← cd ~/intune-errors
// intune-errors · Enrollment
0x8018002AAuto MDM Enroll: Failed (Unknown Win32 Error code: 0x8018002a)
Microsoft Entra hybrid joined (co-managed) devices fail to auto-enrol because per-user MFA is set to Enforced, which stops the Configuration Manager client enrolling with the signed-in user's credentials.
| Hex | 0x8018002A |
|---|---|
| Decimal | -2145910742 (unsigned 2149056554) |
| Area | Enrollment |
How to fix it
Set per-user MFA to Enabled rather than Enforced, or temporarily bypass MFA during enrolment using Trusted IPs.
Find it on the device
Enrolment errors are logged in Event Viewer under Applications and Services Logs › Microsoft › Windows › DeviceManagement-Enterprise-Diagnostics-Provider › Admin:
Get-WinEvent -LogName "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin" -MaxEvents 200 |
Where-Object Message -match "0x8018002A" |
Format-List TimeCreated, Id, MessageOther enrollment errors
- 0x8018000A The device is already enrolled.
- 0x8007064C The machine is already enrolled.
- 0x80180026 Something went wrong. Confirm you are using the correct sign-in information...
- 0x8018002B Auto MDM Enroll: Failed (Event ID 76)
- 0x80180003 This user is not authorized to enroll.
- 0x801C0003 This user is not authorized to enroll.
- 0x80180018 Something went wrong.
- 0x80180002 MENROLL_E_DEVICE_AUTHENTICATION_ERROR
- 0x80180001 MENROLL_E_DEVICE_MESSAGE_FORMAT_ERROR
- 0x80180004 MENROLL_E_DEVICE_CERTIFCATEREQUEST_ERROR