Configuration profile not applicable

Stéphane Lalancette 191

Hi, I'm trying to set the OMA-URI setting so that MDM wins over GPO with the following OMA-URI:
./Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP

It works on some devices, but on some, I get 'Not applicable' with no other details.

How can we know why a specific policy is 'not applicable'?

FYI, the current problematic device is on Windows 1909.

Thank you in advance and don't hesitate if you have any questions.

1 answer

Jason Sandys 31,291 Reputation points Microsoft Employee

2020-12-11T22:01:25.627+00:00

First, keep in mind that this setting is only applicable to settings within the Policy CSP and not other CSPs.

Next, this setting is not applicable to Windows Home.

Have you reviewed the Event Log on one of the devices? Can you post a screenshot also showing the non-applicability?
Please sign in to rate this answer.
Stéphane Lalancette 191 Reputation points

2020-12-11T23:00:13.373+00:00

Hi, thank you for taking the time to answer.

I forgot to mention it's enterprise edition.

As for the event logs, that is way I'm asking here, because I don't know where to look to see why it's not applicable.

Would it be somewhere under Applications and Services - Microsoft - Windows - DeviceManagement-Enterprise_diagnosticts-Provider?

Here's the screenshot I see in MEM

Don't hesitate if you need more information?

Jason Sandys 31,291 Reputation points Microsoft Employee

2020-12-14T03:54:01.287+00:00

Yes, DeviceManagement-Enterprise-Diagnostics-Provider is the correct event log for all things MDM policy.

Stéphane Lalancette 191 Reputation points

2020-12-15T14:37:58.587+00:00

Here are the errors I see in Admin:

MDM PolicyManager: Set policy precheck precheck call. Policy: (Security), Area: (RequireRetrieveHealthCertificateOnBoot), int value: (0x1) Result:(0x80004005) Unspecified error.

MDM PolicyManager: Set policy int, Policy: (RequireRetrieveHealthCertificateOnBoot), Area: (Security), EnrollmentID requesting set: (), Current User: (Device), Int: (0x1), Enrollment Type: (0x6), Scope: (0x0), Result:(0x80004005) Unspecified error.

MDM ConfigurationManager: Command failure status. Configuration Source ID: (), Enrollment Name: (MDMDeviceWithAAD), Provider Name: (Policy), Command Type: (Add: from Replace or Add), CSP URI: (./Vendor/MSFT/Policy/Config/Security/RequireRetrieveHealthCertificateOnBoot), Result: (Unspecified error).

Jason Sandys 31,291 Reputation points Microsoft Employee

2020-12-15T14:57:12.547+00:00

Are other policies working on this device?

Stéphane Lalancette 191 Reputation points

2020-12-15T15:39:06.58+00:00

Yes they all are.

Jason Sandys 31,291 Reputation points Microsoft Employee

2020-12-15T16:25:51.453+00:00

Then you should open a support case.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Configuration profile not applicable

1 answer

Your answer