Encryption of data storage on device error 2016345612
Hello, We are using the Windows Security Compliance policy and we are noticing quite a few devices are erroring on the "Encryption of data storage on device" section with the following State details: 2016345612(Syncml(500): the recipient…
Encryption of data storage on device error 2016345612
Hello, We are using the Windows Security Compliance policy and we are noticing quite a few devices are erroring on the "Encryption of data storage on device" section with the following State details: 2016345612(Syncml(500): the recipient…
Upgrade 2303 To 2403
Hello everyone, The current version of MECM we are using is 2303. (No Hotfixes Installed) We would like to upgrade directly to version 2403, but we have some doubts : -Can we upgrade by making the jump directly to version 2403 ? -Before upgrading to…
MECM 2403 : Hotfix
Hello everyone, After upgrading to version 2403, should we install the following hotfixes in order ? [1]https://learn.microsoft.com/en-us/mem/configmgr/hotfix/2403/28290310 -----We don't have CMG, should we still install this Hotfix…
Issues with webcam for new device enrollment
Hello! Some reported issues with webcam for new Win10 and 11 device enrollment where permissions/drivers need to be re-enabled/reinstalled. Windows Privacy settings needs to be re-toggled or toggled ON to Allow apps permissions to Camera such as the…
Windows 11 Upgrade
Hello! We're migrating company devices from Windows 10 to Windows 11 and most of the devices have been successfully upgraded from Win10 to Win11. However, from the "Report" blade, when I pull the report for the feature upgrade, I've noticed…
Supersedence Line of Business App with Win32 app
Hello! I have an app currently set up as a LOB app in Intune and now want to set up the new version as a Win32 app. However, the supersedence tab doesn't show the LOB app currently being deployed as something I can supersede. Is there anyway to…
SCCM : Migration Win10 to Win11 24H2 -> unable to download Feature update Win11 24H2 from SCCM
Hi, I use SCCM to plan a migration from existing Windows 10 22H2 machines to Windows 11 24H2. I am trying to download the below feature Update that I will deploy to a test collection. First when trying to download it : It failed after a 10 minutes.…
Question regarding Microsoft Admin Portals app in Conditional Access
If I block access to resource "Microsoft Admin Portals" app from other users than admin users, do I also block normal user or guest user access to Windows Azure Active Directory, so that normal users or guest user can register their 2FA to…
Protecting data on BYOD devices
Hi everyone, We have sixth form students using BYOD, and we're looking for advice on how to protect data on these devices, specifically for Microsoft 365 resources. I've tested Windows app protection for Edge, but students are also accessing data through…
Protecting data on BYOD devices
Hi everyone, We have sixth form students using BYOD, and we're looking for advice on how to protect data on these devices, specifically for Microsoft 365 resources. I've tested Windows app protection for Edge, but students are also accessing data through…
Upgrade Configuration Manager
Hello, We have currently Configuration Manager 2203 installed with Configuration Manager 2203 Hotfix Rollup (KB14244456). I have available: Configuration Manager 2207 + 3 Hotfixes Configuration Manager 2211 Configuration Manager 2303 Is it possible to…
SCCM prerequisite check fail
While installing SCCM 2403 with SQL Server 2019, the prerequisite check fails at the SQL Server TCP Port step. The error message states, "Configuration Manager primary site and central administration site require SQL Server TCP is enabled and set to…
Unblock Toast notifications on Intune multi-app kiosk
I have a system utilising a multi-app kiosk delivered by Intune. The default settings block any and all Toast Notification popups. The system is for a Library setting and the library management system (Libki) session time reminder notifications are being…
Urgent Help Needed: Tenant Lockout - Conditional Access Policy
We have been unable to access our tenant for nearly three days now due to a problematic Conditional Access policy. During this time, we've engaged in numerous conversations with various Microsoft support representatives and technicians. Unfortunately,…
Conditional Access Policy not working- application enforced restrictions
I am trying to set up a Conditional Access policy to block users from using unmanaged devices. I followed the steps in this article without success:…
KIOSK User in Windows 11 - Icons missing from public desktop
Hallo, I have some issues about the KIOSK mode (Assigned Access with an OMA-URI) in Windows 11. Problem: Since end of October on new profiles on Windows 11 the desktop is clear. No icons, no links. All icons and links which droped on the desktop…
How to achieve "Deny for domain accounts to domain servers" NTLM with Intune
Hi everyone, i want to get rid of NTLM in our domain. So i started with the GPO setting: Network security: Restrict NTLM: NTLM authentication in this domain and set it to my client. Now i wanted to roll it out to Ring0 with an Intune conf profile. The…
bootstrapTokenEscrowed for macOS devices retrieved as false for all devices
In MS Endpoint ManagerAdmin Center macOS devices have a property under 'Hardware' called 'Bootstrap token escrowed' which has the value 'Yes' for a lot of devices, but the property is not included in the exportable data there. I was looking for…
Intune Push Policy
Hello, When we apply policy from intune, some wired clients get the policies faster than wireless clients (can more than 1 day). Anyone know how to improve distributing policies for wireless clients?