This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 42%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERI%3C/text%3E%3C/svg%3E)
Hi all.
Hope someone can help shed some light on this for me.
In Software Center under Compliance Status I now get the following error: Unable to Verify the status
It's a Windows 10 1909 and been struggling to update my 1909 machines for some time now. ( I know it's out of server )
They are Co-managed with Intune and on compliance policy's in SCCM but there are in Intune.
Has anyone seen this before?
Or have an idea as to where to look next?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 30%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
@RJudge-IT , From your description, I know the device is co-managed. And get error "GET_AAD_TOKEN_Error" when versify the compliance status. If there's any misunderstanding, please let us know.
For the error, it seems there's some issue to get AAD token. Given the situation, please run "dsregcmd /status" to see if the domainjoined, AzureAdJoined, AzureAdprt are all yes. Meanwhile please also see if there's any error there.
https://learn.microsoft.com/en-us/azure/active-directory/devices/troubleshoot-device-dsregcmd
As the error is with AAD, here, I have added tag "Azure-Active-Directory" to see if any AAD support will be included to help more on this for you.
Thanks for the understanding.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 75%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELJ%3C/text%3E%3C/svg%3E)
Did you ever get a solution to your issue? I've got a system that's having the same problem.
Jean-Marc
Hi RJudgeIT
Thanks for writing and we are happy to help you regarding this.
In the event that the Software Center client is in a non-functioning state, and needs to be installed:
Uninstall Existing Client
Open an elevated cmd prompt
Run the following commands:
cd C:\Windows\CCMSetup
ccmsetup.exe /uninstall
Under Task Manager, find and monitor the ccmexec process
Once ccmexec disappears, the application is finished uninstalling
(Re)install new client
Open Task Scheduler
Under the CAS folder, find and run ConfigMgr ClientHealth
This job will take a significant amount of time to complete (10-15 minutes)
Refresh the Task Scheduler window until the process states that it is completed successfully
--If the reply is helpful, please Upvote and Accept as answer--
So ran "dsregcmd /status" and my domainjoined = YES , AzureAdJoined =YES , AzureAdprt = NO
All of my colleagues got the same result.
But none of our other machines have the same GET_AAD_TOKEN_Error only 4 of my machines.
Is this a User or Machine problem or a SCCM Client error?
Thanks for adding the Tag in.
Just to add I have also recently changed the workload in the Cloud attached - Co-managed to Intune and have a compliance setting in Intune.
But not sure this is what I expected.
@RJudge-IT , Thanks for the reply.
From your description, I know we have move the compliance policy workload to Intune. We suggest to go to the device Side in Intune to ensure the configuration manager agent state is healthy and the compliance policy workload has switched to Intune successfully.
Meanwhile, in your desciption, I know all the AzureADprt are no, But the issue only affects 4 machines.As our compliance policy switch to Intune, could you check the compliance status of the affected device in both company portal and Intune portal to see if it shows correct.
@RJudge-IT , How's everything going? Did we have the opportunity to check the above information? If there's any update, feel free to let us know.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 78%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMN%3C/text%3E%3C/svg%3E)
I found a significant difference between using an elevated command prompt vs. non-admin user. Make sure you're not using an elevated command prompt.
Hi all
@Limitless Technology
I ran the uninstall and then waited about an hour and the reinstall the client then left the client to check back in to SCCM and sadly still got the same result.
After reaching out to contacts this appears normal for machines that are co-managed but really what a confirmation on this?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 45%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETS%3C/text%3E%3C/svg%3E)
Hi!
This problem started only when Service Stack update was installed after Patch tuesday in May. Several computers with patches older than May still report compliant. we have co management with compliance policy, Windows update to be managed by Intune. Its something to do with the SSU May 2022 Update