Device registration issue

Question

Device registration state of on-premises synced computer account frequently changing as "Pending". Please assist with other troubleshooting steps.

User is active and logging daily.

User tried running "dsregcmd /leave" from administrator prompt and restarted.

Removed device from sync and synced again, no luck

Device can able to communicate successfully with the following Microsoft endpoints:

• https://enterpriseregistration.windows.net
• https://login.microsoftonline.com
• https://device.login.microsoftonline.com
• https://autologon.microsoftazuread-sso.com

Answer 1

Hello @Ramkumar R
Thank you for Reaching Out Microsoft Q&A Platform.
I understand that the device registration state of your on-premises synced computer account frequently changes to "Pending."  

The device falls under pending state if the Primary Refresh Token (PRT) is unavailable for the user's device, the following scenarios could be potential causes:

1. The device object is moved to another organizational unit (OU) that isn't in the sync scope in Microsoft Entra Connect Sync.
2. Microsoft Entra Connect Sync recognizes this change as the device object being deleted in the on-premises Active Directory. Therefore, it deletes the device in Microsoft Entra ID.
3. The device object was moved back to the OU in the sync scope.
4. Microsoft Entra Connect Sync creates a pending device object for this device in Microsoft Entra ID.
5. The device fails to complete the device registration process because it was registered previously.

To fix the problem, unregister the device by running dsregcmd /leave at an elevated command prompt, and restart the device.  The device will reinitiate the device registration process through the scheduled task. For Windows 10-based devices, you can also re initiate manually by the running Auto device join task. Go to Task Scheduler Library > Microsoft > Windows > Workplace Join > Automatic-Device-Join Task.

Note: The user must be a synced user. Additionally, if this is the first time configuring the device, ensure that the device is in line of sight to the domain controller. This means the device and the domain controller should be on the same network and able to communicate with each other.

For Additional Information Refer this Document: https://learn.microsoft.com/en-us/troubleshoot/entra/entra-id/dir-dmns-obj/pending-devices#the-state-of-a-registered-device-is-changed-to-pending
Do let us know if you any further queries.