windows configuration designer, Bulk token retrieval failed bad request when request BPRT

James Chan 56 Reputation points
2022-08-11T03:46:32.883+00:00

Hi,

Environment:
windows 10 21H2, ADK version 10.1.19041.1, internet accessible

it was working this May/2022. but now Aug/2022wanna to renew the BPRT, get the error.

What I do:
open Windows Configuration designer (Start-->windows kits --> windows imaging and configuration designer)
create "provision desktop devices" -->step one and two all pass, step 3 "Account management" select "Enroll in Azure AD"--> keep the default date no change (30 days) -->
click "Get Bulk Token" -->pop up a login window -->using the same account (Azure global admin and Intune admin) as last time to retrieve it, get error message "Bulk token retrieval failed bad request"

What I check or test:
try other admin account get the same error.
we have unlimited setting on the "max number of devices per user" in Azure-->device.
the accounts we use have permission to add device to Azure AD
Google for some article but no fix available

If MS expert or who has the experience before please advise, thanks

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,619 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,336 questions
{count} votes

5 answers

Sort by: Most helpful
  1. James Chan 56 Reputation points
    2022-12-05T21:16:19.797+00:00

    Hi all,

    thanks to everyone who ever posted your ideas here.

    I have got the answer from MS support even it takes 2 months in communication in emails.
    all working fine now.

    The fix is to add keys below, then reboot.

    o HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft.NETFramework\v2.0.50727
    o "SystemDefaultTlsVersions": 00000001
    o "SchUseStrongCrypto": 00000001
    o HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft.NETFramework\v4.0.30319
    o "SystemDefaultTlsVersions": 00000001
    o "SchUseStrongCrypto": 00000001

    o HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft.NETFramework\v2.0.50727
    o "SystemDefaultTlsVersions": dword:00000001
    o "SchUseStrongCrypto": dword:00000001
    o HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft.NETFramework\v4.0.30319
    o "SystemDefaultTlsVersions": dword:00000001
    o "SchUseStrongCrypto": dword:00000001

    3 people found this answer helpful.

  2. Nicholas Miller 6 Reputation points
    2023-01-03T13:59:59.367+00:00

    As of 1/3/2023 this is still a valid answer to the issue.

    1 person found this answer helpful.
    0 comments No comments

  3. Karol Kula 20 Reputation points
    2023-09-12T12:39:54.7133333+00:00

    Try to checkmark this:
    User's image

    It helps me solve this problem.

    1 person found this answer helpful.
    0 comments No comments

  4. Limitless Technology 39,356 Reputation points
    2022-08-11T14:49:54.083+00:00

    Hello

    I have faced the same issue before and it is fixed when I install the WCD from Windows ADK.
    https://learn.microsoft.com/en-us/windows-hardware/get-started/adk-install

    Please try to install the WCD from ADK and check if it can success.

    If the issue persist you may need to log a ticket with Azure AD Support included with your Subscription using the steps below:

    https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-troubleshooting-support-howto#how-to-open-a-support-ticket-for-azure-ad-in-the-azure-portal

    ----------------------------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept as answer--


  5. Christian Capellan 2 Reputation points
    2022-08-22T14:49:44.82+00:00

    I had the same issue and was able to fix it by installing a new version from the Microsoft store (2022.517.0.0).