Forum Discussion

StuartK73's avatar
StuartK73
Iron Contributor
Sep 10, 2019

Device Registered is Pending

Hi All

 

I have some Hybrid Azure AD Join W10 devices, auto enrolled in Intune via GPO however the Registered status equals pending.

 

MS docs state:

 

A device can also change from having a registered state to "Pending"

  • If a device is deleted and from Azure AD first and re-synchronized from on-premises AD.
  • If a device is removed from a sync scope on Azure AD Connect and added back.

In both cases, you must re-register the device manually on each of these devices. To review whether the device was previously registered, you can troubleshoot devices using the dsregcmd command.

 

Ref:

 

https://docs.microsoft.com/en-us/azure/active-directory/devices/faq

 

 

Can anyone elaborate on the "you must re-register the device manually on each of these devices"?

 

Info appreciated

4 Replies

  • SamiLamppu's avatar
    SamiLamppu
    Brass Contributor

    StuartK73 

     

    This worked for me:

     

    1. dsregcmd /debug /leave

    2. Confirmation from Azure AD that device object was removed

    3. Reboot machine

    4. Confirmation that the device had been trying to register itself again to Azure AD (AAD audit logs)

    5. Confirmation of device status from AAD (changed from pending to "registered with timestamp")

    6. dsregcmd /status (which should now have PRT included)

     

    Did steps above today and the device state was successfully changed. After those were done, I had to wait for the next Azure AD Connect sync cycle to change the device status in Azure AD (working in a managed environment).

    • EKG's avatar
      EKG
      Copper Contributor

      SamiLamppu 

      Hello Sami,

       

      I am facing the same problem and have tried the command "dsregcmd /debug /leave"and the device was removed from Azure AD but still it Show as Pending. Have checked the event logs and did not find any error. I thing which i noticed we have a .local domain will it have an affect as we have added a UPN suffix for our users.
      Any help would be appreciated!

  • ambarishrh's avatar
    ambarishrh
    Iron Contributor

    My guess is to use psexec to run cmd as system user and then execute the command dsregcmd /join /debug

     

    This should also give you more info about issues you might have with device enrollment

Resources