0x8007202FA constraint violation occurred. (DirectoryServicesCOMException)

How to fix it

See the Intune Connector for Active Directory guidance in the Windows Autopilot troubleshooting FAQ for the mitigation.

Find it on the device

Collect the Autopilot diagnostics on the device (press Shift + F10 during OOBE for a command prompt), then look for the code:

1
2
3mdmdiagnosticstool.exe -area "Autopilot;TPM" -cab C:\Temp\autopilot.cab
Get-WinEvent -LogName "Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Autopilot" -MaxEvents 200 |
    Where-Object Message -match "0x8007202F" | Format-List TimeCreated, Id, Message

Other autopilot errors

• 0x80180022 Autopilot device enrollment failed with error HRESULT = 0x80180022
• 0x80180014 Enrollment blocked for AP device by SDM One Time Limit Check (DeviceNotSupported)
• 0x80070774 Something went wrong... error code 80070774
• 0x800705B4 Securing your hardware (Failed: 0x800705b4)
• 0x801C03EA Registering your device for mobile management (Failed: 3, 0x801C03EA)
• 0x81039001 E_AUTOPILOT_CLIENT_TPM_MAX_ATTESTATION_RETRY_EXCEEDED
• 0x81039023
• 0x81039024
• 0x80070490
• 0xC1036501

Search all 116 codes →