You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/windows-365/provisioning-errors.md
+24-56Lines changed: 24 additions & 56 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,12 +2,12 @@
2
2
title: Troubleshoot provisioning errors
3
3
description: Troubleshoot provisioning errors in Windows 365.
4
4
manager: dcscontentpm
5
-
ms.date: 01/20/2025
5
+
ms.date: 01/7/2026
6
6
ms.topic: troubleshooting
7
-
ms.reviewer: mattsha, erikje
7
+
ms.reviewer: mattsha, erikje, mmoyaaceves
8
8
ms.custom:
9
-
- pcy:Provisioning\Provisioning Failure
10
-
- sap:WinComm User Experience
9
+
- sap:Provisioning\Provisioning Failure
10
+
- pcy:WinComm User Experience
11
11
ms.collection:
12
12
- M365-identity-device-management
13
13
- tier2
@@ -26,27 +26,21 @@ If the SCP configuration doesn't exist or can't be discovered by using the virtu
26
26
27
27
To understand more about the SCP and learn how to configure it, see the [Microsoft Entra documentation](/azure/active-directory/devices/hybrid-azuread-join-managed-domains).
28
28
29
-
### Suggested solution
30
-
31
-
Confirm with your identity team that the SCP exists for all target forests.
29
+
**Suggested solution:** Confirm with your identity team that the SCP exists for all target forests.
32
30
33
31
## Azure network connection isn't healthy
34
32
35
33
Cloud PC provisioning is blocked if the associated Azure network connection (ANC) isn't healthy.
36
34
37
35
The ANC refreshes every six hours. Provisioning fails if the ANC refresh fails while provisioning is underway.
38
36
39
-
### Suggested solution
40
-
41
-
Make sure that the ANC is healthy and retry the provisioning.
37
+
**Suggested solution:** Make sure that the ANC is healthy and retry the provisioning.
42
38
43
39
## Disk allocation error
44
40
45
41
Windows 365 provisioned the Cloud PC but didn't allocate the full OS storage according to what the user should have received based on their assigned Windows 365 license. As a result, the user can't see or use the full storage that they were assigned.
46
42
47
-
### Suggested solution
48
-
49
-
Retry provisioning.
43
+
**Suggested solution:** Retry provisioning.
50
44
51
45
## Domain join failed
52
46
@@ -58,9 +52,7 @@ Windows 365 failed to join the Cloud PC to your on-premises Active Directory (AD
58
52
59
53
`JsonADDomainExtension` is the Azure function used to perform this domain join. Make sure that everything required for this domain join to succeed is in place.
60
54
61
-
### Suggested solution
62
-
63
-
Attach an Azure virtual machine (VM) to the configured virtual network and perform a domain join using the credentials provided.
55
+
**Suggested solution:** Attach an Azure virtual machine (VM) to the configured virtual network and perform a domain join using the credentials provided.
64
56
65
57
<aname='hybrid-azure-ad-join-failed'></a>
66
58
@@ -74,9 +66,7 @@ Another factor to consider is your on-premises AD replication time. Make sure th
74
66
75
67
If your organization uses Active Directory Federation Services (ADFS), this registration process is optimized and might result in Cloud PC provisioning being completed faster than a Microsoft Entra Connect sync might be.
76
68
77
-
### Suggested solution
78
-
79
-
Check to see if the AD object:
69
+
**Suggested solution:** Check to see if the AD object:
80
70
81
71
- Appears in the correct OU.
82
72
- Is successfully synced to Microsoft Entra ID before provisioning times out.
@@ -92,33 +82,25 @@ If Intune enrollment fails, make sure that:
92
82
- The Intune tenant is active and healthy.
93
83
- If co-managing Cloud PCs with Intune and Configuration Manager, ensure that the Cloud PC OU isn't targeted for client push installation. Instead deploy the Configuration Manager agent from Intune. For more information, see [Client installation methods in Configuration Manager](/mem/configmgr/core/clients/deploy/plan/client-installation-methods).
94
84
95
-
### Suggested solution
96
-
97
-
Attempt an Intune enrollment using a test device or VM.
85
+
**Suggested solution:** Attempt an Intune enrollment using a test device or VM.
98
86
99
87
## License not found
100
88
101
89
While provisioning is in progress, someone removed the user's Windows 365 license.
102
90
103
-
### Suggested solution
104
-
105
-
Make sure that the user has a valid license associated with it.
91
+
**Suggested solution:** Make sure that the user has a valid license associated with it.
106
92
107
93
## Local administrator permissions error
108
94
109
95
Windows 365 provisioned the Cloud PC but didn't grant the user local administrator permissions as defined by a User Settings policy. As a result, the user won't be an administrator on their Cloud PC. So, they can't make system-level changes or install apps on the system-level context.
110
96
111
-
### Suggested solution
112
-
113
-
Retry provisioning or create a new User Settings policy.
97
+
**Suggested solution:** Retry provisioning or create a new User Settings policy.
114
98
115
99
## Microsoft Teams optimization error
116
100
117
101
Windows 365 provisioned the Cloud PC. However, it didn't configure the Cloud PC to use Microsoft Teams in the mode optimized for running on a remote VM. This optimization doesn't install Microsoft Teams and all of its components. It only sets the configuration that takes effect if you install Microsoft Teams on the Cloud PC. If this optimization isn't set and Microsoft Teams is installed on this device, Microsoft Teams doesn't run in the optimized mode for remote connections.
118
102
119
-
### Suggested solution
120
-
121
-
Retry provisioning.
103
+
**Suggested solution:** Retry provisioning.
122
104
123
105
## Not enough IP addresses available
124
106
@@ -128,61 +110,49 @@ Every Cloud PC provisioning process uses one of the IP addresses provided in the
128
110
129
111
If provisioning fails, it's retried a total of three times. Each time, a new vNic and IP address are allocated. These IP addresses are released in hours, but this allocation can cause issues if the address space is too narrow.
130
112
131
-
### Suggested solution
132
-
133
-
Check the virtual network for available IP addresses, and make sure that there are more than enough IPs available for the retry process to succeed.
113
+
**Suggested solution:** Check the virtual network for available IP addresses, and make sure that there are more than enough IPs available for the retry process to succeed.
134
114
135
115
## Provisioning policy not found
136
116
137
117
While provisioning is in progress, someone deleted the provisioning policy.
138
118
139
-
### Suggested solution
140
-
141
-
Make sure that the provisioning policy is available and assigned to the correct user group.
119
+
**Suggested solution:** Make sure that the provisioning policy is available and assigned to the correct user group.
142
120
143
121
## Request disallowed by policy
144
122
145
123
Windows 365 uses the customer-provided virtual network to perform a vNic ingestion from the Cloud PC into the customer's virtual network. Sometimes an enterprise implements an Azure Policy to restrict the creation of certain Azure objects. Make sure that there are no Azure policies that might restrict Windows 365 from creating Azure objects on your behalf.
146
124
147
-
### Suggested solution
148
-
149
-
View **Policy** in the Azure portal and look for any policy events stopping the Windows 365 service from provisioning the Cloud PC.
125
+
**Suggested solution:** View **Policy** in the Azure portal and look for any policy events stopping the Windows 365 service from provisioning the Cloud PC.
150
126
151
127
## Start menu power icons error
152
128
153
129
Windows 365 provisioned the Cloud PC but didn't hide the shutdown and restart icons in the Start menu. As a result, the user sees the shutdown and restart icons in the Start menu. If the user ends their Cloud PC connection by selecting the shutdown icon, they might need to restart the Cloud PC from the Cloud PC portal before connecting again.
154
130
155
-
### Suggested solution
156
-
157
-
Retry provisioning or create a device configuration policy to [hide the shutdown button](/windows/client-management/mdm/policy-csp-start#start-hideshutdown) and [hide the restart button](/windows/client-management/mdm/policy-csp-start#start-hiderestart).
131
+
**Suggested solution:** Retry provisioning or create a device configuration policy to [hide the shutdown button](/windows/client-management/mdm/policy-csp-start#start-hideshutdown) and [hide the restart button](/windows/client-management/mdm/policy-csp-start#start-hiderestart).
158
132
159
133
## Supported Azure regions for Cloud PCs not listed in the provisioning user interface
160
134
161
-
If a specific region isn't listed in the Cloud PC provisioning user interface (UI), but is listed in the [Windows 365 requirements documentation](/windows-365/enterprise/requirements), Windows 365 might expand in a new region. If your networking infrastructure is in such a region, select **New support request** to open a support ticket for evaluation.
135
+
If a specific region isn't listed in the Cloud PC provisioning user interface (UI), but is listed in the [Windows 365 requirements documentation](/windows-365/enterprise/requirements), Windows 365 might expand in a new region.
136
+
137
+
**Suggested solution:** If your networking infrastructure is in such a region, select **New support request** to open a support ticket for evaluation.
162
138
163
139
## Time zone redirection error
164
140
165
141
Windows 365 provisioned the Cloud PC but didn't configure time zone redirection. As a result, the user doesn't see their local time reflected when connected to their Cloud PC. Instead, they see the standard UTC time.
166
142
167
-
### Suggested solution
168
-
169
-
Retry provisioning or create a Group Policy Object with the **Allow time zone redirection** group policy configured. To learn more about the policy, download the [Group Policy Settings Reference Spreadsheet](https://www.microsoft.com/download/101451).
143
+
**Suggested solution:** Retry provisioning or create a Group Policy Object with the **Allow time zone redirection** group policy configured. To learn more about the policy, download the [Group Policy Settings Reference Spreadsheet](https://www.microsoft.com/download/101451).
170
144
171
145
## User not found
172
146
173
147
While provisioning is in progress, someone deleted the associated user.
174
148
175
-
### Suggested solution
176
-
177
-
Make sure that the assigned user account is valid.
149
+
**Suggested solution:** Make sure that the assigned user account is valid.
178
150
179
151
## Windows reset error
180
152
181
153
Windows 365 provisioned the Cloud PC but didn't disable the built-in Windows reset option. As a result, the user can manually trigger the built-in Windows reset option under **Settings**. The Cloud PC will never successfully complete the reset, which makes the Cloud PC unusable.
182
154
183
-
### Suggested solution
184
-
185
-
Retry provisioning.
155
+
**Suggested solution:** Retry provisioning.
186
156
187
157
## Blocking High Risk Ports: One or more high risk ports couldn't be disabled
188
158
@@ -193,9 +163,7 @@ If you receive this error, some factors to consider are:
193
163
- Sometimes, an enterprise implements an Intune group policy that enables one of these ports by default.
194
164
- Make sure that there are no Intune policies that might override Windows 365's default of disabling these high-risk ports.
195
165
196
-
### Suggested solution
197
-
198
-
Try any of these solutions:
166
+
**Suggested solution:** Try any of these methods:
199
167
200
168
- Retry provisioning.
201
169
- If the device is Intune-enrolled, you can apply the Intune policy to disable the ports.
0 commit comments