Windows AD authenticated enrollment struckSolved

Hi @Valentine, thanks for bringing up the issue.

If your device is already enrolled on Microsoft’s Intune or other MDM service this should be the error coming up. Also, you’ve set the automatic enrollment settings as non-configured.

However, this error could be occurring because the device was already set up with Microsoft SCCM (System Center Configuration Manager). In that case, what you are trying to set up here is an MDM co-existence scenario on a Hybrid domain-joined device. Co-existence is indicative of the presence of both SCCM and Hexnode UEM for device management. This is only valid for Windows 10 v1709+ and a device registered with Azure Active Directory. For you, the device is also joined with your on-premises Active Directory, such devices are Hybrid domain-joined devices.

Could you verify if the registry keys are set correctly to match the required settings –
1. Open the Registry Editor by pressing Windows key + R and running ‘regedit’.
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments and find the key ExternallyManaged on the right pane.
3. If its current value is 1 change it to 0 and try enrolling the device again.

If this was not the case, please don’t hesitate to right away contact our support team regarding your issue.

Hope this helps.
Cheers!
Zach Goodman
Hexnode UEM

• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.
• This reply was modified 3 years, 5 months ago by  Zach.

@zach Indeed, the devices were configured in SCCM. I checked the registry key and there it was set to 1. Changed that and the enrollment worked!! Thanks for the input, it was educative.