← cd ~/intune-errors
// intune-errors · Enrollment
0xCAA2000CThe request requires user interaction. (interaction_required)
Logged in the Microsoft Entra ID Operational log when MFA blocks the token needed for automatic enrolment or MDM sync of a co-managed device (AADSTS50076).
| Hex | 0xCAA2000C |
|---|---|
| Decimal | -895352820 (unsigned 3399614476) |
| Area | Enrollment |
How to fix it
Remove per-user MFA enforcement or use Trusted IPs, or exclude the Microsoft Intune app (0000000a-0000-0000-c000-000000000000) from Conditional Access policies that require MFA.
Find it on the device
Enrolment errors are logged in Event Viewer under Applications and Services Logs › Microsoft › Windows › DeviceManagement-Enterprise-Diagnostics-Provider › Admin:
Get-WinEvent -LogName "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin" -MaxEvents 200 |
Where-Object Message -match "0xCAA2000C" |
Format-List TimeCreated, Id, MessageOther enrollment errors
- 0x8018000A The device is already enrolled.
- 0x8007064C The machine is already enrolled.
- 0x80180026 Something went wrong. Confirm you are using the correct sign-in information...
- 0x8018002B Auto MDM Enroll: Failed (Event ID 76)
- 0x80180003 This user is not authorized to enroll.
- 0x801C0003 This user is not authorized to enroll.
- 0x80180018 Something went wrong.
- 0x80180002 MENROLL_E_DEVICE_AUTHENTICATION_ERROR
- 0x80180001 MENROLL_E_DEVICE_MESSAGE_FORMAT_ERROR
- 0x80180004 MENROLL_E_DEVICE_CERTIFCATEREQUEST_ERROR