Hey guys, I was able to resolve this issue, by creating a enterprise app with a redirect URI for the company store. I'll list the directions.
I went to azure portal -> Azure active directory -> App Registration (Preview)
- New Registration
- Name what ever (I used Company Portal)
- Accounts in this organization only (Didn't change)
- IMPORTANT part add a Redirect URI = https://microsoft.AAD.BrokerPlugin/Microsoft.CompanyPortal
- Register the application
After I did this I did not have the issue observed. Our tenet is GPO AAD hybrid join + GPO MDM enrollment
Specifically I found AAD BrokerPlugin errors in the event log and it lend me to this fix.
I hope it helps some of you. The experience for us just testing the deployment was very frustrating.
When I compared my tenet to a tenet NOT having this issue it appears the apps registrations where their even though the Global Admin had not created them, so maybe for some tenets its breaking or not getting created as it should be.