Intune Provisioning 14 min read

Windows Autopilot Troubleshooting Guide

Comprehensive troubleshooting strategies for resolving hardware hash registration failures, Enrollment Status Page (ESP) timeouts, and provisioning blocks.

1. Capturing and Registering Hardware Hashes

The foundational requirement for any Autopatch or Autopilot deployment is an accurate hardware hash. When registration fails or devices fall back to standard OOBE login screens, examine the hash export script output.

# Run in PowerShell (Admin) during OOBE (Shift + F10)
Install-Script -Name Get-WindowsAutopilotInfo -Force
Set-ExecutionPolicy Unrestricted -Scope Process -Force
Get-WindowsAutopilotInfo -OutputFile C:\AutopatchHash.csv

2. Resolving Enrollment Status Page (ESP) Timeouts

ESP tracking freezes are frequently caused by large Win32 application payloads or hidden dependency loops during the device preparation phase. Always isolate tracking to critical applications rather than forcing all user-assigned software blocks.

  • Log Collection: Press Ctrl + Shift + D during ESP execution to gather diagnostic logs.
  • Timeout Thresholds: Extend default ESP thresholds if deploying monolithic packages like Office LTSC or full Adobe Creative Suites.
  • Strict App Targeting: Limit blocking apps in ESP profiles strictly to security agents (e.g., EDR/MDE) and core identity clients.

3. Common Error Codes & Immediate Fixes

Keep track of standard hex error codes returned during provisioning failures to streamline remediation workflows:

0x80180014 (Enrollment Blocked): Tenant restriction rules or maximum device limit reached per user account.
0x80070775 (The user profile failed): Account synchronization conflict during Hybrid Azure AD join pre-provisioning.
0x80ca0006 (WNS Connection Error): Network firewall blocking Push Notification Services required for Intune check-ins.

4. Diagnostic Log Extraction & Analysis

When automated triage fails, pull full diagnostics using the built-in diagnostic tool package. Extract logs via command line to a connected USB flash drive or inspect files locally under C:\ProgramData\Microsoft\IntuneManagementExtension\Logs.

Read more

Technical Discussion & Q&A

Secure PostgreSQL Board

Join the Engineering Discussion

Loading discussion threads...

Akash Nagapure

Akash Nagapure

Microsoft Intune and VMware Architect

Microsoft Intune and VMware Architect specialized in designing scalable cloud infrastructure and zero-trust modern workspace solutions.

Was this guide helpful?

Loading community feedback...