question

ThomasBlack-9107 avatar image
0 Votes"
ThomasBlack-9107 asked JarvisSun-MSFT answered

Domain Join 80070774

Hello
Thanks for looking at my post - Newbie learning intune

My Environment
Running VMS on Exsi host
Everything seems to be ok with my on-premise environment and the connection to Azure

The Story so far
Set up a profile to enroll devices without on-prem domain join

The issue
Set up a new compliance profile to enable domain join and applied that policy to my device group in Azure AD
I have followed all of the guides from the Microsoft site, I reached my work and spent hours looking over the internet - but my own knowledge of intune is limited - hence my post
Getting error 8007044A something went wrong.
looked at my IntuneManagementExtension log attached, I not sure what to do next

Failed to get AAD token. len = 34 using client id fc0f3af4-6835-4174-b806-f7db311fd2f3 and resource id 26a4ae64-5862-427f-a9b0-044e62572a4f, errorCode = 3399548929 IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
Need user interaction to continue. IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
AAD User check is failed, exception is Intune Management Extension Error.
Exception: Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.TokenAquireException: Attempt to get token, but failed.
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.IntuneTokenManager.<GetTokenInternalAsync>d_41.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.IntuneTokenManager.<GetTokenForNewRequestUsingDeviceCheckInAppId>d
40.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<<IsAADUserInternal>b
17_0>d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.GetResult()
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.ImpersonateHelper.<DoActionWithImpersonation>d
4.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<IsAADUserInternal>d
17.MoveNext(), session is 1 IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
AAD User check using device check in app is failed, now fallback to the Graph audience. ex = Intune Management Extension Error.
Exception: Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.TokenAquireException: Attempt to get token, but failed.
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<IsAADUserInternal>d
17.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<IsAADUser>d
15.MoveNext() IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
starting impersonation, session id = 1 IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
After impersonation: DESKTOP-3NMGKE6\defaultuser0 IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
[TokenManager::GetTokenForNewRequestAsync] IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
provider id = https://login.microsoft.com, authority = organizations IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
get provider, provider name = Work or school account IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
Failed to get AAD token. len = 34 using client id fc0f3af4-6835-4174-b806-f7db311fd2f3 and resource id 00000002-0000-0000-C000-000000000000, errorCode = 3399548929 IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
Need user interaction to continue. IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)
AAD User check is failed, exception is Intune Management Extension Error.
Exception: Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.TokenAquireException: Attempt to get token, but failed.
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.IntuneTokenManager.<GetTokenInternalAsync>d
41.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.IntuneTokenManager.<GetTokenForNewRequestAsync>d
39.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<<IsAADUserInternal>b
17_1>d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.GetResult()
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.ImpersonateHelper.<DoActionWithImpersonation>d
4.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<IsAADUserInternal>d
_17.MoveNext(), session is 1 IntuneManagementExtension 20/06/2021 16:25:24 17 (0x0011)

mem-intune-generalmem-intune-enrollment
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

NickHogarth-MVP avatar image
0 Votes"
NickHogarth-MVP answered

What do you mean "Set up a profile to enroll devices without on-prem domain join"? - Is this Autopilot with Azure AD Join? What type of profile did you exactly configure?

"Set up a new compliance profile to enable domain join and applied that policy to my device group in Azure AD" - Do you mean a Device Configuration domain join profile? If so, that is meant to be used with Autopilot for Hybrid Azure AD Join (to join the on-prem domain).

How are you trying to enroll the devices exactly? What version of Windows 10?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JarvisSun-MSFT avatar image
0 Votes"
JarvisSun-MSFT answered

@ThomasBlack-9107 Thanks for posting in our Q&A.

For the error code “80070774” , it can mean a few different things. like “Intune never found a domain join policy” and “Intune failed to create a device object”. We can check out the ODJ Connector event log to see if there was even a request received. More details please refer to the following link:
https://docs.microsoft.com/en-us/troubleshoot/mem/intune/troubleshoot-windows-enrollment-errors#something-went-wrong-error-code-80070774

For user driven hybrid Azure AD join, some requirements need to be checked before next step.
https://docs.microsoft.com/en-us/mem/autopilot/user-driven#requirements-1




If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.