question

Kitaab-8535 avatar image
0 Votes"
Kitaab-8535 asked Crystal-MSFT commented

Failed to enroll with RegisterDeviceWithManagementUsingAADDeviceCredentials with error code 0x80192ee2.

We have configured co-management , enabled clinet settings in SCCM 2002 to Auto-enroll Pilot colelction devices
However i see the following error in the comanagementhandler.log

Failed to enroll with RegisterDeviceWithManagementUsingAADDeviceCredentials with error code 0x80192ee2.

Any suggestion??

Machine is Hybrid AD joined
Internet access is working fine of the machine

mem-intune-enrollment
· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

To clarify our issue, please check the following information:
1. Check if there's any GPO which configured for MDM enrollment assigned to this device.
2. Could you let us know how many devices are affected? What are the affected windows version?
3. Is there any device enrolled successfully?
4. What is the result when running "dsregcmd /status"?

Note: If there's any privacy information existing when we collect the information, please hide it.

0 Votes 0 ·

No GPO configured, co-managedmt is enabled with SCCM client settings for a coolection where the machine is part of. I have 4 machine in there . 2 show co-manged but other 2 has the error as asked in the question.

i have a pilot collection in SCCM with 4 Mahines , 2 machines have this error

Yes , 2 devices show enrolled . I notices there are 2 entries in Intune portal for each devices which is enrolled. On entry shows Managed bu congigMgr and other shows Co-managed. Any idea why 2 entries show for same machine.

For working and non-working device dsregcmd /status

          AzureAdJoined : YES
       EnterpriseJoined : NO
           DomainJoined : YES
             DomainName : ABC

             AzureAdPrt : YES










0 Votes 0 ·

Hi,

For the device with 2 record, one managed by ConfigMgr and the other is co-management. These days, I have built a co-management environment. I find when I set "Pilot Intune" under workloads, I find the devices auto-enroll into Intune will generate two records. The same phenomenon as yours. it seems to be by design. After changing the workloads to Intune, only the record with "co-management" will be kept.

For other 2 devices which are failed to enroll, For the status provided, it is OK. Please also check if the windows version is the same as the other two working devices. On the other hand, go to event viewer->Applications and Services Logs->Microsoft->Windows->DeviceManagement-Enterprise-diagnostics-Provider->Admin to check if there's any error there. And at the same time, check if there's any error under Applications and Services Logs->Microsoft->Windows->AAD.

0 Votes 0 ·
Show more comments

Have you installed the HFRU for 2002?
Have you been through the article I linked to in my other response?
Have you validated connectivity from the system experiencing issues to the Intune endpoint URLs?

0 Votes 0 ·

1 Answer

Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.