The device will reinitiate the device registration process through the scheduled task. To fix the problem, unregister the device by running dsregcmd /leave at an elevated command prompt, and restart the device. The device fails to complete the device registration process because it was registered previously.Azure AD Connect Sync creates a pending device object for this device in Azure AD.The device object was moved back to the OU in the sync scope.Therefore, it deletes the device in Azure AD. Azure AD Connect Sync recognizes this change as the device object being deleted in the on-premises Active Directory.
The device object is moved to another organizational unit (OU) that isn't in the sync scope in Azure AD Connect Sync.This problem can occur in the following scenario: The state of a registered device is changed to pending Troubleshooting hybrid Azure Active Directory joined devices.To troubleshoot a device registration problem, see: This problem can be caused by several factors, such as that the device can't connect to the registration service. Sync a new on-premises domain joined device to Azure ADĪ new on-premises device can get stuck in a pending state if it can't complete the device registration process. There are two scenarios in which a device can be stuck in a pending state. How a device gets stuck in a pending state For more information about the device registration process, see How it works: Device registration.įor more information about how to troubleshoot pending devices, see the following video: This is because the device must be added to the Azure AD directory before it can be registered. When you configure a Hybrid Azure AD join task in the Azure AD Connect Sync for your on-premises devices, the task will sync the device objects to Azure AD, and temporarily set the registered state of the devices to "pending" before the device completes the device registration. The pending state exists only for hybrid Azure AD-joined devices.
When the registered state of a device is pending, the device can't complete any authorization or authentication requests, such as requesting a Primary Refresh token for single sign-on, or applying device-based Conditional Access policies. Pending devices are devices that are synced to Azure Active Directory (Azure AD) from your on-premises Active Directory, but haven't completed registration with the Azure AD device registration service. Pending devices in Azure Active Directory
0 kommentar(er)
