Jan

Enterprise Mobility | #MSIntune #EMS #MEM #Intune #Autopilot #AzureAD #ConfigMgr #Windows10

[Jan @dobrigod]

@IntuneSuppTeam Have you heard any reports of required Win32 apps not installing during the Autopilot ESP? We are seeing this intermittently in various countries. #Autopilot #Intune

[Jan @dobrigod]

@IntuneSuppTeam @Mister_MDM Microsoft has apparently 'fixed' the problem in the service. You may want to retry now if you did experience the issue.

[Jan @dobrigod]

@IntuneSuppTeam something seems broken (intermittently) with Autopilot. The profiles are not reliably delivered at OOBE. A restart often times seems to help. Anything you can share on this please?

@Mister_MDM, maybe you have some valuable insights? :-)

[Jan @dobrigod]

@PerLarsen1975 @IntuneSuppTeam @Mister_MDM Seeing in both scenarios, so firewall/proxies can probably be ruled out.

[Jan @dobrigod]

@Mister_MDM @RoyTrizzle Exactly. But having to reprovision devices because of 1 missing/corrupted cert would be a pain.

[Jan @dobrigod]

@Mister_MDM @RoyTrizzle Curious to see if you have any suggestions how to a) prevent Entra ID join certificate modifications by rogue processes b) if that cert gets deleted, can you gracefully recover from that without needing to reprovision the device.

[Jan @dobrigod]

@Mister_MDM @h1ghju1ce The BitLocker issue seems to have been resolved for us. No action required on our end, they fixed it (rolled back something?) in the service. Not sure how GA'ing 'Windows Backup for Organizations' would be related to this though.

[Jan @dobrigod]

@IntuneSuppTeam, are you aware of any issues where MDM BitLocker policies are not honored in time, leading to devices encrypted at the wrong level? Anything in the Intune August release that may have introduced an issue (RACE condition) in MDM policy delivery? #MDM #Autopilot

[Jan @dobrigod]

@RoyTrizzle @IntuneSuppTeam You can see this in the IME log file. Compare one from today to one from a few weeks ago and you should see the same.

[Jan @dobrigod]

@IntuneSuppTeam Intune PowerShell scripts are no longer getting delivered in our tenant. I hear that other customers are reporting the same issue. Do you have any Information that you can share about this?

[Jan @dobrigod]

@IntuneSuppTeam @RoyTrizzle It appears that the sudden increase in the size of the payload is due to the fact that the 'EncryptedPolicyBody' property is now populated with a long base64 value, pretty much doubling the size of the payload. Why are those type of changes not properly tested/communicated?

[Jan @dobrigod]

@IntuneSuppTeam @RoyTrizzle Apparently there is a 2MB overall payload limit for #Intune #Powershell scripts. This is different from the 200KB per script.
Would be good to know if that has always been there or if that was recently introduced. I don't recall seeing anything about that in the documentation.

[Jan @dobrigod]

@IntuneSuppTeam Hi team, just to clarify. The issue is not that the scripts are not showing in the Intune console. The issue is that the script are not delivered to endpoints. Are we talking about the same issue?

[Jan @dobrigod]

@SteffenAtCloud @IntuneSuppTeam Manually triggering the Tpm-HASCertRetr scheduled task seems to help in many cases. Are you still seeing the issue?

[Jan @dobrigod]

@IntuneSuppTeam, I've noticed a lot of [AgentCommon] messages in the IME log file during Autopilot. It seems to prolong the duration of the ESP Account phase, adding a number of minutes to the overall process. Any idea if this was a recent addition to the IME?

[Jan @dobrigod]

@IntuneSuppTeam, do you have any additional information that you can share about Intune Service Degradation Advisory IT867628: 'Some users can't check in devices managed through Microsoft Intune'?

[Jan @dobrigod]

@IntuneSuppTeam @banterci We have been seeing similar issues since last Thursday. It's intermittent, one day it works, the next it does not. The URL for us seems to be in EMEIA: https://t.co/CLK4EIhoyf

[Jan @dobrigod]

@Mister_MDM @IntuneSuppTeam It looks like this:

[Jan @dobrigod]

@IntuneSuppTeam we are seeing issues with Autopilot getting stuck on the ESP page during the Account phase. Have you heard anything to that extend?

[Jan @dobrigod]

@mniehaus Looks like it's working for me now. I believe the issue was that I wasn't 'Internet connected' during the initial boot to OOBE. That's when the AUTOPILOT_MARKER seems to get created.
Thanks for your help with this, much appreciated!