locked
New Intune Configuration - Getting Errors RRS feed

  • Question

  • I have setup a new Intune 'hybrid' configuration with ConfigMgr 1511.  I have added the domain to the tenant, setup dirsync, added the Intune Subscription to ConfigMgr, Configured the iOS setting (cert), and I am having enrollment issues.  Looking at the cloudusersync.log I am getting some errors that I do not know what they are and could use some help.

    ______________________________________________________________________________

    ERROR: SetLicensedUsers exception Microsoft.Management.Services.Common.SecurityTokenValidationException: An error has occurred - Operation ID (for customer support): 54c30b40-a91c-4920-8342-572b6b6e850f - Activity ID: a28fb67f-547e-42e2-8d13-a0219c9aba73 - Url: https://fef.msua01.manage.microsoft.com/StatelessConnectorService/$batch~~   at Microsoft.Management.Services.OData.Client.ODataServicePutContext`1.<ExecuteAsync>d__2.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.V2ContextExecutor.<>c.<<ExecuteContextAsync>b__7_0>d.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.V2ContextExecutor.<ExecuteContextAsyncInternal>d__9.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.FabricServiceSession.<>c__DisplayClass18_0.<<ExecuteAsync>b__0>d.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.FabricServiceSession.<ExecuteWithRetryAsync>d__22.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.FabricServiceSession.<ExecuteAsync>d__18.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.DistributedQuery.BasePartitionContext.<OnExecuteAsync>d__30.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.DistributedQuery.BaseP SMS_CLOUD_USERSYNC 1/19/2016 1:31:40 PM 9480 (0x2508)
    STATMSG: ID=10001 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_CLOUD_USERSYNC" SYS=SCCM.ad.csufresno.edu SITE=CSF PID=4744 TID=9480 GMTDATE=Tue Jan 19 21:31:40.212 2016 ISTR0="SetLicensedUsers" ISTR1="One or more errors occurred." ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_CLOUD_USERSYNC 1/19/2016 1:31:40 PM 9480 (0x2508)
    WARNING: Exception occured while trying to license users System.AggregateException: One or more errors occurred. ---> Microsoft.Management.Services.Common.SecurityTokenValidationException: An error has occurred - Operation ID (for customer support): 54c30b40-a91c-4920-8342-572b6b6e850f - Activity ID: a28fb67f-547e-42e2-8d13-a0219c9aba73 - Url: https://fef.msua01.manage.microsoft.com/StatelessConnectorService/$batch~~   at Microsoft.Management.Services.OData.Client.ODataServicePutContext`1.<ExecuteAsync>d__2.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.V2ContextExecutor.<>c.<<ExecuteContextAsync>b__7_0>d.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.V2ContextExecutor.<ExecuteContextAsyncInternal>d__9.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.FabricServiceSession.<>c__DisplayClass18_0.<<ExecuteAsync>b__0>d.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.FabricServiceSession.<ExecuteWithRetryAsync>d__22.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.FabricServiceSession.<ExecuteAsync>d__18.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.DistributedQuery.BasePartitionContext.<OnExecuteAsync>d__30.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebugge SMS_CLOUD_USERSYNC 1/19/2016 1:31:40 PM 9480 (0x2508)
    STATMSG: ID=10002 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_CLOUD_USERSYNC" SYS=SCCM.ad.csufresno.edu SITE=CSF PID=4744 TID=9480 GMTDATE=Tue Jan 19 21:31:40.212 2016 ISTR0="" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_CLOUD_USERSYNC 1/19/2016 1:31:40 PM 9480 (0x2508)
    Starting user delta sync, raise failure status messages = False SMS_CLOUD_USERSYNC 1/19/2016 1:36:40 PM 9480 (0x2508)
    Total received users from SCCM to be removed from cloud = 0 SMS_CLOUD_USERSYNC 1/19/2016 1:36:40 PM 9480 (0x2508)
    Successfully removed users from cloud 0 SMS_CLOUD_USERSYNC 1/19/2016 1:36:40 PM 9480 (0x2508)
    UserDeltaSync:- Users Removed = 0 SMS_CLOUD_USERSYNC 1/19/2016 1:36:40 PM 9480 (0x2508)
    UserDeltaSync - Fetching batches of Users to be licensed : batch [0] starting from ItemKey [0] SMS_CLOUD_USERSYNC 1/19/2016 1:36:40 PM 9480 (0x2508)
    ERROR: SetLicensedUsers exception Microsoft.Management.Services.Common.SecurityTokenValidationException: An error has occurred - Operation ID (for customer support): b3601b83-d9c2-4af7-85d6-363bdbecc98f - Activity ID: 4340ffa4-bbf6-42be-9178-75e77aa56225 - Url: https://fef.msua01.manage.microsoft.com/StatelessConnectorService/$batch~~   at Microsoft.Management.Services.OData.Client.ODataServicePutContext`1.<ExecuteAsync>d__2.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.V2ContextExecutor.<>c.<<ExecuteContextAsync>b__7_0>d.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.V2ContextExecutor.<ExecuteContextAsyncInternal>d__9.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.FabricServiceSession.<>c__DisplayClass18_0.<<ExecuteAsync>b__0>d.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.FabricServiceSession.<ExecuteWithRetryAsync>d__22.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.FabricServiceSession.<ExecuteAsync>d__18.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.DistributedQuery.BasePartitionContext.<OnExecuteAsync>d__30.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.DistributedQuery.BaseP SMS_CLOUD_USERSYNC 1/19/2016 1:36:40 PM 9480 (0x2508)
    STATMSG: ID=10001 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_CLOUD_USERSYNC" SYS=SCCM.ad.csufresno.edu SITE=CSF PID=4744 TID=9480 GMTDATE=Tue Jan 19 21:36:40.336 2016 ISTR0="SetLicensedUsers" ISTR1="One or more errors occurred." ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_CLOUD_USERSYNC 1/19/2016 1:36:40 PM 9480 (0x2508)
    WARNING: Exception occured while trying to license users System.AggregateException: One or more errors occurred. ---> Microsoft.Management.Services.Common.SecurityTokenValidationException: An error has occurred - Operation ID (for customer support): b3601b83-d9c2-4af7-85d6-363bdbecc98f - Activity ID: 4340ffa4-bbf6-42be-9178-75e77aa56225 - Url: https://fef.msua01.manage.microsoft.com/StatelessConnectorService/$batch~~   at Microsoft.Management.Services.OData.Client.ODataServicePutContext`1.<ExecuteAsync>d__2.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.V2ContextExecutor.<>c.<<ExecuteContextAsync>b__7_0>d.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.V2ContextExecutor.<ExecuteContextAsyncInternal>d__9.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.FabricServiceSession.<>c__DisplayClass18_0.<<ExecuteAsync>b__0>d.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.FabricServiceSession.<ExecuteWithRetryAsync>d__22.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.FabricServiceSession.<ExecuteAsync>d__18.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.DistributedQuery.BasePartitionContext.<OnExecuteAsync>d__30.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebugge SMS_CLOUD_USERSYNC 1/19/2016 1:36:40 PM 9480 (0x2508)
    STATMSG: ID=10002 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_CLOUD_USERSYNC" SYS=SCCM.ad.csufresno.edu SITE=CSF PID=4744 TID=9480 GMTDATE=Tue Jan 19 21:36:40.352 2016 ISTR0="" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_CLOUD_USERSYNC 1/19/2016 1:36:40 PM 9480 (0x2508)
    Starting user delta sync, raise failure status messages = False SMS_CLOUD_USERSYNC 1/19/2016 1:41:40 PM 9480 (0x2508)
    Total received users from SCCM to be removed from cloud = 0 SMS_CLOUD_USERSYNC 1/19/2016 1:41:40 PM 9480 (0x2508)
    Successfully removed users from cloud 0 SMS_CLOUD_USERSYNC 1/19/2016 1:41:40 PM 9480 (0x2508)
    UserDeltaSync:- Users Removed = 0 SMS_CLOUD_USERSYNC 1/19/2016 1:41:40 PM 9480 (0x2508)
    UserDeltaSync - Fetching batches of Users to be licensed : batch [0] starting from ItemKey [0] SMS_CLOUD_USERSYNC 1/19/2016 1:41:40 PM 9480 (0x2508)
    ERROR: SetLicensedUsers exception Microsoft.Management.Services.Common.SecurityTokenValidationException: An error has occurred - Operation ID (for customer support): 2f2bb3fe-622c-4d9f-b415-6a780b847707 - Activity ID: 841b0f12-145c-4acd-9e40-81cb94ec929b - Url: https://fef.msua01.manage.microsoft.com/StatelessConnectorService/$batch~~   at Microsoft.Management.Services.OData.Client.ODataServicePutContext`1.<ExecuteAsync>d__2.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.V2ContextExecutor.<>c.<<ExecuteContextAsync>b__7_0>d.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.V2ContextExecutor.<ExecuteContextAsyncInternal>d__9.MoveNext()~~--- End of stack trace from previous location where exception was thrown ---~~   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~   at Microsoft.Management.Services.OData.Client.FabricServiceSession.<>c__DisplayClass18_0.

    ______________________________________________________________

    ______________________________________________________________________________
    ______________________________________________________________________________
    ______________________________________________________________________________
    Tuesday, January 19, 2016 9:47 PM

Answers

  • Ok got this figured out.  It appears that there is a problem with 1511, maybe others, that if you change tenants the cert does not properly update even after you remove the role and subscription.  The errors that we were getting was a result of the database and CM having two different certs.  The cert's thumbprint did not match and had to be manually removed from the registry and database then those roles re-added along with the subscription.  After that a new cert was issued and both locations had the proper thumbprint and everything worked.
    Wednesday, January 20, 2016 1:12 AM
  • We start with this thread (https://social.technet.microsoft.com/Forums/en-US/271e064b-1712-4f67-ac94-873b66aa9a40/enrolling-ios-devices-not-shown-in-configuration-manager-console?forum=microsoftintuneprod) and contacted Intune Support  ultimatly you have to get the cert thumbprint from an issued cert and conpare to the cert in the SQL database, if differnet then you are up against the same issue I was.  There was a writeup on how to compare the cert thumbprints, I will attempt to locate it.
    Wednesday, February 3, 2016 10:29 PM
  • Hi, where do we find these certificates. We are getting the same errors...
    This should be some help to you. http://ronnydejong.com/2013/03/02/enrolling-ios-devices-not-shown-in-configuration-manager-console-sysctr-mdm-windowsintune/
    Wednesday, February 3, 2016 10:37 PM

All replies

  • Ok got this figured out.  It appears that there is a problem with 1511, maybe others, that if you change tenants the cert does not properly update even after you remove the role and subscription.  The errors that we were getting was a result of the database and CM having two different certs.  The cert's thumbprint did not match and had to be manually removed from the registry and database then those roles re-added along with the subscription.  After that a new cert was issued and both locations had the proper thumbprint and everything worked.
    Wednesday, January 20, 2016 1:12 AM
  • that if you change tenants the cert does not properly update even after you remove the role and subscription
    Any change that you forgot to mention that tiny little detail in your initial question? ;-)

    Torsten Meringer | http://www.mssccmfaq.de

    Wednesday, January 20, 2016 7:14 AM
  • Hi, where do we find these certificates. We are getting the same errors...
    Wednesday, February 3, 2016 10:01 PM
  • We start with this thread (https://social.technet.microsoft.com/Forums/en-US/271e064b-1712-4f67-ac94-873b66aa9a40/enrolling-ios-devices-not-shown-in-configuration-manager-console?forum=microsoftintuneprod) and contacted Intune Support  ultimatly you have to get the cert thumbprint from an issued cert and conpare to the cert in the SQL database, if differnet then you are up against the same issue I was.  There was a writeup on how to compare the cert thumbprints, I will attempt to locate it.
    Wednesday, February 3, 2016 10:29 PM
  • Hi, where do we find these certificates. We are getting the same errors...
    This should be some help to you. http://ronnydejong.com/2013/03/02/enrolling-ios-devices-not-shown-in-configuration-manager-console-sysctr-mdm-windowsintune/
    Wednesday, February 3, 2016 10:37 PM