← cd ~/intune-errors
// intune-errors · Enrollment
0xCAA9001FIntegrated Windows authentication supported only in federation flow.
MDM enrolment of co-managed, hybrid joined devices fails because the Configuration Manager client tried integrated Windows authentication against Entra ID while the domain is not federated.
| Hex | 0xCAA9001F |
|---|---|
| Decimal | -894894049 (unsigned 3400073247) |
| Area | Enrollment |
How to fix it
Configure Azure Services for Cloud Management in Configuration Manager and enable both AD User Discovery and Microsoft Entra user Discovery for the users.
Find it on the device
Enrolment errors are logged in Event Viewer under Applications and Services Logs › Microsoft › Windows › DeviceManagement-Enterprise-Diagnostics-Provider › Admin:
Get-WinEvent -LogName "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin" -MaxEvents 200 |
Where-Object Message -match "0xCAA9001F" |
Format-List TimeCreated, Id, MessageOther enrollment errors
- 0x8018000A The device is already enrolled.
- 0x8007064C The machine is already enrolled.
- 0x80180026 Something went wrong. Confirm you are using the correct sign-in information...
- 0x8018002B Auto MDM Enroll: Failed (Event ID 76)
- 0x80180003 This user is not authorized to enroll.
- 0x801C0003 This user is not authorized to enroll.
- 0x80180018 Something went wrong.
- 0x80180002 MENROLL_E_DEVICE_AUTHENTICATION_ERROR
- 0x80180001 MENROLL_E_DEVICE_MESSAGE_FORMAT_ERROR
- 0x80180004 MENROLL_E_DEVICE_CERTIFCATEREQUEST_ERROR