Auto MDM Enroll: Device Credential (0x1), Failed (Unknown Win32 Error code: 0x8018002b

Jason Mabry 1 Reputation point
2020-10-21T15:34:18.983+00:00

We have a lab of computers that uses a generic AD account to sign in. This user is not in an Azure AD synced OU, so a User Credential will not work in this case. We would like to get these devices auto enrolled in Intune/Endpoint Manager, however the enrollment task fails with the error above.

When running dsregcmd /status, the TenantName, and MdmUrl values are all blank. TenantId is populated and is the correct TenantID. The devices are all Hybrid Joined.

Any advice as to how to troubleshoot or resolve this error?

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,785 questions
Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,303 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,666 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Crystal-MSFT 45,656 Reputation points Microsoft Vendor
    2020-10-22T02:01:10.927+00:00

    @Jason Mabry For Hybrid Azure AD joined device to enrolled into intune, we need to make sure the user account is synced to Azure AD and also we have Azure AD Premium and Microsoft Intune License assigned. Because the enrollment process starts in the background once we sign in to the device with our Azure AD account. We can see more details in the following link:
    https://video2.skills-academy.com/en-us/mem/intune/enrollment/windows-enroll
    https://video2.skills-academy.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy

    Hope it can help.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments
  2. Jason Mabry 1 Reputation point
    2020-10-22T13:38:55.897+00:00

    Thank you for the reply, @Crystal-MSFT !

    We are trying to use a Device Credential.

    The user is synced, but it's a special AD account, with no password, used strictly for shared lab access. We tried using a User Credential, but a check of dsregcmd /status does not show the user as being a valid AAD User. The user is licensed for Intune and is configured as a Device Enrollment Manager. The MDM user scope is set to All and the MAM user scope is set to None.

    We are using Device-based licenses for Office, and were really wanting to enroll these using the Device Credential.

    Is this possible?