Project

General

Profile

Actions

Bug #12703

open

Unable to enroll a windows device without cloud admin in autopilot

Added by Arshana Atapattu about 1 month ago. Updated about 1 month ago.

Status:
On hold
Priority:
Critical
Assignee:
-
Start date:
03/03/2025
Due date:
% Done:

0%

Estimated time:
Device Type:
Component:
Type:
Windows

Description

Environment details
Staging server 6.4.0

Prerequisites
Created mdm app: https://docs.google.com/document/d/1dTPoJMp2z2xIRAJaLfJ6aHCVtnoOiKEtur6PXlGDcxQ/edit?usp=sharing
setup azure AD enrollment from platform configuration [1]

Steps
can follow this enrolling steps.
https://docs.entgra.io/uem/6.3.0/enrollment/#windows-autopilot

after registering with cloud admin user, and after the device restart it is required to login with user(not with a cloud admin user) [2]
try logging wit ha normal user

Description
When tried to enroll with normal user, enrollment fails.
Error log from: /var/log/nginx/windows/uem/http/access.log [3]
Error log from: /var/log/nginx/windows/uem/http/error.log [4]

When the enrollment comes to licensing page it shows this error [5]
After accepting licensing it showed something went wrong on the windows device.

Result

[1]
[1]

[2]
[2]

[3] log from : /var/log/nginx/windows/uem/http/access.log
112.134.191.19 - - [03/Mar/2025:13:04:20 +0530] "GET /api/device-mgt/windows/v1.0/configuration/license HTTP/1.1" 499 0 "https://uem.enterpriseenrollment.entgra.net/windows-web-agent/windows/license?redirect_uri=https%3A%2F%2Flogin.microsoftonline.com%2FWebApp%2FCloudDomainJoin%2F10&api-version=1.0&client-request-id=fb50fa03-8c0b-0003-bffb-50fb0b8cdb01&mode=azureadjoin&windows_api_version=2.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; MSAppHost/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045"
112.134.191.19 - - [03/Mar/2025:13:04:26 +0530] "POST /EnrollmentServer/Discovery.svc HTTP/1.1" 200 1247 "-" "ENROLLClient"
112.134.191.19 - - [03/Mar/2025:13:04:27 +0530] "POST /ENROLLMENTSERVER/PolicyEnrollmentWebservice.svc HTTP/1.1" 500 34537 "-" "ENROLLClient"

[4] log from: /var/log/nginx/windows/uem/http/error.log
2025/03/03 13:04:20 [info] 23235#23235: *817256 epoll_wait() reported that client prematurely closed connection, so upstream connection is closed too (104: Connection reset by peer) while reading response header from upstream, client: 112.134.191.19, server: uem.enterpriseenrollment.entgra.net, request: "GET /api/device-mgt/windows/v1.0/configuration/license HTTP/1.1", upstream: "https://203.0.113.144:8243/api/device-mgt/windows/v1.0/configuration/license", host: "uem.enterpriseenrollment.entgra.net", referrer: "https://uem.enterpriseenrollment.entgra.net/windows-web-agent/windows/license?redirect_uri=https%3A%2F%2Flogin.microsoftonline.com%2FWebApp%2FCloudDomainJoin%2F10&api-version=1.0&client-request-id=fb50fa03-8c0b-0003-bffb-50fb0b8cdb01&mode=azureadjoin&windows_api_version=2.1"
2025/03/03 13:04:27 [info] 23235#23235: *817281 client 112.134.191.19 closed keepalive connection (104: Connection reset by peer)

[5]
[5]


Files

Screenshot from 2025-03-03 13-21-55.png (109 KB) Screenshot from 2025-03-03 13-21-55.png [1] Arshana Atapattu, 03/03/2025 07:52 AM
Screenshot from 2025-03-03 13-24-33.png (67.2 KB) Screenshot from 2025-03-03 13-24-33.png [2] Arshana Atapattu, 03/03/2025 07:54 AM
1000442578.jpg (311 KB) 1000442578.jpg [5] Arshana Atapattu, 03/03/2025 08:00 AM
Actions #1

Updated by Rajitha Kumara about 1 month ago

  • Status changed from New to On hold

Issue is coming from Microsoft end.

Actions #2

Updated by Rajitha Kumara about 1 month ago

  • Project changed from product-uem 6.4.0 GA to product-uem 7.0.0 GA
Actions

Also available in: Atom PDF