Windows 10 1803-通过Provisioning Package加入AD [英] Windows 10 1803 - Join AD via Provisioning Package

问题描述

你好！
现在，我们正在使用Windows 10 1709部署设备，并使用Provisioning程序包将它们加入Azure Active Directory.这很完美(除了批量令牌需要每30天刷新一次的事实除外).

但是，我们希望切换到1803，但是预配包在加入AD时失败.所有其他设置，例如升级到企业"等均已正确配置，但实际上加入AD失败.

我已经在ICD 10.0.17134.1(1803)中完全重新创建了该程序包，但仍然无济于事.

Eventlog *(provisioning-diagnostics-provider)中的消息如下:

Hello!
Right now we are deploying devices with Windows 10 1709, and joining them to Azure Active Directory using Provisioning packages. This works perfect (except for the fact that the Bulk token needs to be refreshed every 30 days).

However, we wish to make the switch to 1803, but the provisioning package failes while joining the AD. All other settings, like the Upgrade to Enterprise etc are configured correctly, but actually joining AD fails.

I've completely recreated the package in ICD 10.0.17134.1 (1803) and still, to no avail.

The message in the Eventlog *(provisioning-diagnostics-provider) is the one below:

ProvXML category 'DeviceAADJoin' failed with '0x80070057' at CSP node 'AADJ/BPRT'. Provisioning failed

这是来自AAD事件日志:

This is from AAD Eventlog:

Error: 0xCAA5001C Token broker operation failed.Operation name: AddAccount, 
Error: -895352821 (0xcaa2000b), Description: AADSTS50001: Resource 'https://enrollment.manage.microsoft.com/' is disabled.
Trace ID: e89d2d37-1a08-40fd-8655-33217cc60700Correlation ID: 68407247-141e-4ad0-bece-143152bfcbcfTimestamp: 2018-08-17 00:14:11Z
Logged at webaccountprocessor.cpp, line: 532, method: AAD::Core::WebAccountProcessor::ReportOperationError.

这发生在具有已确认帐户的2个不同的Azure域(测试和生产)上.

This happens on 2 different Azure domains (test and production) with confirmed accounts.

该包的实际XML使用

< Authority> https://login.microsoftonline.com/common</Authority>

<Authority>https://login.microsoftonline.com/common</Authority>

(由ICD自动生成).但是，此URL是404吗?

(automatically generated by the ICD). This URL however, 404's?

推荐答案

Could you please elaborate on how you have configured provisioning package for the scenario? By any chance are you using Autopilot if yes let us know.

这篇关于Windows 10 1803-通过Provisioning Package加入AD的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！