:00

How's everything going? I am writing to see if there's any update on our issue. If there's anything we can help, feel free to let us know.

1 answer

Your answer

Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2020-08-06T02:26:33.213+00:00

To clarify our issue, please check the following information:

Check if there's any GPO which configured for MDM enrollment assigned to this device.

Could you let us know how many devices are affected? What are the affected windows version?

Is there any device enrolled successfully?

What is the result when running "dsregcmd /status"?

Note: If there's any privacy information existing when we collect the information, please hide it.
Vivak Hangloo 91 Reputation points

2020-08-08T19:27:52.837+00:00

No GPO configured, co-managedmt is enabled with SCCM client settings for a coolection where the machine is part of. I have 4 machine in there . 2 show co-manged but other 2 has the error as asked in the question.

i have a pilot collection in SCCM with 4 Mahines , 2 machines have this error

Yes , 2 devices show enrolled . I notices there are 2 entries in Intune portal for each devices which is enrolled. On entry shows Managed bu congigMgr and other shows Co-managed. Any idea why 2 entries show for same machine.

For working and non-working device dsregcmd /status

AzureAdJoined : YES EnterpriseJoined : NO DomainJoined : YES DomainName : ABC AzureAdPrt : YES
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2020-08-10T08:25:47.967+00:00

Hi,

For the device with 2 record, one managed by ConfigMgr and the other is co-management. These days, I have built a co-management environment. I find when I set "Pilot Intune" under workloads, I find the devices auto-enroll into Intune will generate two records. The same phenomenon as yours. it seems to be by design. After changing the workloads to Intune, only the record with "co-management" will be kept.

For other 2 devices which are failed to enroll, For the status provided, it is OK. Please also check if the windows version is the same as the other two working devices. On the other hand, go to event viewer->Applications and Services Logs->Microsoft->Windows->DeviceManagement-Enterprise-diagnostics-Provider->Admin to check if there's any error there. And at the same time, check if there's any error under Applications and Services Logs->Microsoft->Windows->AAD.
Jason Sandys 31,411 Reputation points Microsoft Employee Moderator

2020-08-10T18:19:19.117+00:00

Have you installed the HFRU for 2002?
Have you been through the article I linked to in my other response?
Have you validated connectivity from the system experiencing issues to the Intune endpoint URLs?
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2020-09-10T02:14:54.847+00:00

How's everything going? I am writing to see if there's any update on our issue. If there's anything we can help, feel free to let us know.

Answer 1

Jason Sandys 31,411 Microsoft Employee Moderator

Have you reviewed https://learn.microsoft.com/en-us/troubleshoot/mem/intune/troubleshoot-co-management-auto-enrolling?

HarshVM 0 Reputation points

2023-10-16T21:49:42.8366667+00:00

Same issue facing. We have Azure Persistent vdis which was co managed and taking mde policies from Intune. But suddenly machines are showing in Intune configmgr and seeing error in logs Failed to enroll with RegisterDeviceWithManagementUsingAADDeviceCredentials with error code 0x80192ee2. We use co managed in sccm not via gpo.also checked device is showing clientid aad token.

Share via

Failed to enroll with RegisterDeviceWithManagementUsingAADDeviceCredentials with error code 0x80192ee2.

1 answer

Your answer