← cd ~/intune-errors
// intune-errors · Enrollment
0x801C03F2DSREG_E_DIRECTORY_FAILURE
Microsoft Entra hybrid join failed with a DirectoryError, typically "The public key user certificate is not found on the device object". The device object is missing in Entra ID or its userCertificate attribute is not populated.
| Hex | 0x801C03F2 |
|---|---|
| Decimal | -2145647630 (unsigned 2149319666) |
| Area | Enrollment |
How to fix it
Make sure the userCertificate attribute is populated on the on-premises computer object and synced. If missing, run dsregcmd /leave, delete the MS-Organization-Access certificate, restart, then run a delta sync.
Find it on the device
Enrolment errors are logged in Event Viewer under Applications and Services Logs › Microsoft › Windows › DeviceManagement-Enterprise-Diagnostics-Provider › Admin:
Get-WinEvent -LogName "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin" -MaxEvents 200 |
Where-Object Message -match "0x801C03F2" |
Format-List TimeCreated, Id, MessageOther enrollment errors
- 0x8018000A The device is already enrolled.
- 0x8007064C The machine is already enrolled.
- 0x80180026 Something went wrong. Confirm you are using the correct sign-in information...
- 0x8018002B Auto MDM Enroll: Failed (Event ID 76)
- 0x80180003 This user is not authorized to enroll.
- 0x801C0003 This user is not authorized to enroll.
- 0x80180018 Something went wrong.
- 0x80180002 MENROLL_E_DEVICE_AUTHENTICATION_ERROR
- 0x80180001 MENROLL_E_DEVICE_MESSAGE_FORMAT_ERROR
- 0x80180004 MENROLL_E_DEVICE_CERTIFCATEREQUEST_ERROR