Error Codes Index

Intune, Autopilot and Entra join codes

Meanings come from Microsoft Learn. Each code opens its own fix page or the full article that covers it. Codes marked "Microsoft reference" only have a one-line meaning in Microsoft's docs, so they link to the source instead. You can also paste any code into the error code analyzer.

• 0x80004005 E_FAIL Full article

  Listed by Microsoft as a known Windows Autopilot hybrid join timeout issue. The existing article is short (about 470 words) and should be expanded rather than duplicated.

• 0x8007000D E_INVALIDDATA Microsoft Entra hybrid join

  During hybrid join, the device couldn't parse the server's JSON response, most likely because a proxy returned HTTP 200 with an HTML authorization page.

• 0x80070774 Full article

  During hybrid Autopilot the domain controller can't be found or reached, or the device was put in a state that can't join the domain (commonly the Assign user feature on a hybrid profile).

• 0x8007202F Full article

  Listed by Microsoft as a known Windows Autopilot issue involving the Intune Connector for Active Directory (a constraint violation when the connector creates the computer object).

• 0x80072EE2 WININET_E_TIMEOUT Microsoft Entra hybrid join

  A general network timeout while the device tried to reach Microsoft Entra device registration endpoints.

• 0x80072EFD WININET_E_CANNOT_CONNECT Microsoft reference

  During hybrid join discovery, a connection with the server couldn't be established.

• 0x80072F8F WININET_E_DECODING_FAILED Microsoft reference

  During hybrid join discovery, the network stack couldn't decode the server's response.

• 0x80180005 MENROLL_E_DEVICE_CONFIGMGRSERVER_ERROR Full article

  There was a failure at the management server, such as a database access error.

• 0x80180006 MENROLL_E_DEVICE_INTERNALSERVICE_ERROR Microsoft reference

  There was an unhandled exception on the server.

• 0x8018000A MENROLL_E_DEVICE_ALREADY_ENROLLED Full article

  The device is already enrolled, often by a different user's work or school account.

• 0x8018000B MENROLL_E_DEVICE_NOT_ENROLLED Microsoft reference

  The device is not enrolled.

• 0x80180014 MENROLL_E_DEVICENOTSUPPORTED Full article

  Your organization does not support this version of Windows: Windows MDM enrollment is blocked for this platform or version (in Intune, usually the Windows (MDM) platform restriction).

• 0x80180022 MENROLL_E_PROV_CSP_MISC Windows Autopilot

  Provisioning failed in a configuration service provider (CSP). In Windows Autopilot, Microsoft documents 'Autopilot device enrollment failed with error HRESULT = 0x80180022' when the device runs Windows Home.

• 0x80180024 MENROLL_E_PROV_SSLCERTNOTFOUND Microsoft reference

  When binding the public certificate and private key, the public certificate wasn't found, either during the bind or in the provisioning payload (perhaps targeting the wrong store).

• 0x80180026 MENROLL_E_DEVICE_MANAGEMENT_BLOCKED Intune enrollment

  Mobile device management was blocked on the device, possibly by Group Policy or the SetManagedExternally function.

• 0x8018002B Full article

  Auto MDM Enroll: Failed. Group Policy auto-enrollment fails because the UPN uses an unverified or non-routable domain, or the MDM user scope is None.

• 0x801C0002 DSREG_E_DEVICE_AUTHENTICATION_ERROR Microsoft reference

  During hybrid join, the device registration service (DRS) returned ErrorCode AuthenticationError with a sub-code other than DeviceNotFound.

• 0x801C001D DSREG_AUTOJOIN_ADCONFIG_READ_FAILED Full article

  Microsoft Entra hybrid join couldn't read the service connection point (SCP) object to get the tenant information.

• 0x801C001F DSREG_AUTOJOIN_DISC_WAIT_TIMEOUT Microsoft Entra hybrid join

  The operation timed out while performing discovery.

• 0x801C0021 DSREG_AUTOJOIN_DISC_FAILED Microsoft Entra hybrid join

  Generic discovery failure: the device couldn't get the discovery metadata from the device registration service (DRS).

• 0x801C003A DSREG_DISCOVERY_TENANT_NOT_FOUND Microsoft Entra hybrid join

  The service connection point object has the wrong tenant ID, or no active subscriptions were found in the tenant.

• 0x801C003D DSREG_AUTOJOIN_USERREALM_DISCOVERY_FAILED Microsoft Entra hybrid join

  Generic realm discovery failure: the device couldn't determine whether the domain is managed or federated from the security token service.

• 0x801C03F2 DSREG_E_DIRECTORY_FAILURE Microsoft Entra hybrid join

  The device registration service (DRS) returned ErrorCode DirectoryError during the join phase.

• 0x801C03F3 Full article

  Listed by Microsoft as a known Windows Autopilot pre-provisioning issue.

• 0xC000005F STATUS_NO_SUCH_LOGON_SESSION Primary Refresh Token (sign-in)

  User realm discovery failed because the Microsoft Entra authentication service couldn't find the user's domain.

• 0xC000006D STATUS_LOGON_FAILURE Primary Refresh Token (sign-in)

  The device couldn't get a Primary Refresh Token (PRT) because the Microsoft Entra authentication service or WS-Trust endpoint rejected the sign-in (HTTP 400).

• 0xC004844C AAD_CLOUDAP_E_OAUTH_USERNAME_IS_MALFORMED Primary Refresh Token (sign-in)

  The user's UPN isn't in the expected internet-style format, so the device can't get a Primary Refresh Token.

• 0xCAA20003 ERROR_ADAL_SERVER_ERROR_INVALID_GRANT Microsoft Entra hybrid join

  Microsoft Entra ID didn't accept the SAML token from the on-premises identity provider.

• 0xCAA82EE2 ERROR_ADAL_INTERNET_TIMEOUT Microsoft Entra hybrid join

  A general network timeout while the device was getting a token for device registration.

• 0xCAA90014 ERROR_ADAL_WSTRUST_REQUEST_SECURITYTOKEN_FAILED Microsoft Entra hybrid join

  The federation server's WS-Trust response reported a fault exception, and the device failed to get an assertion.