Error Codes Index
A comprehensive index of Windows error codes, their meanings, and how to fix them.
0x80004005 Fix: Windows Autopilot Hybrid Azure AD Join Timeout 0x80004005
A comprehensive guide to fixing the 0x80004005 error during Windows Autopilot Hybrid Azure AD join deployments.
0x8004de40 Fix OneDrive Error 0x8004de40 for Work or School Accounts
Troubleshoot OneDrive Can't sign in error 0x8004de40 or 0x8004de88 on enterprise Windows devices by checking TLS, proxy inspection, Microsoft 365 endpoints, sync client state, and tenant sign-in evidence.
0x80070490 Fix Autopilot TPM Attestation Error 0x80070490 on AMD ASP fTPM Platforms
Troubleshoot Windows Autopilot TPM attestation error 0x80070490 on AMD ASP fTPM devices during self-deploying mode or pre-provisioning, with firmware-first remediation.
0x80070491 Fix Autopilot.dll WIL Error 0x80070491 in Event Viewer
Troubleshoot Autopilot.dll WIL error 0x80070491 by separating harmless Event Viewer noise from real Autopilot enrollment, reuse, and ESP issues.
0x800705B4 Fix Autopilot Securing Your Hardware Failed 0x800705B4
Troubleshoot Autopilot Securing your hardware failed 0x800705B4 by checking TPM 2.0, attestation URLs, profile mode, logs, and OOBE timing.
0x8007064C Fix Intune Device Already Enrolled Errors 8018000A and 0x8007064C
Fix Intune device already enrolled errors 8018000A and 0x8007064C by removing stale work accounts, old MDM certificates, cloned enrollment artifacts, and stale records.
0x80070774 Fix Autopilot Hybrid Join Error 0x80070774 During Initial Sign-In
Fix Autopilot hybrid join error 0x80070774 by removing Assign user from hybrid profiles, checking ODJ connector rights, and validating DC reachability.
0x8007202F Fix Intune Connector `A constraint violation occurred` (0x8007202F) in Autopilot Hybrid Join
Fix Intune Connector `A constraint violation occurred` (0x8007202F) during Autopilot hybrid join by correcting OU delegation, computer-account limits, and ODJ setup evidence.
0x800f0922 Troubleshooting Windows 11 May 2026 Security Update Failure (Error 0x800f0922)
The May 2026 Windows security update KB5089549 fails on devices with low EFI System Partition space. Here is how to identify affected devices, fix the ESP, and deploy the update with Intune.
0x80180005 Fix Autopilot Pre-Provisioning Error 0x80180005 in Intune
Troubleshoot Autopilot pre-provisioning error 0x80180005 by checking ZTD profile assignment, device reuse blocks, ESP targeting, and hybrid join prerequisites.
0x80180014 Fix Autopilot Re-Enrollment Error 0x80180014 in Intune
Fix Windows Autopilot error 0x80180014 during re-enrollment by checking blocked device records, MDM restrictions, and device diagnostics.
0x80180018 Fix Intune Enrollment Error 0x80180018 on Windows Devices
Troubleshoot Intune enrollment error 0x80180018 by checking user licensing, Entra auto-enrollment scope, MAM precedence, and MDM URL settings.
0x80180028 Fix Intune Device Sync Failures After Conditional Access Policy Changes (Error 0x80180028)
Fix Intune device sync failures after Conditional Access changes by checking enrollment scope, device compliance, MDM URLs, and error 0x80180028.
0x8018002b Fix Auto MDM Enroll Failed 0x8018002b in Intune GPO Enrollment
Fix Windows Auto MDM Enroll Failed 0x8018002b when Intune GPO auto-enrollment breaks on hybrid joined devices.
0x801C03EA Fix Autopilot Self-Deploying Mode Error 0x801C03EA During TPM Attestation
Troubleshoot Autopilot self-deploying mode error 0x801C03EA when TPM attestation fails, blocking Microsoft Entra join with a device token during kiosk and shared-device deployments.
0x801C03F3 Fix Autopilot Pre-Provisioning Error 0x801C03F3 After the Entra Device Object Was Deleted
Troubleshoot Windows Autopilot pre-provisioning error 0x801C03F3 when Microsoft Entra ID cannot find the device object and bench deployments stop before enrollment completes.
0x81039001 Fix Autopilot TPM Attestation Error 0x81039001 During Pre-Provisioning
Troubleshoot Windows Autopilot TPM attestation error 0x81039001, also shown as E_AUTOPILOT_CLIENT_TPM_MAX_ATTESTATION_RETRY_EXCEEDED, during Securing your hardware in pre-provisioning or self-deploying mode.
0x81039023 Fix Autopilot TPM Attestation Error 0x81039023 During Pre-Provisioning or Self-Deploying Mode
Troubleshoot Windows Autopilot TPM attestation error 0x81039023 during pre-provisioning or self-deploying mode and verify when outdated Windows 11 21H2 media is the real cause.
0x81039024 Fix Autopilot TPM Attestation Error 0x81039024 on Windows 11 During Pre-Provisioning
Troubleshoot Windows Autopilot TPM attestation error 0x81039024 during pre-provisioning or self-deploying mode when Windows 11 blocks attestation because known TPM vulnerabilities were detected.
0x87D1041C Fix Intune Win32 App Detection Failed 0x87D1041C
Troubleshoot Intune Win32 app installs that finish but report detection failed or 0x87D1041C because the detection rule cannot prove the app is installed.
0x87D1FDE8 Fix Intune Remediation Failed 0x87D1FDE8 for Configuration Profiles
Troubleshoot Intune 0x87D1FDE8 remediation failed errors by checking CSP scope, OS support, assignments, sync state, and device-side MDM logs fast now.
0x87D300C9 Fix Intune Win32 App Timeout 0x87D300C9
Troubleshoot Intune Win32 app deployments that show The unmonitored process is in progress, however it may timeout, error 0x87D300C9, in Company Portal or the Intune admin center.
0xC1036501 Fix Autopilot Self-Deploying Mode Error 0xC1036501: Multiple MDM Configurations in Microsoft Entra ID
Troubleshoot Autopilot self-deploying mode error 0xC1036501 when multiple MDM configurations in Microsoft Entra ID block automatic Intune enrollment.
0xC1900101 Fix Windows 11 24H2 Intune Feature Update Error 0xC1900101
Troubleshoot Windows 11 24H2 feature update rollbacks from Intune when devices fail with 0xC1900101 or phase-specific driver rollback codes.
Common Common BSOD Error Codes and Fixes
The most common Windows Blue Screen of Death (BSOD) error codes, what they mean, and how to fix them.
Fix Fix Windows 11 25H2 Not Installing from Intune Feature Update Policy
Troubleshoot Windows 11 25H2 devices that stay in Offering, never download, or never install after targeting them with an Intune Feature Update policy.
Fix Fix Teams Meeting Add-in Missing from Outlook After New Teams Update
Fix the Teams Meeting Add-in missing from classic Outlook after a New Teams update by checking COM add-ins, LoadBehavior, TeamsMeetingAddin files, and policy blocks.
Fix Fix Intune Settings Catalog Policy Conflicts in 2026
Fix Intune Settings Catalog policy conflicts by tracing per-setting status, assignment failures, scope, Windows support, and duplicate CSP values.
Fix Fix Autopilot Hardware Hash Import Error 400 Edm.Binary in Intune
Fix Windows Autopilot hardware hash CSV import error 400 Edm.Binary by validating the hash, headers, encoding, and Intune import workflow.
Fix Fix Admin Locked Out After MFA Enforcement in Microsoft 365
Recover from a Microsoft 365 admin lockout after MFA enforcement or Conditional Access blocks the admin portal.
Fix Fix macOS Platform SSO Error 10001 in Intune
Troubleshoot macOS Platform SSO error 10001 in Intune by checking the SSO payload, Company Portal version, profile conflicts, and Entra device registration.
Fix Fix Intune BitLocker Recovery Key Escrow Failures
Troubleshoot Intune BitLocker recovery key escrow failures by checking Entra join, silent encryption prerequisites, policy conflicts, WinRE, TPM, and RBAC.
Fix Fix Autopilot Import Errors 806 and 808 in Intune
Fix Autopilot import errors 806 and 808 in Intune by removing stale device records, validating tenant ownership, and preparing support evidence.
Fix Fix Intune Error 65000 Type 2 in Settings Catalog and Endpoint Security Policies
Troubleshoot Intune error 65000 type 2 by checking per-setting status, DMEP logs, scope conflicts, unsupported Windows settings, and assignment failures.
Fix Fix Intune Error 80180003: This User Is Not Authorized to Enroll
Fix Intune error 80180003 and 0x801c0003 by validating user licensing, enrollment limits, Windows edition support, and Microsoft Entra device join policy.
Fix Fix Samsung C: Drive Access Denied on Windows 11 After Galaxy Connect
Fix Samsung Windows 11 C: drive access denied failures caused by Galaxy Connect or Samsung Continuity Service with Microsoft's validated recovery steps.
Fix Fix Kerberos Authentication Failures Before the July 2026 RC4 Enforcement Update
Prepare for Kerberos RC4 hardening and fix authentication failures before the July 2026 Windows update enforces AES-only defaults on domain controllers.
Fix Fix Local Windows Autopilot Reset When Deny Access from Network Blocks the Local Admin
Fix local Windows Autopilot Reset when an Intune User Rights policy adds the local admin to Deny access to this computer from the network and CTRL+WIN+R stops working.
Fix Fix Intune Connector gMSA SeLogonAsServicePrivilegeMissing in Autopilot Hybrid Join
Fix SeLogonAsServicePrivilegeMissing in the Intune ODJ connector for Autopilot hybrid join by updating the build and adding Microsoft's bypass key.
Fix Fix Windows Autopilot Hybrid Join Quality Updates Not Installing During OOBE
Troubleshoot Windows Autopilot Microsoft Entra hybrid join deployments where quality updates time out during OOBE when Allow OOBE Updates is enabled in the Enrollment Status Page profile.
Fix Fix Kerberos and NTLM Authentication Failures from Duplicate SIDs After Windows Hardening
Troubleshoot Kerberos and NTLM failures caused by duplicate SIDs after Windows hardening updates, including Event ID 6167, rollback limits, and rebuild guidance.
Fix Fix Windows Autopilot Error 809: Assigned Profile Does Not Exist
Troubleshoot Windows Autopilot error 809 when a deleted deployment profile leaves devices stuck without a valid assigned profile during OOBE.
Fix Fix Windows Autopilot Error 815: No Profile Assigned and No Default Profile Found
Troubleshoot Windows Autopilot error 815 when a device has no assigned deployment profile and no default profile exists to catch it during OOBE.
Fix Fix Intune Connector Error `MSA account <accountName> is not valid` in Autopilot Hybrid Join
Fix the Intune Connector for Active Directory error `MSA account <accountName> is not valid` by validating connector build, AD replication, and MSA prerequisites.
Fix Fix DFCI Enrollment Failures on Windows 11 24H2 Pro During Autopilot
Troubleshoot DFCI enrollment failures on Windows 11 24H2 Pro during Autopilot, including KB5046740, edition step-up, OEM readiness, and Intune checks.
Fix Fix Autopilot Self-Deploying Mode When ESP Account Setup Does Not Appear for FIDO2 (YubiKey) Sign-In
Troubleshoot Windows Autopilot self-deploying mode on Shared PC devices when the Enrollment Status Page account setup phase does not appear after a user signs in with a FIDO2 security key such as a YubiKey.
Fix Fix Windows Autopilot Report False Failure After a Successful Deployment
Troubleshoot false Failed status in the Windows Autopilot report when the device actually finished provisioning successfully, and verify the real state with event logs, Graph, and Intune exports.
Fix Fix Windows Autopilot Failures When the Real-Time Clock Is Off by Several Minutes
Fix Windows Autopilot TPM attestation and ESP failures caused by incorrect device time, and verify the right logs, ports, and clock-sync checks before reimaging.
Fix Fix Windows LAPS Not Applying During Autopilot Pre-Provisioning Technician Flow
Fix Windows LAPS not applying during Windows Autopilot pre-provisioning technician flow by validating the Microsoft-known issue, checking LAPS event evidence, and moving verification to the user phase.
Fix Fix Autopilot Device Preparation When Local Administrator Settings Skip Provisioning
Fix Windows Autopilot device preparation when Microsoft Entra local administrator settings cause provisioning to skip and users reach the desktop without expected apps.
Fix Fix Windows Autopilot Reports and Graph API When Only 50 Deployment Records Show Up
Fix the Windows Autopilot 50-record limit in Intune and Microsoft Graph by using skipToken pagination or the AutopilotV1DeploymentStatus export API.
Fix Fix Autopilot Device Preparation Security Group Membership Failures That Leave Devices Non-Compliant
Fix Windows Autopilot device preparation security group membership failures that leave devices non-compliant, and verify Intune Provisioning Client ownership and enrollment time grouping.
Fix Fix Autopilot TPM Attestation Failures on ST Micro and Nuvoton TPMs During Pre-Provisioning or Self-Deploying Mode
Troubleshoot Windows Autopilot TPM attestation failures on ST Micro and Nuvoton TPMs that support RSA 3072bit during pre-provisioning or self-deploying mode.
Fix Fix Autopilot TPM Attestation Timed Out on Infineon SLB9672 Platforms
Fix Windows Autopilot TPM attestation timed out errors on devices with Infineon SLB9672 TPM firmware 15.22, and verify the right OEM-first remediation path.
Fix Fix Windows Autopilot Reset Error: Could Not Find the Recovery Environment
Fix Windows Autopilot Reset when the device shows 'Autopilot reset ran into trouble. Could not find the recovery environment' and local reset fails because WinRE is disabled or misconfigured.
Fix Fix Required Apps Not Showing on ESP After Windows Autopilot Reset
Fix Windows Autopilot Reset when required apps are not shown on the Enrollment Status Page and users reach the desktop before those apps finish installing.
Fix Fix Autopilot Device ESP When User-Targeted Blocking Apps Are Ignored
Fix Windows Autopilot device ESP when user-targeted blocking apps are ignored by moving the ESP profile to device groups and validating app targeting.
Fix Fix Windows Autopilot Hybrid Join When User-Driven Deployment Does Not Grant Administrator Rights
Fix Windows Autopilot user-driven Microsoft Entra hybrid join when the deployment profile is set to Administrator but the enrolling user still lands as a standard user.
Fix Fix Intune Connector Error `Cannot start service ODJConnectorSvc on computer '.'` in Autopilot Hybrid Join
Fix the Intune Connector error `Cannot start service ODJConnectorSvc on computer '.'` by validating MSA replication, Log on as a service rights, and connector OU prerequisites.
Fix Fix Autopilot Error: That Username Belongs to Another Organization
Fix the Windows Autopilot OOBE error that says a username belongs to another organization by checking tenant IDs, registration, and profile state.
Fix Fix Autopilot BitLocker Defaulting to XTS-AES 128-bit When 256-bit Is Configured
Stop Windows Autopilot devices from silently encrypting with XTS-AES 128-bit when your Intune BitLocker policy requires XTS-AES 256-bit. Cover the known race condition, ESP timing, and decrypt/re-encrypt repair.
Fix Fix WSUS Sync Operations That Time Out in July 2026
Microsoft's July 2026 WSUS service degradation can slow syncs or time out. Here's how to confirm impact, reduce noise, and keep Windows patching moving.
Fix Fix Windows 11 25H2 Not Installing from Intune Because of a Safeguard Hold
Troubleshoot Windows 11 25H2 devices that stay stuck in Intune when Microsoft blocks the target version with a safeguard hold.
Fix Fix Dell Intel IPF Driver Performance Issues After KB5095093
Troubleshoot the July 2026 Windows 11 25H2 issue where some Dell devices show poor performance after KB5095093 because of an Intel Innovation Platform Framework driver conflict.
Troubleshoot Troubleshoot Windows Autopilot Device Preparation Failures in Intune
Fix Autopilot device preparation failures in Intune by checking enrollment time grouping, app status, scripts, RBAC, and known OOBE issues.
Troubleshooting Troubleshooting Windows LAPS Password Rotation Failures in Intune
Diagnose and fix Windows LAPS password rotation failures in Intune-managed environments. Covers policy conflicts, backup directory mismatches, and device state issues.