azureblog.co.uk
← cd ~/events
// events/107-taskscheduler · Intune MDM

Event ID 107Auto-enrolment task triggered

The 'Schedule created by enrollment client for automatically enrolling in MDM from Microsoft Entra ID' task was triggered.

LogMicrosoft-Windows-TaskScheduler/Operational
SourceMicrosoft-Windows-TaskScheduler
AreaIntune MDM

What to check

Shows the task ran, but not whether enrolment worked. Check DeviceManagement-Enterprise-Diagnostics-Provider events 75 and 76 for the result.

Find it with PowerShell

Run on the machine that logs it.

powershell2 lines
Get-WinEvent -FilterHashtable @{ LogName = 'Microsoft-Windows-TaskScheduler/Operational'; Id = 107 } -MaxEvents 50 |
    Format-List TimeCreated, Id, Message

Hunt for it in Sentinel or Log Analytics

This works once a data collection rule sends the Microsoft-Windows-TaskScheduler/Operational log to your workspace, where it lands in the Event table.

kql5 lines
Event
| where TimeGenerated > ago(7d)
| where EventLog == "Microsoft-Windows-TaskScheduler/Operational" and EventID == 107
| project TimeGenerated, Computer, Source, RenderedDescription
| order by TimeGenerated desc

Related Intune MDM events

Search all 123 event IDs →