Troubleshooting Windows 10 Intune Policy Failures

Quick brain dump today. One of our customers recently reached out with an issue where a policy for Windows 10 wasn’t applying correctly, and we were returning a very unhelpful error message “-2016281112 Remediation failed”. Unfortunately, the Remediation failed error message is all that is returned by the client when we issue the SET command… Read more

Support Tip: Intune App Protection Requires Modern Authentication Enabled for Skype for Business

Posted over at https://blogs.technet.microsoft.com/intunesupport/2018/01/11/support-tip-intune-app-protection-requires-modern-authentication-enabled-for-skype-for-business/ In May 2017, a Skype for Business Server 2015 Cumulative Update was released, enabling “Hybrid Modern Authentication” for Hybrid and On-Premises Skype for Business customers. Modern Authentication allows customers to enable many modern security features, such as Azure Active Directory Conditional Access or multi-factor authentication. It also enables the Intune App… Read more

“Discovered apps” node in Microsoft Intune on Azure console

In the new Microsoft Intune on Azure administration console, there is a new “Discovered apps” node available for each MDM enrolled device. There’s been some recent confusion around what we should expect to see in here. The Discovered apps node is a direct reflection of the devices discovered apps at the last Hardware Inventory time…. Read more

Intune on Azure Migration Blocker Guidance

A couple of months back, the Intune Support team posted a list of technical blockers that may result in a delay for your Intune tenant to be migrated to the Intune on Azure portal. https://blogs.technet.microsoft.com/intunesupport/2017/03/17/intune-migration-blockers-for-grouping-targeting/ The blog post has been very popular, as many customers were not aware of configuration issues causing delays in migration…. Read more

Getting Started with Microsoft Intune for Education

HUGE announcements in the Education space yesterday, with the very exciting release of Microsoft Intune for Education. Intune for Education offers a streamlined management UI for IT Pros in Education, as well as integration with your schools Student Information System (SIS) to create/manage your groups. Getting started is quick and easy. First, browse to https://intuneeducation.portal.azure.com… Read more

Install Firefox v52 Extended Support Release to continue managing Intune Silverlight console

With version 52 of Mozilla Firefox released, the default installation has disabled support for NPAPI plugins. This means you will no longer be able to administer Microsoft Intune via the Firefox browser. https://support.mozilla.org/t5/Problems-with-add-ons-plugins-or/Why-do-Java-Silverlight-Adobe-Acrobat-and-other-plugins-no/ta-p/31069 Thankfully, Mozilla do have an Extended Support Release (ESR) version. So to continue to use Mozilla Firefox to manage Microsoft Intune Silverlight,… Read more

Setting up Wi-Fi Profiles with Certificate-based Authentication on Android via Intune Hybrid and the Case of the Missing Wi-Fi Certificate

I was recently at a customer that was having trouble getting their user certificate to be used for the corporate Wi-Fi profile on Android devices. When checking the user certificates in settings the user certificate only showed up under “user” while “Wi-Fi” was empty. After a device is enrolled, it begins to download policy. Once… Read more

Connecting to Exchange Online with PowerShell

Really quick one for y’all today. Working with Intune, I’ve found myself becoming a bit of an Exchange SME. Blocking email, authentication types, EAS vs EWS, the list goes on. Anyway, I find myself having to query Exchange Online configuration all the time. Here’s a three line PowerShell script that will connect you to your… Read more

ConfigMgrDogs top 5 posts of 2016

Configuration Manager 1511, 1602, 1606 (Current Branch) Supported Configurations Update to Supersedence Behaviour for Security Only and Security Monthly Quality Rollup Updates Windows Update Error 80072ee2 (WSUS) Microsoft Intune Co-existence with MDM for Office 365 Changes to Software Updates on Down Level Operating Systems for ConfigMgr Admins… Read more

Restrict iOS/Android E-mail to Outlook using Conditional Access for MAM

One of the most common discussions I have with customers is how does an IT Pro ensure that corporate data is only being accessed by approved, managed email applications. Intune Mobile Application Management (MAM) provides a rich set of Data Loss Prevention (DLP) features that ensures no corporate data is leaked outside of the corporately… Read more