0x8007064c: the machine is already enrolled
Enrollment fails because the computer still holds enrollment state from a previous enrollment, a cloned image, or an old account certificate.
From Microsoft's documentation, checked 9 Nov 2026.
The machine is already enrolled. (hr 0x8007064c)Also searched as: 8007064c
What it means
Microsoft lists three causes: the computer was enrolled before, it runs a cloned image of a computer that was enrolled, or the account certificate from a previous enrollment is still present. Removing the old Intune certificate and registry keys lets the device enroll again. Back up the registry before changing it.
Common causes
- The computer was enrolled before.
- The computer runs a cloned image of a computer that was already enrolled.
- The previous account's certificate is still on the computer.
How to fix it
Check for leftover enrollment state
Check whether the OnlineManagement registry key from a previous enrollment exists.
Test-Path "HKLM:\SOFTWARE\Microsoft\OnlineManagement"
Remove the old Intune certificate
Open MMC, add the Certificates snap-in for the local computer account, open Personal > Certificates, and delete the Intune certificate issued by Sc_Online_Issuing if present.
Remove the old registry keys and retry
Back up the registry, delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OnlineManagement and its subkeys, and enroll again. If it still fails, delete HKEY_CLASSES_ROOT\Installer\Products\6985F0077D3EEB44AB6849B5D7913E95 if it exists and retry.
How to confirm it's fixed
- Enrollment completes and the device appears in the Intune admin center.
Follow Microsoft Intune failures and fixes
A short email about twice a week with new runbooks, configuration traps and fixes from KBY Technologies.