Intune device enrollment error 80070002 using Company Portal app for some users (Something went wrong. The system cannot find the file specified.)

Question

question

JesusRuiz-4462 asked Aug 5, '20 JesusRuiz-4462 commented Dec 30, '20

Intune device enrollment error 80070002 using Company Portal app for some users (Something went wrong. The system cannot find the file specified.)

We have 3 users (out of 200+) having this error on their workstations when enrolling their Windows 10 workstations in Intune:

This happens after they launch the Company Portal and login with our organization's Microsoft account and they click "Yes" on this screen:

The device shows up for the briefest of moments in the Intune Admin portal, but goes away once they click "Done" on the error. Doesn't show up as an enrollment error in the portal.

Details on our environment and the workstations:

OS: Windows 10 1903 (latest updates installed as part of the troubleshooting direct from Microsoft, no WSUS server)
AD: All workstations are added to an on-prem domain that is not connected to Azure AD, no AD-Connect setup done or planned (I can elaborate on why if needed or relevant to the error).
No SCCM in our environment.
Enrollment method: Local install of the Company Portal app from the Microsoft Store
End users are local administrators on their workstations.

I apologize in advance if I left something out, first time posting on here. I will add it as a reply/edit, whatever this forum allows. Thanks!

mem-intune-general mem-intune-enrollment

image.png (168.9 KiB)

image.png (100.6 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2020-08-06T01:00:38.107Z

Jason-MSFT answered Aug 6, '20 Jason-MSFT commented Aug 6, '20

That error code means file not found. Not sure exactly what that means in this context though.

Have you reviewed User Device Registration event log or run dsregcmd /status as described at https://docs.microsoft.com/en-us/azure/active-directory/devices/troubleshoot-hybrid-join-windows-current?

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JesusRuiz-4462 · Aug 06, 2020 at 04:56 PM

I am not attempting a hybrid join, but this might uncover some additional info that might help. I will get a hold of a user and run dsregcmd /status and review the User Device Registration even logs. Thanks!

0 ·

Jason-MSFT JesusRuiz-4462 · Aug 06, 2020 at 05:21 PM

Right, but the error shown above is specific to the Azure AD status of the system which is part of the process when enrolling into Intune.

0 ·

Answer 2 · 2020-08-06T02:52:06.293Z

CiciWu-MSFT answered Aug 6, '20 JesusRuiz-4462 commented Aug 6, '20

Please make sure the account is either an Intune service administrator, or a tenant administrator with the global administration permission, meanwhile, the account should have been assigned an Intune license.

Here are the links of Intune licensing and how to assign license:
https://docs.microsoft.com/en-us/mem/intune/fundamentals/licenses
https://docs.microsoft.com/en-us/mem/intune/fundamentals/licenses-assign

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jason-MSFT · Aug 06, 2020 at 03:19 PM

Please make sure the account is either an Intune service administrator, or a tenant administrator with the global administration permission

Why? This is not required to enroll a device in Intune.

0 ·

JesusRuiz-4462 · Aug 06, 2020 at 04:54 PM

The users in question are licensed with either an M365 E3 or an EMS E3, both of which include Intune. I even tried swapping licenses to see if that changed anything. And I agree with Jason, the end users do not need to have any elevated Azure or Intune level permissions to enroll their devices. All other users have been able to enroll. I expect this to be a workstation or user specific issue

0 ·

Answer 3 · 2020-12-30T05:30:07.197Z

paPushka-1225 answered Dec 30, '20 JesusRuiz-4462 commented Dec 30, '20

I have the same exact error, did you manage to fix it ?

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JesusRuiz-4462 · Dec 30, 2020 at 08:57 PM

No, Microsoft support said a hybrid join via GPO might work (not an option in our environment, since not every workstation is on-prem domain joined), and that otherwise, the workstation would have to have a fresh install of Win 10, which is the route we went.

0 ·

question