Some Windows users encountered Server error code 801c03ed during Windows Autopilot device enrollment. If you face this error, then this post will help you.
Following is the exact error message users get.
Something went wrong.
Confirm that you are using the correct sign-in information and that your organisation uses this feature. You can try to do this again or contact your system administrator with the error code 801c03ed.
Additional problem information:
Server error code: 801c03ed
Server message: Administrator policy does not allow user
What is Azure Autopilot Device Enrollment Server error code 801c03ed?
The Azure Autopilot Device Enrollment Server error code 801c03ed indicates that device join is not allowed by admin policy. One will encounter this error if the Intune Settings are not configured to allow the user to connect. Only the administrator of that network has the privilege to make changes. They can either make it all-encompassing or allow that particular user.
Fix Server error code 801c03ed
If you get Server error code 801c03ed in Windows Autopilot Device Enrollment, follow the solutions mentioned below.
- Ask the user to disconnect, reconnect, and then try
- Check if all users are allowed to join from the Intune Settings
- Check if the Azure AD device object is enabled
- Delete the device and then import it from the Intune Settings
Let us talk about them in detail.
1] Ask the user to disconnect, reconnect, and then try
Sometimes, the changes made to the user settings are not registered until the user has not logged out and then logged in. So, if you are an admin, ask the user to sign out once, reboot their device, and sign back in. If that is to no avail, you need to perform the tasks mentioned below. Remember that only an admin can make the changes mentioned henceforth.
2] Check if all users are allowed to join from the Intune Settings
First of all, we need to check if all the users are allowed to join or if the user who’s trying to log in has permission to do so or not. In this tutorial, we will show you can allow all users, but if you want to customize settings, you can also do that.
- First of all, login to the Azure portal.
- Then go to Devices > Device Settings.
- Now, look for Users may join devices to Azure AD and set it to All. If you want to give access to selected users, go to that option.
- Finally, save the changes you made and leave the settings panel.
Finally, check if the issue is resolved.
3] Check if the Azure AD device object is enabled
In case the AD device object is disabled in Intune, no user will be able to join. Since we too, face the same issue, we will check if the settings are disabled. In case it is disabled, we have to enable the same, follow the steps mentioned below.
- Open Intune Settings.
- In the Devices option, go to Encroll devices.
- Now, go to Devices and then look for the device that’s failing to connect with its serial number.
- Once you find the device, click on it and then select Enable.
Now, check if the issue is resolved.
4] Delete the device and then import it from the Intune Settings
Azure AD object acts as an Autopilot’s anchor for group membership and targeting. In case the object is deleted, you will get various errors, including the one in question. Hence, we can delete the Autopilot hash of that device and then import it again. It is pretty simple and won’t take much of your time. In order to delete, follow the steps mentioned below.
- Login to the Intune admin center as an administrator.
- Next, go to Devices.
- You need to navigate to Windows > Windows enrollment.
- Now, again click on Devices.
- Then go to the trouble-causing device, select it, and click on Delete.
- Click on Yes when prompted.
- After a couple of minutes, go to reimport the hash and check if the issue is resolved.
We hope that you can resolve the issue using the solutions mentioned in this post.
Read: In-place upgrade is not supported on Azure Virtual Machines
What is error code 801c3ed?
801c03ed is an Autopilot error that is caused when the user account doesn’t have permission to connect to the network. If the user is legit, the admin can grant them the required access.
Read: Microsoft Azure Import Export Tool: Drive preparation and repair tool
What is error code 801C0003?
Azure login error code 801C0003 is caused when the user enrolls in the maximum number of devices allowed in Intune. You can either, log out on some of the devices or ask the admin to increase the maximum limit.
Also Read: Error CAA50021, Number of retry attempts exceeds expectations.
