So you want to test your NDES/SCEP certificate enrollment?

SCEP (Simple Certificate Enrollment Protocol) and NDES (Network Device Enrollment Service) are the mechanisms we currently use to deploy certificates to our mobile devices via Intune and Configuration Manager. The tech is very (very) cool, but for the average ConfigMgr admin it’s got quite a steep learning curve. Once you (kinda) understand how it all… Read more

Where the heck are my Android Web Apps?!

  When I deploy web apps to Android devices they never show up in the Apps list. Where the heck are they!?   Intune Web Apps are basic URL shortcuts that are delivered to Intune managed devices. They’re great for dropping links on devices to your Intranet, your favourite SaaS web portal or that website… Read more

Network Device Enrollment Service (NDES) – ERROR_SERVICE_EXISTS

Ran into this doozy this week while trying to re-add the NDES role services. The specified service already exists. 0x80070431 (WIN32: 1073 ERROR_SERVICE_EXISTS) The fix is to ensure there are no lingering NDES configuration. From Regedit, delete the following key (back it up first!) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MSCEP Matt Shadbolt… Read more

Starting NDES Services (Device Registration Service) Fails with “object does not exist”

I ran into this issue when configuring SCEP/NDES certificate registration for an Intune tenant. Following all the best practice configuration steps, left me with an SCEP enrollment page returning Internal Server Error 500 instead of the expected 200. I found that the Device Registration Service was not starting correctly. In the event logs I found it… Read more

Intune and Configuration Manager UserVoice Launched

Hello All, Very brief post today. The ConfigMgr and Intune team has formally released their own UserVoice pages to receive feedback and bugs from customers and the field. https://configurationmanager.uservoice.com/ https://microsoftintune.uservoice.com/ For any potential bugs, we still suggest raising a Premier Support call, as these are often the fastest and most reliable way of getting bug… Read more

The Ultimate Intune Setup Guide – Stage 5: Enrol Your Devices (Windows 8.1)

  Now that we’ve got our ConfigMgr and Intune environments speaking nicely to each other, we can start to enrol some devices. I’ve previously enrolled Windows Phone 8.1, iOS and Android devices. I finally wanted to show that you can also enrol a full Windows 8.1 installation. First, logon to your Windows 8.1 machine and… Read more

The Ultimate Intune Setup Guide – Stage 5: Enrol Your Devices (Android)

  Now that we’ve got our ConfigMgr and Intune environments speaking nicely to each other, we can start to enrol some devices. We’ll enrol a Windows Phone 8.1, an iOS Device and an Android Device. Android Enrollment Android enrollment is almost as easy as enrolling your Windows Phone 8.1 device. First, start by opening the… Read more

The Ultimate Intune Setup Guide – Stage 5: Enrol Your Devices (iOS 7)

  Now that we’ve got our ConfigMgr and Intune environments speaking nicely to each other, we can start to enrol some devices. We’ll enrol a Windows Phone 8.1, an iOS Device and an Android Device. Apple iOS 7 Enrolment In this scenario, an end user is going to enrol their own device. We can use… Read more

The Ultimate Intune Setup Guide – Stage 5: Enrol Your Devices (Windows Phone 8.1)

  Now that we’ve got our ConfigMgr and Intune environments speaking nicely to each other, we can start to enrol some devices. We’ll enrol a Windows Phone 8.1, an iOS Device and an Android Device. Windows Phone 8.1 Enrolment On your Windows Phone, display all apps and select Settings Under the default System view, select… Read more

Enable Windows Phone management via Intune without Symantec Certificate

  As part of my mega-post The Ultimate Intune Setup Guide, we enable the Mobile Device Management capabilities in ConfigMgr. One of the supported devices that we didn’t enable was the Windows Phone 8.1 management. The reason for this is the requirement of the Symantec code signing certificate, which needs to be purchased before we… Read more