We are in the process of rolling out a new SOE and using Autopilot and Intune to do it.
For no apparent reason, machines will get caught in a boot loop. The only entry that shows is logged as a User32 event in System logs saying that the NT AUTHORITY\SYSTEM initiated a shutdown with the shtudown.exe process. Reason Code: 0x800000ff
For a while, we thought it was the SCCM client install that was triggering the reboot as disabling that process stopped the reboots on the machines that were rebooting, as they also started the ccmrestart process. We have since disabled and removed that install.
We thought it may have been something with the Intune client however from the IntuneManagementExtension log, for the period that the machine was rebooting, the service never got a chance to start. The service stopped before the machine rebooted, and then the next entry was a few hours later after the reboots stopped.
All machines are pulling the same settings from the same GPOs and programs, yet appears to be no direct link or cause to why one machine will boot loop and another not.
Any help with a direction and logs to dig into would be great.