Windows Information Protection Error 0x807c0008

I set up WIP per the docs here https://docs.microsoft.com/en-us/windows/threat-protection/windows-information-protection/create-wip-policy-using-intune-azure  and assigned, but the WIP Policy will not apply.

Etw error message is 

MDM ConfigurationManager: Command failure status. Configuration Source ID: (A2B94A25-C124-4BF8-89F8-0A8839FD3D14), Enrollment Name: (MDMFull), Provider Name: (EnterpriseDataProtection), Command Type: (SetValue: from Replace), CSP URI: (./Vendor/MSFT/EnterpriseDataProtection/Settings/EDPEnforcementLevel), Result: (Unknown Win32 Error code: 0x807c0008).

 I am not doing anything fancy, just allowing all recommended apps and applying for SP.

Thanks,

Sol