Internet Clients being prompted for Azure AD login

Bryan Powell 1 Reputation point
2021-02-26T15:31:07.53+00:00

We set up a CMG last year and recently have seen a scenario where at least some users are being prompted to log into Azure AD when launching Software Center. Upon signing in with valid AAD credentials the user then gets the error "The resource principal XXXXXXX was not found in the tenant named XXXXXXX." This behavior is puzzling to me. My first thought after some research was that setting Enable user policy requests from Internet clients to No would address this in preventing the login prompt, but it has not. MY concerns is more about suppressing the prompt as our CMG is just to make sure we know about internet clients and that they getting patched.

What am I missing here? Is it a misconfigured CMG or something on the MECM on premises side?

Microsoft Configuration Manager Application
Microsoft Configuration Manager Application
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Application: A computer program designed to carry out a specific task other than one relating to the operation of the computer itself, typically to be used by end users.
474 questions
Microsoft Configuration Manager
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Fiona Yan-MSFT 2,311 Reputation points
    2021-03-01T10:06:29.8+00:00

    @Bryan Powell

    Thank you for posting in Microsoft Q&A forum.

    1. For this Azure AD sign-in error, have we checked the Azure Sign-ins log to track the sign-in information?
      It's recommended that we could get nice insight and particularly detailed Sign-In Details if you use Azure Monitor:
      https://video2.skills-academy.com/en-us/azure/active-directory/reports-monitoring/howto-analyze-activity-logs-log-analytics
    2. Here is an excellent CMG guide for you to refer to:
      https://systemcenterdudes.com/setup-and-configure-sccm-cloud-management-gateway-1806/
      Note:This is non-Microsoft article just for your reference.

    Have a good day!

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments