---
title: "Error Code: 0xCAA2000C"
slug: "0xcaa2000c"
tags: ["0xCAA1007B", "0xCAA2000C", "provisioning fail", "BPRT", "Token"]
updated: 2026-06-15T14:09:14Z
published: 2026-06-15T14:09:14Z
canonical: "docs.workspot.com/0xcaa2000c"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.workspot.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Error Code: 0xCAA2000C

```plaintext
0xCAA2000C The request requires user interaction
0xCAA1007B AADBAcquireTokenInternal failed
```

---

## **Root Cause**

> **Conditional Access (CA) policies** are enforcing requirements like:

- MFA
- Device compliance

These require **interactive authentication**, which is **not possible** in Workspot provisioning.

---

## **Why does this happen**

In your case:

- BPRT regenerated
- **But: Account NOT excluded from CA ❌**

Azure requires:

- MFA or validation → Agent cannot prompt → Token acquisition fails

---

## **Resolution**

- **Exclude the provisioning account from CA**
- **Exclude service:** Microsoft Azure Device Registration

**From:**

- MFA policies
- Compliance policies

---

## **Validation**

- Reprovision VM
- Confirm:
  - No `interaction required` errors
  - Successful Entra join

---

## **Key Takeaway**

> BPRT provisioning requires **fully non-interactive authentication** — any CA enforcement breaks it.

---