NDES SCEP for intune device certs - do we really need an Ent CA
We have AAD joined devices. We do have on-prem capability but have tried to minimise the requirement to have an Active Directory given most resources users access are cloud only. However, we now wish to use NDES server - SCEP to deliver device…
![](https://techprofile.blob.core.windows.net/images/8Rj5JjfnuEyUaKHZzNgAqw.png?8D8F2E)
![](https://techprofile.blob.core.windows.net/images/8Rj5JjfnuEyUaKHZzNgAqw.png?8D8F2E)
Company Portal APP
Hey Everyone i have a client that would like to use the company portal app with a dem account to register there store devices. I have always worked with autopilot and just curious do i still need to set up Autopilot Deployment Profile. I am assuming…
HAAD windows autopilot time out error
we are deploying HAAD windows autopilot for new win 10 devices for our client and have notices almost all deployment getting timed out at device setup after 2 hour( limit is set to 120 minutes for ESP). we have about 8 application ( Office + Edge+…
![](https://techprofile.blob.core.windows.net/images/zqVVzkJ_K02YlOUZepNGvw.png?8D934E)
Edge Chromium administrative template fails
Hi, I'm trying to active an administrative template for Edge chromium with the following setting: List of file types that should be automatically opened on download enabled file extension: ddc After waiting for 15 minutes the state changes…
Windows 10 Security Baseline showing everything as a "Success" within 'Per-setting status' blade but displaying "Failure" within 'Device status' blade
We have a strange issue, that my colleague has reported... He's stating that he's deployed a Windows 10 Security Baseline which displays all "Failures" under 'Assignment Status' within Device Status but when you go to 'Per-setting status'…
![](https://techprofile.blob.core.windows.net/images/4eZzgP2_BgAAAAAAAAAAAA.png?8D9A80)
MS Intune - Set Reset Passcode Complexity
Greetings All, Looking for find out if the Reset Passcode option has an setting to change its complexity. We are running tests for Corp (Fully Managed) Android and the Reset Passcode with Alpha-Numeric passcode and it spits out…
Windows Autopilot intermittent issue-4/5 failure
Hi, We are facing intermittent issue were 4 out of 5 attempts made to do Windows Autopilot hybrid AD join fails. When new devices assigned with Hybrid AAD join profile are initiated, the setup fails for the device after user enter the credential. The…
Microsoft Intune iOS User Enrollment - Application removing
Hello, I have a question about Microsoft Intune iOS User enrollment. So basically when i enroll iOS device using user enrollment. And deploy application as "available" after i install it on the device. On the intune side it's showing…
WiFi Profile Update
We have a WiFi profile deployed to our laptops. The type is WPA/WPA 2-Personal with a preshared key. If I update that key with the new WiFi password will that automatically update on the laptops or will I need to create a new WiFi profile and assign that…
Require Bitlocker
Hi, Is there a way to force users to activate Bitlocker? I created a profile and set Require under Encrypt devices, And it only gives a one-time alert to the user and does not require him to activate the Bitlocker. Thanks Rash
![](https://techprofile.blob.core.windows.net/images/zqVVzkJ_K02YlOUZepNGvw.png?8D934E)
intune ios device configuration
I want the camera block in IOS in the Configuration profiles, but I'm still pending and I don't know what part is the problem..... I am now setting up with a company administrator account
![](https://techprofile.blob.core.windows.net/images/d3578f167ce8453ca98a035e110fd510.jpeg)
Android Enterprise Work Profile Wipe
Hi When configuring devices in Android Enterprise Work Profile we are choosing the option that 'wipes the work profile' if a user enters in an incorrect pin 5 times. One would assume that this would only affect the Work Profile itself. However this…
Exaplain assignment of policies or profiles
Hi, I need someone to explain to me how policies/profiles are assigned, when I am supposed to assign it to users and when I am supposed to assign it to devices. I have read a lot, but still not quite get a hang of it so if someone could give me a…
CoMgmtSettingsProd is showing as non compliant on SCCM Client Windows 10 1903.
Hello all, majority of the devices in our organisation are showing the below error in configuration manager. we have recently swapped over from pilot to prod and the workload sliders are all the way across to intune for the all items but the last 2.…
Enroll using Intune Dedicated mode, but Policy missing Kiosk mode setting in device restrictions.
Hi all, I have successfully enroll my device via Corporate-owned dedicated devices. but right now I want to set up kiosk mode and I follow some document online and realise I cannot find Kiosk in device restriction. how am I suppose to set up single or…
Restart and shutdown greyed out on MDM
Enrolled iPads on Endpoint manager have the restart (supervised mode) and shutdown(supervised mode) greyed out. I made sure I enabled supervised when creating the profile. Device is enrolled via Intune and affinity is set to device What should be done…
Windows Defender App Control Custom OMA-URI
Is anybody else getting an error now when trying to create a custom WDAC configuration profile using a policy scanned from a reference computer? I am following the documentation here:…
Defaultuser100000 causing Intune Device Compliance errors
I’ve been looking at this issue and wondering if anyone else has seen it. A lot of Win10 machines I have enrolled in Intune are triggering an error on the System Security -> Password expiration (days) in the Windows 10 Compliance Policy. I see this in…
Reset completely blocked Android device
Hi everyone, I have an interesting situation. I used a Sony Xperia XA1 with Andoird 8.0 as a test device. The device was sucessfully enrolled and an administrative profile created. All device configuration policies were applied. The policies were…
Intune Configuration for IOS
Hey Everyone, I just have a question I am pretty sure the answer is not needed but wanted to validate. I have a client who wants to set up Intune for all his users Iphones, He would like to start with deploying a certificate to the phones and deploying…
![](https://techprofile.blob.core.windows.net/images/zqVVzkJ_K02YlOUZepNGvw.png?8D934E)