Skip to content

Menu AuthGuardHelp centre

Troubleshooting · Windows

The Windows computer does not enrol (AGW01, AGW02, AGW04, AGW05)

1 min read
Windows · SaaS · Self-hosted

Symptom

After installing the MSI, the computer does not appear under «Manage» › «Computers», stays «Waiting for approval», or the agent's log shows one of these errors.

Causes and fixes

Error	Cause	What to do
`endpoint_enrolment_refused` / `AGW01`	Unknown, expired, revoked or used-up token (it already enrolled its maximum computers)	Create a new token under «Install tokens» and reinstall with `INSTALL_TOKEN`
`AGW04`	This computer's key is already enrolled	The computer is already enrolled; do not reinstall with another token. If it was reset, retire the old record first
`endpoint_token_limit` / `AGW05`	«The organization already has 100 live install tokens. Revoke one first.»	Revoke tokens you no longer use
`endpoint_not_usable` / `AGW02`	«This computer cannot do that in its current state.» (disabled or retired)	Re-enable the computer, or enrol it again if it was retired
`endpoint_clock_skew`	The computer's clock differs from the server	Fix the time; see Clock out of sync
«Windows sign-in is not available on this server.»	Self-hosted installation without the feature configured	Configure policy signing and computer secret protection

The computer stays «Waiting for approval»

The token was created with «Manual approval». Open the computer, check its name and key fingerprint and approve it. See Approve computers.

How do I check the token?

Under «Install tokens», each token shows its label, its deadline and how many computers it enrolled. A token is shown only once: if you lost it, create another.

When to escalate

If the token is valid and enrolment still fails, collect the agent's event log and contact support. Never email the token or put it in a support request.

Error codes in this article

Article referencets-win-computer-not-enrolledquote it to support to identify this article. Checked against the product at commit 5f6607a8.