Windows Intune known issue

%3CLINGO-SUB%20id%3D%22lingo-sub-2680828%22%20slang%3D%22en-US%22%3EWindows%20Intune%20known%20issue%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2680828%22%20slang%3D%22en-US%22%3E%3CP%3EOur%20company%20implement%20intune%20and%20used%20autopilot%20whiteglove%20to%20configure%20our%20employee's%20laptops%2C%20and%20there%20are%20several%20problems%20we%20faced%20recently%20and%20wondering%20is%20there%20any%20troubleshooting%20methods%2C%20any%20advice%20and%20feedback%20are%20welcome%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1.%20Randomly%20Intune%20Failure%20on%20Security%20policy%20on%20Account%20setup.%20When%20autopilot%20whiteglove%20proceeded%20to%20security%20policy%2C%20sometimes%20it%20will%20stuck%20at%20identifying%20status%20and%20go%20failure%20eventually.%20It%20usually%20happened%20after%20several%20days%20when%20the%20first%20part%20of%20intune(before%20clicked%20reseal%20on%20green%20screen)%20was%20finished%20successfully%3C%2FP%3E%3CP%3E2.%20Windows%20activation%20issue.%20This%20issue%20started%20from%20last%20week%20when%20users%20finished%20intune%20autopilot%20and%20started%20to%20work%20in%20few%20days.%20It%20will%20fix%20by%20windows%20activation%20troubleshooting%20eventually%20but%20still%20make%20people%20crazy.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22BestSumy_0-1629836583514.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F305433i3898E3EB956946A8%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22BestSumy_0-1629836583514.png%22%20alt%3D%22BestSumy_0-1629836583514.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2680828%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2681903%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Intune%20known%20issue%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2681903%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3E%3CBR%20%2F%3EAs%20you%20are%20mentioning%20the%20reseal%20button%20I%20guess%20you%20mean%20Autopilot%20white%20glove.%20THis%20phase%20is%20all%20about%20the%20user%20targetted%20apps%2Fsettings%20that%20are%20going%20to%20be%20installed%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20you%20want%20to%20read%20more%20about%20this%20whole%20process%20and%20how%20to%20maybe%20skip%20this%20phase%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fcall4cloud.nl%2F2021%2F06%2Fthose-magnificent-drivers-in-their-flying-microsoft-store-or-how-i-flew-from-the-enrolment-status-page-to-paris-in-25-hours-11-minutes%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fcall4cloud.nl%2F2021%2F06%2Fthose-magnificent-drivers-in-their-flying-microsoft-store-or-how-i-flew-from-the-enrolment-status-page-to-paris-in-25-hours-11-minutes%2F%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EAnd%20the%20activation...%20it%20also%20depends%20on%20which%20license%20the%20user%20has%2C%20like%20iwth%20business%20premium%20you%20are%20up%20for%20an%20upgrade%20from%20pro%20to%20business.%20(pro%20licence%20has%20to%20be%20valid)%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2681960%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Intune%20known%20issue%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2681960%22%20slang%3D%22en-US%22%3E%3CP%3EHello%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1136604%22%20target%3D%22_blank%22%3E%40BestSumy%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETroubleshooting%20autopilot%20involves%20a%20lot%20of%20steps..%20here%20are%20a%20few%20to%20kick%20things%20off.%20Let%20me%20know%20if%20you%20require%20further%20help%20and%20I%20will%20happily%20assist%20you.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20recommend%20that%20you%20enable%20%22Turn%20on%20log%20collection%20and%20diagnostics%20page%20for%20end%20users%22%20in%20the%20ESP%20is%20you%20have%20not%20already%20done%20so.%20That%20makes%20it%20easier%20for%20you%20to%20troubleshoot%20autopilot.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22NicklasAhlberg_0-1629870876818.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F305556iD41199C0AE890834%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22NicklasAhlberg_0-1629870876818.png%22%20alt%3D%22NicklasAhlberg_0-1629870876818.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1.%20White%20Glove%20could%20fail%20if%20the%20device%20does%20not%20support%20TPM-attestation%20and%20if%20TPM%20is%20already%20owned%20by%20for%20example%20Windows.%20Typically%20all%20devices%20from%202016%20and%20above%20supports%20TPM-attestation.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20make%20sure%20that%20your%20devices%20have%20TPM%20attestation%20and%20reset%20TPM%20in%20UEFI%20firmware.%20Run%20this%20in%20Powershell%20to%20get%20TPM-attestation%20status%3A%26nbsp%3B%3C%2FP%3E%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3EGet-TpmSupportedFeature%20-FeatureList%20%22Key%20Attestation%22%3C%2FCODE%3E%3C%2FPRE%3E%3CP%3E%3CSPAN%20class%3D%22hljs-pscommand%22%3EGet-TpmSupportedFeature%3C%2FSPAN%3E%3CSPAN%20class%3D%22hljs-parameter%22%3E%20-FeatureList%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22hljs-string%22%3E%22Key%20Attestation%22%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESee%20this%20blog%20post%20for%20tips%20on%20how%20to%20troubleshoot%20and%20gather%20autopilot%20and%20TPM-related%20logs.%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.nicklasahlberg.se%2F2020%2F01%2F11%2Fautopilot-white-glove-0x801c0003-error%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EWindows%20Autopilot%20White%20Glove%200x801c0003%20error%20(nicklasahlberg.se)%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E2.%20Please%20run%20dsregcmd%20%2Fstatus%20from%20a%20device%20with%20this%20error%20to%20see%20if%20you%20find%20any%20issues.%20Do%20you%20hybrid%20join%20your%20devices%3F%20If%20your%20users%20have%20a%20M365-license%2C%20please%20make%20sure%20that%20you%20do%20not%20run%20any%20startup%2Fscript%20or%20in%20any%20other%20way%20push%20a%20KMS%20activation.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%2F%2FNicklas%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fnicklasahlberg.se%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fnicklasahlberg.se%2F%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Our company implement intune and used autopilot whiteglove to configure our employee's laptops, and there are several problems we faced recently and wondering is there any troubleshooting methods, any advice and feedback are welcome

 

1. Randomly Intune Failure on Security policy on Account setup. When autopilot whiteglove proceeded to security policy, sometimes it will stuck at identifying status and go failure eventually. It usually happened after several days when the first part of intune(before clicked reseal on green screen) was finished successfully

2. Windows activation issue. This issue started from last week when users finished intune autopilot and started to work in few days. It will fix by windows activation troubleshooting eventually but still make people crazy.

BestSumy_0-1629836583514.png

 

4 Replies
Hi,

As you are mentioning the reseal button I guess you mean Autopilot white glove. THis phase is all about the user targetted apps/settings that are going to be installed

If you want to read more about this whole process and how to maybe skip this phase

https://call4cloud.nl/2021/06/those-magnificent-drivers-in-their-flying-microsoft-store-or-how-i-fle...

And the activation... it also depends on which license the user has, like iwth business premium you are up for an upgrade from pro to business. (pro licence has to be valid)

Hello @BestSumy

 

Troubleshooting autopilot involves a lot of steps.. here are a few to kick things off. Let me know if you require further help and I will happily assist you.

 

I recommend that you enable "Turn on log collection and diagnostics page for end users" in the ESP is you have not already done so. That makes it easier for you to troubleshoot autopilot.

NicklasAhlberg_0-1629870876818.png

 

1. White Glove could fail if the device does not support TPM-attestation and if TPM is already owned by for example Windows. Typically all devices from 2016 and above supports TPM-attestation.

 

Please make sure that your devices have TPM attestation and reset TPM in UEFI firmware. Run this in Powershell to get TPM-attestation status: 

Get-TpmSupportedFeature -FeatureList "Key Attestation"

Get-TpmSupportedFeature -FeatureList "Key Attestation"

 

See this blog post for tips on how to troubleshoot and gather autopilot and TPM-related logs. Windows Autopilot White Glove 0x801c0003 error (nicklasahlberg.se)

 

2. Please run dsregcmd /status from a device with this error to see if you find any issues. Do you hybrid join your devices? If your users have a M365-license, please make sure that you do not run any startup/script or in any other way push a KMS activation.

 

//Nicklas

 

https://nicklasahlberg.se/ 

 

@Rudy_Ooms Thanks for the info will take a look now

Thanks for the info will take a look now