Windows MAM Enrollment fails with Azure AD, Intune and Cloud based MAM enroll service

Question

question

VijeshKumar-4239 asked Apr 22, '22 Crystal-MSFT commented Apr 27, '22

Windows MAM Enrollment fails with Azure AD, Intune and Cloud based MAM enroll service

Steps tried:

Enabled Microsoft Intune in Azure AD -> Mobility (MDM and MAM)
Configured MAM terms of use URL and MAM discovery URL to cloud-based MAM enrollment service
Intune license is available
Enrolled a windows 10 and 11 endpoint using Access work or school -> Connect
Accepted terms of use (from cloud-based service)
Enrollment request from windows device with RequestSecurityToken is received
Enrollment RequestSecurityTokenResponse is sent with WAP
Access work or school -> connect action fails with error code 80070002, The system cannot find the file specified.

Found below events logged:
DeviceManagement-Enterprise-Diagnostics-Provider:
Info: MDM Enroll: Certificate enrollment request sent successfully.
Info: MDM Enroll: Certificate enrollment response parsed successfully.
Info: MDM Enroll: OMA-DM client configuration succeeds.
Error: MDM Enroll: Provisioning failed. Result: (The system cannot find the file specified.).

Checked timestamp and installed windows updates, but the issue is not resolved. I could notice in Azure AD, that the device is enrolled as Azure AD registered (BYOD).

Please help!

windows-11 mem-intune-enrollment mem-intune-application-management

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-04-25T01:21:35.36Z

Crystal-MSFT answered Apr 25, '22 Crystal-MSFT commented Apr 27, '22

@VijeshKumar-4239, From your description, it seems you are configure windows auto-enroll to MAM. If there's any misunderstanding, please let us know.

For the error code, it shows the file cannot find, Firstly, please check if the MAM discovery URL we configure is "https://wip.mam.manage.microsoft.com/Enroll".

Meanwhile, to make auto -enroll work, please also make sure the user is with Azure Active Directory Premium license is assigned.
https://docs.microsoft.com/en-us/mem/intune/enrollment/quickstart-setup-auto-enrollment

Please check the above information and if there's any update, feel free to let us know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

image.png (39.1 KiB)

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VijeshKumar-4239 · Apr 26 at 02:47 PM

Thanks, @Crystal-MSFT!

I am using Azure AD premium P2 license and I have Intune subscription.

I have created a MAM enroll service and so the discovery URL is pointing to that service instead of the suggested one.

As I mentioned above, the enrollment request is sent to the MAM service, and the response is received as well. But device is reporting Provisioning failed error as above. Please see the sequence of events from the device:

DeviceManagement-Enterprise-Diagnostics-Provider:
Info: MDM Enroll: Certificate enrollment request sent successfully.
Info: MDM Enroll: Certificate enrollment response parsed successfully.
Info: MDM Enroll: OMA-DM client configuration succeeds.
Error: MDM Enroll: Provisioning failed. Result: (The system cannot find the file specified.).

How to debug and troubleshoot this error?

0 ·

Crystal-MSFT VijeshKumar-4239 · Apr 27 at 03:03 AM

@VijeshKumar-4239, For the custom MAM service, I am not familiar. But you can open case which is free to contact our support to get more help. Here is a link with the steps to open case for the reference.
https://docs.microsoft.com/en-us/mem/get-support

Thanks for the understanding.

1 ·

question