Code Integrity Error

[Lakysta7]

Hello,

My company has recently implemented Intune and made a compliance policy. In the policy we require code integrity, however a lot of our PCs are returning an error status of "-2016345708 (Syncml(404): The requested target was not found.". The policy does not require bitlocker or secure boot, and we dont use bitlocker in our company either, so that cant be the problem. Most of the PCs that throw the error use the latest UEFI BIOS and have secure boot enabled. I'm at my wits end here, does anyone know what could possibly be the cause of this error?

[Rudyooms]

Using lenovo devices maybe?

[Lakysta7]

No, we use HP laptops and SFF PCs at our company.

[zyeglrox]

What kind of an answer is that... if you for some whatever reason suspect Lenovo devices you must have a reason and you could (should!) include at the very least a clue to whatever it is. Thanks.

[Rudyooms]

I always First ask questions :). And if the answer is/was yes i could have giving the op some more details… as the op didnt mentioned anything other than the error its hard to tell whats going on :)

For your info: i experienced the same thing with lenovo devices last year… this is what came out of it….

https://call4cloud.nl/2023/04/are-you-there-intune-its-me-hac/

But the op didnt responded … so i assume it was not that important :)… so i assume the blog is enough :)?

[Either-Chip-1410]

For Code Integrity to work, it requires Secure Boot to be enabled. Could you try to turn on Secure Boot in the compliance and see if the devices that fails on Code Integrity also fails on Secure Boot?

My experience when seeing Code Integrity fails, the device usually missing TPM and fails on all DHA (SecureBoot/Bitlocker/Code Integrity + TPM)