question

SaurabhSharma-3270 avatar image
0 Votes"
SaurabhSharma-3270 asked LuDaiMSFT-0289 answered

Auto MDM Enroll: Failed (Unknown Win32 Error code: 0xcaa10001)

Hello,

I am getting below error on a few Windows 10 machine while Auto Enrollment

Issue:- Auto MDM Enroll: Failed (Unknown Win32 Error code: 0xcaa10001)

Note:- We have enabled co-management from SCCM and deployed GPO as well. Maximum devices have been enrolled successfully. only 10% of machines are getting this error.

Windows build:- 1709

@amanpreetsingh-msft Kindly help to fix this issue.

Regards,
Saurabh Sharma

mem-intune-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RahulJindal-2267 avatar image
0 Votes"
RahulJindal-2267 answered RahulJindal-2267 commented

I am not familiar with that specific error but you can check for a couple of things-
1. Are the devices registered in AAD already?
2. Is MFA enabled for the users of the devices in question?

You should also review the logs in event viewer.

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @RahulJindal-2267 , yes the device is registered with AAD and we are using the Co-Management feature to enroll a device in Intune.

0 Votes 0 ·

That could be the problem. If a device is already registered in AAD then hybrid join will most certainly fail. If I recall correctly this issue was fixed in Windows 10 1809 onwards. Delete the object and try again.

0 Votes 0 ·

Hi Rahul,

do you want me to delete Azure AD registered/Hybrid devices from Azure AD and then check Intune Enrollment status?

Regards,
Saurabh

0 Votes 0 ·
Show more comments
LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered

@SaurabhSharma-3270 Thanks for posting in our Q&A.

As I am known, co-management and GPO enrollment are different enrollment methods. So, it is suggested to just use one of these method.

I agree with RahuJindal, but this issue was fixed in windows 10 1803. Let me add a little information from the official article.
https://docs.microsoft.com/en-us/mem/intune/enrollment/device-enrollment#windows-enrollment-methods

If there is anything update, feel free to let us know.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered

Also, keep in mind that 1709 and 1803 are long, long out of support. You really should upgrade these devices to supported versions of Win 10 before going any further. As of last week, that means 1909+ (1903+ if you are running enterprise although it doesn't make sense to upgrade to just 1903).

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SaurabhSharma-3270 avatar image
0 Votes"
SaurabhSharma-3270 answered

97158-image.png



Above is the configuration manager baseline screenshot. hope it will help to figure out the issue.


image.png (182.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered

@SaurabhSharma-3270 Please understand that for such kind of issue, the error message is not enough to analyze and find the root cause, we may need more logs to analyze the whole process. It is better to create an online support ticket to handle this issue more effectively. It is free. Here is the online support link.
https://docs.microsoft.com/en-us/mem/intune/fundamentals/get-support

Hope this issue will be solved as soon as possible.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.