azureblog.co.uk
← cd ~/events
// events/102 · Intune MDM

Event ID 102Auto-enrolment task completed

The auto-enrolment task finished. It is logged whether or not enrolment succeeded.

LogMicrosoft-Windows-TaskScheduler/Operational
SourceMicrosoft-Windows-TaskScheduler
AreaIntune MDM

What to check

Check events 75 and 76 in the MDM Admin log for the actual outcome.

Find it with PowerShell

Run on the machine that logs it.

powershell2 lines
Get-WinEvent -FilterHashtable @{ LogName = 'Microsoft-Windows-TaskScheduler/Operational'; Id = 102 } -MaxEvents 50 |
    Format-List TimeCreated, Id, Message

Hunt for it in Sentinel or Log Analytics

This works once a data collection rule sends the Microsoft-Windows-TaskScheduler/Operational log to your workspace, where it lands in the Event table.

kql5 lines
Event
| where TimeGenerated > ago(7d)
| where EventLog == "Microsoft-Windows-TaskScheduler/Operational" and EventID == 102
| project TimeGenerated, Computer, Source, RenderedDescription
| order by TimeGenerated desc

Related Intune MDM events

Search all 123 event IDs →