Forum Discussion

imyouradmin's avatar
imyouradmin
Copper Contributor
May 17, 2023

MDM Session: OMA-DM message failed to be sent. Result: (Unknown Win32 Error code: 0x80072efe).

I'm having an issue with some devices in our environment enrolling successfully into Intune.    Here is the lay of the land.    1. Devices are hybrid joined. 2. Using GPO to enforce auto-enrollm...
Intune
Mobile Application Management (MAM)
Mobile Device Management (MDM)
  • imyouradmin's avatar
    imyouradmin
    May 25, 2023

    We believe we figured this out. We are still monitoring it but we believe that SSL decryption was the cause of this. Even though the Microsoft articles say to not do it to https://device.login.microsoftonline.com we tried that with no success we had to exclude all Microsoft traffic from being decrypted on our firewall via a Dynamic List. Hope this helps someone out!

    Article in reference was https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-hybrid-azure-ad-join that mentioned just that one URL.

     

    We also prevented our PCs from being Azure AD Registered as Hybrid was our preferred method and we set the following registry key.

     

    HKLM\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin "BlockAADWorkplaceJoin"=dword:00000001

Rudy_Ooms_MVP's avatar
Rudy_Ooms_MVP
MVP
May 19, 2023
Sounds like a fun issue! 🙂 ... looking at the error it just tells you WININET_E_CONNECTION_ABORTED

If you could share logs, I could take a look at it...
imyouradmin's avatar
imyouradmin
Copper Contributor
May 19, 2023
Thanks for the reply!

Any specific logs you are wanting?
  • Rudy_Ooms_MVP's avatar
    Rudy_Ooms_MVP
    MVP
    May 19, 2023
    depends.... 🙂
    Try to sync the device and run this command (will fetch all logs... ms also uses it 🙂 )

    wget https://aka.ms/intuneps1 -outfile IntuneODCStandAlone.ps1
    powerShell -ExecutionPolicy Bypass -File .\IntuneODCStandAlone.ps1
    • imyouradmin's avatar
      imyouradmin
      Copper Contributor
      May 19, 2023
      Private message sent! Thanks!
    • imyouradmin's avatar
      imyouradmin
      Copper Contributor
      May 19, 2023

      Rudy_Ooms_MVP I'm working on getting the logs unfortunately people are actively using the computers so I will get it asap. 

       

      I do fine this interesting that they show up in Azure as a device with a MDM status:

       

      But in Intune it doesn't even show up as a device:

      You will have to trust me a little that the names are both correct. 

       

Resources