For a resolution to this error, see Troubleshoot Windows device enrollment problems in Microsoft Intune. Failed to check enrollment url, 0x00000001: WUAHandler 12/14/2021 11:45:57 AM 88736 (0x15AA0) SourceManager::GetIsWUfBEnabled - There is no. Select the General tab, and verify the Assigned management point. CoManagementHandler 12/09/2022 13:59:57 1712 (0x06B0) Value of CoManagementFlags retrieved: 0x2001 CoManagementHandler 12/09/2022 13:59:57. what im seeing in cas. : ️ On Windows 11 and Windows 10 1803+, CA is available for. Failed to check enrollment url, 0x00000001: ConfigMgr CB 2107 (public release) - HTTPS (PKI) enabled - Site Version -. CoManagementHandler 12/09/2022 13:59:57 1712 (0x06B0) Value of CoManagementFlags retrieved: 0x2001 CoManagementHandler 12/09/2022 13:59:57 1712 (0x06B0) Yep I am seeing that since upgrading to 2107. In addition, the issue of not enough storage is available to process this command can be caused by various reasons. Current value is 1, expected value is 81 Current workload settings is not. You can encounter loads of different issues, and I can’t list them all here, but these are the most common. The various wizards of the console are not dark theme enabled. types of plywood for formwork. exe and deinstalled MP with no success (restarted the server). Click on Select and choose the SSL certificate which you enrolled for Management Point. Enable the Group Policy. Apply this update on sites that run version 2006 or later. 4. MDM enrollment hasn't been configured yet on AAD, or the enrollment url isn't expected. And for more details on autopilot implementation, refer step by step guides. ran AAD connect to provision device back into Azure AD. Computer Configuration –> Policies –> Administrative Templates –> Windows Components –> MDM –> Enable automatic MDM enrollment using default Azure AD credentials. The graphs can help identify devices that might need attention. The Co-Management workloads are not applied. Find the flags attribute; and verify that it is set to 10. On the Site System Role tab, select Enrollment Point and Enrollment Proxy Point, click Next. contoso. If you did not setup Bitlocker on your PC yourself, you would need to contact the PC manufacturer, they may have set that up by default and they would then have the key, or, they may need. exe ) may terminate unexpectedly when opening a log file. Uncheck “Certification Authority”. 1. As part of the SCCM Updates and Servicing prerequisite check, SCCM Creates or updates the SCCM Update Package for 2211 and replicates it to child primary servers (if you have any). In the Configuration Manager console, go to the Monitoring workspace, and select the Cloud Attach node. Could not check enrollment url, 0x00000001: (this looks like an intune reference we do not use). For onboarded devices I will check the event logs on the devices to troubleshoot why they are not getting enrolled in Intune. Download the hotfix from here. For more information on creating custom collections, see How to create collections. Devices are member of the pilot collection. If your organization restricts network communication with the internet using a firewall or proxy device, make sure to allow these endpoints. All the software is installed, all the settings are there, bitlocker is. I am using SCCM and configured Cloud-Attached and set the Co-Mgmt device collection. Devices are enrolled and hybrid joins the aad and ad, all seems fine. In the Configuration Manager console, click About Configuration Manager. Give the name. If the value 1 is returned, the site is up to date, with all the hotfixes applied on its parent primary site. Intune Enrollment using Group Policy | Automatic Enrollment AVD VMs See this article. Do not rename or relocate any of the extracted files: all files must exist in the same folder or the installation will fail. SCCM includes the following administrative capabilities: operating system. So far no computers enrolled into Intunes. In the Certificate Authority console, right-click Certificate Templates, choose New, and then choose Certificate Template to Issue. 6. 4. Feature updates only: Check that the device is successfully enrolled in feature update management by the deployment service. This setting is optional, but recommended. Configuration Manager client request registration. log indicates a successful renewal: Connector certificate renewed. This hotfix replaces the following previously released hotfix. All the software is installed, all the settings are there, bitlocker is. Right-click Certificates, expand All tasks and select Request New Certificate. That scheduled task will start deviceenroller. Devices are member of the pilot collection. Step 9. All workloads are managed by SCCM. Recently,After the Path Tuesday, None of the clients which are reporting to Primary Site did not perform a successful Scan (clients beneath secondary Site are working Good) . The fix for this in every case is to go to each SCCM folder and re-enable inheritance. A server with the specified hostname could not be found. msc -> Applications and Services Logs -> Microsoft -> Windows -> DeviceManagement-Enterprise-Diagnostics-Provider -> Admin. [Optional] Upload a wireless profile, so the iOS device (s). On the General tab, click Next. For example, you can check the TPM status using command line. SCCM Client Settings - Endpoint Protection. log that in Location update from CTM, there are 3 matching DPs. Once Bitlocker is on and the drive is encrypted, Bitlocker will indicate that as shown below. When you check the role, another dialog box. Click on Ok to return to Site Bindings windows. Justin Chalfant on February 1, 2019 at 7:33 AM . I can guide you how to do this if there are problems. Please navigate to Admin-> Configurator Enrollment-> Choose the Default User->Save the Default user. As SharpSCCM calls into the actual . If th e Info tab is missing from the connection box, this device is not enrolled in Intune yet. log, you should see success as well. Also multiple times in execmgr. As you dont have that line it would indicate that the client hasnt gone into co management. You do not have to restart the computer after you apply this hotfix. Click Add Site System Role in the Ribbon. Furthermore, run the gpupdate command on the client computer and check if the computer policy and user policy updates successfully or not. As SharpSCCM calls into the actual . SCCM 2010. Unable to install SCCM agent over internet using CMG and bulk enrollment token. I have check the IIS and i can see correct cert is binding to default site, I have reboot the iis. This can help streamline the enrollment process of macOS devices, ensuring that both profile and agent are installed without needing to manually run the . If you go to the PC's sccm client does it show the enrollment item within the configuration tab? Reply Client is registered. 3. On Create Microsoft Intune Subscription wizard Intro page,. I've started lately a POC for SCCM&Intune co-management and noticed a wired issue with the enrollment process - while some devices enrolled without issues, others just don't. In the Assets and Compliance workspace, expand Endpoint Protection, and then click Antimalware Policies. EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 13. but I have one device Windows 10 22H2 keeps failing in joining the Intune. SCCM 2012 with CU3 applied - its an all in one server with all roles except for: Asset Intelligence, Endpoint Protection, both Enrollment points, Fallback status*, OOB Service, State migration and System Health Validator *Although, it probably should be the Fallback status point, but one thing at a time! AD Schema was extended & verified. Thank you for response, I done following settings in sccm server and clients 1. btd6 income calculator. I have set up a CMG recently and I am having trouble trying to install the SCCM agent over the internet using token based authentication. On-premises BitLocker management using System Center Configuration Manager Microsoft BitLocker Administration and Monitoring (MBAM) And recently they've posted an updated blog post here where they go into detail about how BitLocker Management in Microsoft Endpoint Manager has evolved (both in Intune and ConfigMgr). If Identity is Local User, then using Settings App -> Access Work or School -> Enroll only in device management link. In the CoManagementHandler. Go to Administration \ Overview \ Updates and Servicing node. KB10503003 Hotfix Released for SCCM 2107 Early Ring (5 known issues fixed) SCCM 2107 Rollup Update KB11121541 – Most of the issues hightlited. In this post I will cover about SCCM client site code discovery unsuccessful. Challenge with On-Prem Active Directory registered devices not enrolled in Intune, but those devices showing in Intune dashboard managed by Config Mgr (SCCM) instead of Co-managed. Right-click BitLocker Management and click Create Bitlocker Management Control Policy. This means the device has registered to Azure AD, but wasn’t enrolled by Intune. When this is the case, the solution is really simple, you need to delete the Autopilot configuration file that was deployed to your device. Description: Enter a description for the profile. The update is available if you have opted in through a PowerShell script to the early update ring deployment of #MEMCM 2107. -Under Software Center it is showing "Past due - will be installed". Installation Guide ️ ConfigMgr Out of Band Hotfix. The enrollment wasn't triggered at all. Select the General tab, and verify the Assigned management point. (Code 0x80070002) TSManager 7/6/2009 3:20:50 PM 3684 (0x0E64) Successfully unregistered Task Sequencing Environment COM Interface. This step-by-step example deployment, which uses a Windows Server 2008 certification authority (CA), has procedures that show you how to create and deploy the public key infrastructure (PKI) certificates that Configuration Manager uses. 2. . Hi, I am having the same problem. txt. exe) may terminate unexpectedly when opening a log file. For more information, see Assign Intune licenses to your user accounts. Make sure the Directory is selected for Authentication Modes. The Show Table link in the Windows Servicing dashboard displays repetitive information after selecting different collections. In the Add ADE Server window press Update Token . It should be noted that in the past with the help of the members of this forum, I was able to establish a secure connection between the. Event 13: Certificate enrollment for Local system failed to enroll for a DomainControllerCert certificate with request ID 757 from srv1. Microsoft TeamsWe have Win10 1809 LTSB machines that are discovering valid URLs for software updates on the SCCM Distribution Point: But trying to download them from an invalid WSUS URL over port 8530 instead of calling the DP URL: All other machines in the domain are successfully downloading updates from the DP. Windows 10 1809 Devices are Hybrid Azure AD joined. Login to Windows 10 with an Administrator account. In this post I will cover about SCCM client site code discovery unsuccessful. Joining internet clients to CMG Bulk Registration not working with Enhanced HTTP. There is an active Deployment for the Updates; user machine is in the Collection; content is on the Distribution Point; Deployment is configured to download and install even if user is on a slow network; other users in this Deployment have downloaded and installed the Updates. Backup the Registry. All workloads are managed by SCCM. msc), and check whether the computer has a TPM device. Hi! I have a new built SCCM (MP,DP,SUP) (forestA), I have a remote DP on the other forest (forestB). All workloads are managed by SCCM. On the CA Server launch the Certification Authority management tool and look at the properties of the CA Server itself, on the security tab make sure yours looks like this, (Domain computer and domain controllers should have the ‘request certificates‘ rights). After signing in, click Next. Failed to check enrollment url, 0x00000001: UpdatesDeploymentAgent 17/05/2022 14:28:08 7956 (0x1F14) Attachments. Sometimes software will stop distributing. Trying to get co-management up and running with 2111. On your device, go to Settings > tap your name > iCloud > swipe the Find My iPhone button to Off. Hi, We have pushed monthly SCCM updates. msc). I checked the client PC has over 100+GB free space so space could not be the case? Failed to check enrollment url, 0x00000001: execmgr 28/04/2022 14:43:20 18632 (0x48C8) Failed to check enrollment url, 0x00000001: execmgr 28/04/2022 14:43:20 4908 (0x132C) Policy arrived for parent package SIT0001A program. If the status of the certificate shows as Active, it’s all good. The Show Table link in the Windows Servicing dashboard displays repetitive information after selecting different collections. After doing that SCCM will start to function properly. exe on the machine, bitlocker encryption starts immediately. Yep I am seeing that since upgrading to 2107. Security Bulletins & Advisories. Also called pure MDM enrollment flow. Launch the ConfigMgr console. Forum statistics. Verify the status from a command prompt. msc), and check for a Trusted Platform Module under Security Devices. log to check whether scan is completed or not. Failed to check enrollment url, 0x00000001: WUAHandler 11/9/2021 10:15:54 AM 19356 (0x4B9C) SourceManager::GetIsWUfBEnabled - There is no. To update a secondary site in the Configuration Manager console, click Administration, click Site Configuration, click Sites, click Recover Secondary Site, and then select the secondary site. Example: Router (config)# crypto pki import mytp certificate. All workloads are managed by SCCM. Manually entering the SCCM client site code and clicking Find Site showed Configuration Manager did not find a site to manage. CMPivot queries against the. In Basics, enter the following properties: Name: Name your profile so you can easily identify it later. Locationservices. 3. log. Select None or Pilot at this time. Enroll the Device Trust certificate on domain-joined Windows. Log in to the. Devices are member of the pilot collection. For more information, see Install in-console updates for System Center Configuration Manager. I am currently testing software update deployment on my setup and upon checking to my testing client computer, the computer won't update. Go to Start and click Start Menu -> Settings. This includes escrowing of BitLocker recovery keys during a Configuration Manager task sequence. So, it is suggested to just use one of these method. 06. The security message shown to these end users will include a Learn more link that redirects to your specified URL. Clients that aren’t Intune enrolled will record the following error in the execmgr. The installation package is outdated and the service is blocking access. All Activity; Home ; MDT, SMS, SCCM, Current Branch &Technical Preview ; System Center Configuration Manager (Current Branch) SCCM 2002 and Bitlocker Management and Report URL issueIn CMTrace, open the CoManagementHandler. 2022 14:14:24 8804 (0x2264) Loaded EnrollPending=1, UseRandomization=1, LogonRetriesCount=0, ScheduledTime=1632425152, ErrorCode=0x0, ExpectedWorkloadFlags=1, LastState=101, EnrollmentRequestType=0 CoManagementHandler 15. In SCCM under devices look for the column AAD Device ID and see if its blank, if it is, then check AAD for that device name and see if its synced from your on prem AD. log on the client. It looks like the incorrect Intune configuration is not getting deployed to our workstations. Check comanagementhandler. Select who can Automatic Enroll in Intune. [LOG [Attempting to launch MBAM UI]LOG] [LOG [ [Failed] Could not get user token - Error: 800703f0]LOG] [LOG [Unable to launch MBAM UI. If the Server certificate is installed correctly, you see all check marks in the results. Go to Devices > macOS > macOS enrollment. When you are trying to onboard your device with Autopilot and somehow the Intune enrollment is not succeeding: “Mismatch between ZTD Profile and enrollment request intent” 0x8018005. Error: Could Not Check Enrollment URL,. On the general tab of the client setings in control panel . externalEP. SCCM Software Updates not installing to endpoints. I enable co-management with Intune with global admin, and auto enrolled computers successfully, , after that I changed the global admin password, the auto enrolled cannot work again. The following fields are available in the WMI class: . In ConfigMgr systems --> control panel --> Configuration Manager Properties --> Co-Management option shows Disabled. If the renewal fails after the certificate is expired, Configuration Manager cannot connect to Microsoft Intune. Check out our troubleshooting doc on common errors while enrolling iOS devices using Apple Configurator. log file after receiving a task sequence policy. Launch Configuration Manager console. You can watch the process in the “C:\Windows\CCM\CoManagementHandler. 1. Fix Intune Enrollment. 3) The SCCM client was installed on the primary server, so we uninstalled the client using CCMClean. 3. If you choose not to specify a URL in this optional field, these end users are shown the same message but without the Learn more link. MS case is still open. Select Review and then Save. Set up the custom website to respond to the same port that you set up for Configuration Manager client. This issue occurs when integrated Windows authentication is tried by the Configuration Manager client against Microsoft Entra ID while the verified domain isn't federated. log, SensorEndpoint. Specifies the MDM server URL that is used to enroll the device. 1048. View All Result . Cheers! Grace Baker Hexnode MDmHere’s how to do that: Press Win + R on your keyboard and enter services. Hello, We are trying to enroll devices in intune using MECMDevices are Hybrid azure AD joined. The agent can be added Systems Manager > Manage. On the General tab, click Next. Approval status needs to be 3 for it to sync with cloud processes. . On the client computer, go to C:WindowsSystem32GroupPolicyMachine. Office: A suite of Microsoft productivity software that supports common business tasks, including word processing, email, presentations, and data management and analysis. Go to Administration Updates and Servicing. 2022 14:14:24 8804 (0x2264) Could not check enrollment url, 0x00000001: CoManagementHandler 15. I found that quite odd, because the. But when we try to do anything with Software Center there is no content. First time using this method and a few machines were successful with the process. B. Select your Azure environment from the following list: Azure Public Cloud. The CMG creates an HTTPS service to which internet-based. string: accesstoken: Custom parameter for MDM servers to use as they see fit. logCould not check enrollment url, 0x00000001: CoManagementHandler 12/09/2022 13:59:57 1712 (0x06B0) Device is not enrolled. Type Host name Points to TTL. If the software update point isn’t. Wait 2-3 minutes or so and check OMA-DM log again. Could not check enrollment url, 0x00000001: CoManagementHandler 12/09/2022 13:59:57 1712 (0x06B0) Device is not MDM enrolled yet. yourdomain. Find the Windows Update service and stop it; Open the File Explorer, go to the C:WindowsSoftwareDistribution folder, and delete everything inside; Go back to the Services window and start the Windows Update service. We would like to show you a description here but the site won’t allow us. You can now see SSL certificate under SSL Certificate. If this does not solve the problem, check the CD-ROM driver and try to install another one. On the General tab, click Next. Could not check enrollment url, 0x00000001: Co-management is disabled but expected to be enabled. 2 of them show as azure ad joined, 2 do not. You can create custom collections in Configuration Manager, which help determine the status of your co-management deployment. The primary site then reinstalls that. Oh look, the device can successfully authenticate to Intune now with Device Credentials. Next, navigate to the Tools folder in Terminal where the CMEnroll utility is, and enter the following: “sudo . If it isn’t set to 10, then set it to 10 using ADSIedit. Open Default Client Settings and select the Enrollment group. log clearly states why it's not enabled: Workload settings is different with CCM registry. Windows Update for Business is not enabled through ConfigMgr WUAHandler 1/21/2022 9:21:10 AM 2488 (0x09B8) Error: Could Not Check Enrollment URL, 0x00000001: Wuahandler 4/3/2023 2:51:03 PM 2212 (0x08a4) There are other ADR rule that normally apply to Windows Server and Windows Client, I didn't understand because in new VM's client of the laboratory the failure occurs. CoManagementHandler 12/09/2022 13:59:57 1712 (0x06B0)<BR />Could not check enrollment url, 0x00000001: CoManagementHandler 12/09/2022 13:59:57 1712 (0x06B0)<BR />Device is not MDM enrolled yet. When scaning for new updates an error is generated and does not download updates to Windows10/11 machines. LOANERL0001-updates. Having two management. Extract all files before you start the installation. The cause is that the first time we tried to activate the cloud attach, the operation did not complete. ”. Delete all existing tasks in the EnterpriseMgmt folder and then delete the folder itself. Windows 10 1909 . Create auto-enrollment group policy for devices. All workloads are managed by SCCM. After you run the prerequisite check, it takes a while to actually begin the checks. Could not check enrollment url, 0x00000001: WUAHandler 6/6/2023 9:26:00 PM 3832 (0x0EF8) SourceManager::GetIsWUfBEnabled - There is no Windows Update for Business. Select a server to use as a site system – Install a New SCCM Management Point Role. Could not check enrollment url, 0x00000001: CoManagementHandler 12/09/2022 13:59:57 1712 (0x06B0) Device is not MDM enrolled yet. In Co-management settings we have it set to upload all Devices. while you enroll iOS device, manually reset the app: Within the settings for iOS, locate the settings for the Workspace Application. Hi, iìm afraid to set this: Use Client Settings to configure Configuration Manager clients to automatically register with Azure AD. Mar 3, 2021, 2:40 PM. - All the devices are domain joined and synced to AAD (Hybrid Azure AD joined) - All users are licensed - Auto-enrollment settings verified (followed this article)When we are imaging brand new machines, we have trouble getting them co-managed without reinstalling the SCCM client. All workloads are managed by SCCM. I recently helped an IT guy fix an issue where the SCCM client agent could not discover the site code. com. In the IIS Website and Virtual application name fields, leave both to the default values. Microsoft Official Courses On-Demand. Temporarily disable MFA during enrollment in Trusted IPs. This purpose of this mini. 2207. Access check failed against user 'domainaccount' domain account is the user id with Admin rights to the server, and full rights to every component of the console. In this blog post, i will discuss about 2 options 1) configuration baseline and 2) Scripts. For more information and suggestions, see the Planning guide: Step 5 - Create a rollout plan. Open up the chassis and check the motherboard. Could you let us know how many devices are affected?. Server assigned ClientID is GUID: Approval status 1. Refresh the console and check if new template is there. This is a healthy looking list. They're using a System Center 2012 R2 Configuration Manager license. I check for the config manager, if it's there I operate as follows -. 3. Right click Microsoft Intune Subscriptions and click Add Microsoft Intune Subscription. please check the following information: Check if there's any GPO which configured for MDM enrollment assigned to this device. The one that says its comanaged does show up in intune though. To give our Hybrid Azure AD joined device a trial by fire, we will edit its local group policies to automatically enroll into Intune. log shows. Select Windows > Windows enrollment > Enrollment Status Page. log – Check whether it’s able to find WSUS Path= and Distribution Point with patches; WUAHandler. Failed to check enrollment url, 0x00000001: ; The OneTrace log file viewer (CMPowerLogViewer. exe SCCM01 P01 invoke client-push -t 192 . This purpose of this mini. SCCM 2010. If it is, then remote into said device and run "dsregcmd /status" and see what kind of errors you get. 1000Office: A suite of Microsoft productivity software that supports common business tasks, including word processing, email, presentations, and data management and analysis. Create a DNS CNAME alias. Under User Settings, enable the option to Allow. Proceed to Step 2. Select the Network tab, and. Click Save. log returned with below info. All workloads are managed by SCCM. However, I suspected it could be MP issue but we verified that MP control. Open the SCCM console, and browse to Administration/Site Configurations /Server and Site System roles, then select the Software Update point. Link the Group Policy to the OUs with the computers who should auto-enroll into Intune. The client is unable to send recovery information. Check for anything it finds but is still left over in Settings > Apps > Apps & Features, and C:Program Files and C:Program Files (86) to uninstall or delete them. Open TPM Management (tpm. Most of our SCCM clients enabled co-management just fine. CoManagementHandler 12/09/2022 13:59:57 1712 (0x06B0) Value of CoManagementFlags retrieved: 0x2001 CoManagementHandler 12/09/2022 13:59:57 1712 (0x06B0) 3. #1 – One of the ConfigMgr 2203 known issues for me is with ConfigMgr Console Dark Theme. This means that the device has no ADE settings assigned to them. After some retries the device is synced to AAD, and it then writes this, but then nothing happens after that. Microsoft switched the name to System Center Configuration Manager in 2007. CoManagementHandler 12/09/2022 13:59:57 1712 (0x06B0)<BR />Could not check enrollment url, 0x00000001: CoManagementHandler 12/09/2022 13:59:57 1712 (0x06B0)<BR />Device is not MDM enrolled yet. . UpdatesDeploymentAgent 2021-10-26 16:02:08 428 (0x01AC). Howerver, we have some that have not completed the enroll. If I manually close it or wait it out, the system reboots and it appears my task sequence was successful. IT admin needs to set MDM authority. Clear any unwanted files or increase the disk space if needed. Microsoft Endpoint Configuration Manager Version 2207; Console Version – 5. Configuration Manager should be enrolling the devices into Intune since users do not have Intune licenses. Open the Configuration Manager console > Administration > Overview > Client Settings, and then edit the Default Client Settings. SCCM detects client as Azure AD Joined; I will now provide all relevant screenshots from Intune, SCCM and Client. SCCM 2111 Hotfix KB12959506 to fix a. SCCM 2010. log returned with below info. Click on “Query” and paste the following query in the “query” windows and click on “Apply. When I add computers to comgnt Collection, the device appears in Intune console, but locally nothing happends and sccm client see that comgnt isn't yet enabled. -UpdatesDeployments. I found that quite odd, because the client deployment was working a 100% the week before. Let ask you this , is this your personal lab or company? Because if personal usually you have to designate fallback space point “fsp” and depends when you install this roles on which site for example in you case ccmsetup. These instructions do not pertain to Configuration Manager BitLocker Management. Click Sign In to enter your Intune credentials. Users see the message "Looks like your IT admin hasn't set an MDM authority. In this article. Failed to check enrollment url, 0x00000001: UpdatesDeploymentAgent 2021-10-26 16:02:50 4264 (0x10A8) Device is not MDM enrolled yet. The following entry indicates a certificate that. Once ccmsetup successfully installs the Configuration Manager client, registration initializes. To begin my troubleshooting, I ran the command “certutil -setreg caCRLFlags +CRLF_REVCHECK_IGNORE_OFFLINE” so I could get the service running. Select Configure Cloud Attach from the ribbon to open the wizard. The Configuration Manager Support Center Client Tools application terminates unexpectedly on a Windows 11 computer selecting different deployments. CoManagementHandler 12/09/2022 13:59:57 1712 (0x06B0) Value of CoManagementFlags retrieved: 0x2001 CoManagementHandler 12/09/2022 13:59:57. NET client libraries, we get a nice. You can choose either “User Credential” or “Device Credential”. SCCM focuses on the management of Windows devices -- both client and server systems -- in enterprise environments, which some define as sites with more than 300 devices. All workloads are managed by SCCM. Call to HttpSendRequestSync succeeded for port 443 with status code 200, text: 0K status code. 1700; Site Version – 5. 0 or later. When I check the CoManagementHandler log, I keep. The Auto Enrollment Process. Also called Add Work Account (AWA) flow. Unable to verify the server's enrollment URL. Challenge with On-Prem Active Directory registered devices not enrolled in Intune, but those devices showing in Intune dashboard managed by Config Mgr (SCCM) instead of Co-managed. I know that there is a section in the SCCM monitoring workspace for this but my main question is whether there is a reg key or WMI item that I can pull using PowerShell to confirm if a computer is co-managed. This issue occurs in one of the following situations: The Cloud Management Azure service isn't configured in Configuration Manager.