Internal URL already in use for SCEP App

Question

NDES application which allows Intune clients to connect to SCEP server and retrieve Cert was deleted, when trying to recreate it, system through error message Private Network settings Internal url '' https:// ndes.faar.local" is invalid since it is already in use. I have use Microsoft Graph CLI to identify any ghost app which was not visible via GUI. MDM client unable to get cert. How can i find which app is using above URL delete and recreate for MDM SCEP.

Answer 1

Still not able to find using Get-MgApplication -All | Select-Object DisplayName, Id, @{Name='InternalURL';Expression={if ($.Web) {$.Web.HomePageUrl} else {"<None>"}}} | Format-Table -AutoSize . Note: where Display Name equal NDES

DisplayName Id InternalURL

---

ConfigMgrSvc_86dcfec1-5b11-4faf-8d5a-1804cb747c0c 03090465-b92c-4ad2-b1d5-596e5331e158

GSA-Internettrafficforwardingprofile 0646b7c5-aaad-4a92-abd2-ff15e88743ad

faarte.local 07a70e19-941f-480d-b478-bc610726fdc0 https://account.activedirectory…

WebClient 14283bec-38c9-41fa-986d-44252f824111

WebServer 38aa2bff-ec75-4411-97c0-5a4e36cafb04

GSA-Privateaccesstrafficforwardingprofile 443c20e1-7038-4f95-8d06-8c186b0ab296

ConnectSyncProvisioning_WSD00C01_ca12986688f0 45b23533-40fb-4d94-9e7d-60bc7c6c1b4c

GSA-Microsoft365trafficforwardingprofile 51c641a2-eb7e-45b9-a554-fd80f7c53b10

ConfigMgrSvc_299456c5-d693-44cf-840d-c7e989d40950 59f7c8d1-d776-4fd1-a126-a87152a3157d

WebServer 727d0c2a-957d-4260-bc72-4f4fb7aec738

ConfigMgrSvc_d3c38596-f28f-49d4-bdcd-e6df50279b23 94e490e6-3245-4c05-94f6-d7cde6dcf548

P2P Server a45e7a32-d63c-49fa-afb2-9bcc4039eacc

WebClient bacda050-04e8-4772-a13b-53a43cd78973

faarte.local d896501c-3ac7-4804-be32-5b33f74bc788 https://faarte-faarte.ms…

ConfigMgrSvc_d579ec5a-b60d-4621-b6fc-078dab8f21b7 eabb15e9-156e-41f7-8d64-f9ecc0e784af

ConfigMgrSvc_98be2431-803e-4b76-aff0-1d90487038f5 f9e44b86-1938-4028-b617-06db65e8ce6b

Answer 2

To resolve the issue of the internal URL being reported as already in use, you can follow these steps:

1. Check Existing Applications: Use the Microsoft Graph CLI to list all applications and their associated URLs. You can run a command like az ad app list to see if there are any applications that might be using the URL in question.
2. Identify the Application: Look for any applications that might not be visible in the GUI but are still registered in Azure Active Directory. Pay attention to the URLs associated with each application.
3. Delete the Application: Once you identify the application that is using the URL, you can delete it using the Microsoft Graph CLI with a command like az ad app delete --id <app_id>.
4. Recreate the NDES Application: After deleting the conflicting application, you should be able to recreate the NDES application without encountering the "already in use" error.
5. Verify Configuration: Ensure that the new NDES application is correctly configured to allow Intune clients to connect to the SCEP server.
6. Test MDM Client: After the application is recreated, test the MDM client to confirm that it can successfully retrieve the certificate from the SCEP server.

If you continue to experience issues, consider checking the logs for any additional errors or misconfigurations that might be affecting the MDM client's ability to connect to the SCEP server.