Unable to register device on entra id

Question

Unable to register device on entra id

Hrushikesh Kulkarni 0

Unable to login on any app of Microsoft like OneDrive, Outlook, Team. It reaches to Registering your device and fails. I have tried removing the device from Entra ID and removing Credentials from Windows credentials. User's image

Bence Weiszmann 650 Reputation points

2026-08-17T16:57:54.5266667+00:00
Dear @Hrushikesh Kulkarni

Since the device has already been removed from Microsoft Entra ID and the Windows credentials have been cleared, I would first check the current device registration state before making any further changes.

Run the following from Command Prompt or PowerShell:

dsregcmd /status

Check the Device State, User State, and SSO State sections, especially:

AzureAdJoined

DomainJoined

WorkplaceJoined

WamDefaultSet

AzureAdPrt

This should give us a better idea of where the registration process is failing.

I would also check Settings --› Accounts --› Access work or school. If the work account is still listed there, disconnect it and restart the device.

After that, the recovery steps depend on the device join type:

Microsoft Entra registered: reconnect the account from Access work or school --› Connect.

Microsoft Entra joined: from an elevated PowerShell session, run:

dsregcmd /forcerecovery

and complete the sign-in prompt.

Microsoft Entra hybrid joined: run:

dsregcmd /leave

restart the device, and sign in with the domain account. The device should then be registered again automatically.

Since the device was removed from Entra ID, I would also check the Entra audit logs to see when and why the device object was deleted. If the device is showing as Pending, dsregcmd /leave followed by a restart can also trigger a new registration through:

Task Scheduler --› Microsoft --› Windows --› Workplace Join --› Automatic-Device-Join Task

It is also worth checking whether there are duplicate device objects for the same machine, for example an Entra registered and an Entra hybrid joined record. This can sometimes cause inconsistent device evaluation.

If the issue still persists, the Device Registration Troubleshooter Tool can be used for additional diagnostics. In particular, option 5 can be useful for a Pending device, while option 6 checks for issues with the PRT.

I would start with dsregcmd /status though. Since Outlook, Teams and OneDrive are all failing at "Registering your device", this points more towards a device registration/WAM/PRT issue than a simple Windows Credential Manager problem.

Also, I would avoid running dsregcmd /leave immediately until we see the dsregcmd /status output, as the current device state will help determine which recovery path makes the most sense.

If this answers your query, please click Accept Answer and Upvote if you found it helpful. If you have any further questions, feel free to let us know.

1 answer

Your answer

Answer 1

Since the device was already removed from Microsoft Entra ID and Windows credentials were already cleared, the next supported recovery path depends on the device state.

Check whether the device is still connected under Settings > Accounts > Access work or school.
- If the work account is listed, select it and choose Disconnect.
- Restart the device.
Re-register the device based on its join type:
- Microsoft Entra registered device: after disconnecting, register it again from Settings > Accounts > Access work or school > Connect.
- Microsoft Entra joined device: open an elevated PowerShell window and run:
```
     dsregcmd /forcerecovery
```
  Then complete the sign-in prompt.
- Microsoft Entra hybrid joined device: open an elevated PowerShell window and run:
```
     dsregcmd /leave
```
  Then restart the device and sign in with the domain credential.
If the device was deleted from the tenant and app sign-in now fails, this matches the documented recovery for missing device objects. Home tenant administrators should verify when and why the device object was deleted.
If the device shows as Pending in Microsoft Entra ID, run:
```
   dsregcmd /leave
```
Restart the device. The device registration process starts again through the scheduled task under Task Scheduler Library > Microsoft > Windows > Workplace Join > Automatic-Device-Join Task.
If this is a Windows 10/11 device that shows duplicate Microsoft Entra registered and Microsoft Entra hybrid joined records, that dual state can cause nondeterministic device evaluation and access issues. On Microsoft Entra registered devices, remove the local registered state from Settings > Accounts > Access Work or School > Disconnect, then register again.
For broader device registration troubleshooting, use the Device Registration Troubleshooter Tool. If device health is Pending, use option 5. If the device does not have a PRT, use option 6.

Note: dsregcmd /leave disconnects the device from its current Microsoft Entra registration state. On registered devices, removing registration can also affect SSO until the device is registered again.