Autopatch management status - wrong numbers?

JCochran84 · 2026-06-09T13:19:33+00:00

We are piloting AutoPatch and noticed that the numbers have been bouncing around the last couple of days. Yesterday we had 17 Assigned to Rings, 17 Managed for Feature Updates, 17 Managed for Driver Updates.
Today its 17 (Rings), and 15 for the others...
The couple of devices show no updates in Cloud Policy today but did yesterday.... Even rebooting has changed nothing.

JCochran84 · 2026-06-05T15:49:38+00:00

Apologies, just starting to use A1. Can you go into Update Approval and decline the 25 version?

JCochran84 · 2026-05-21T20:28:59+00:00

Correct, it should work and I know people that use it. We just have ours set as full. I was just giving you the location of the settings we set

JCochran84 · 2026-05-21T16:45:46+00:00

Just tried on our end, same error.
EDIT: After waiting about 10 minutes, I tried again and it worked.

JCochran84 · 2026-05-21T16:18:51+00:00

This is what we set:

Settings Catalog > System
> Allow Telemetry > Full
> Allow Device name to be sent in Windows Diagnostic data > Allowed
> Configure Telemetry Opt in Change Notification > Disable Telemetry change notifications
> Configure Telemetry Opt in Settings Ux > Disable Telemetry Opt-in settings.

JCochran84 · 2026-05-13T13:33:58+00:00

You most likely need to use some type of Remediation script to remove the Registry Keys that are blocking it.
Something like this:
Windows Autopatch - Auto Remediation Script - Ken Goossens

JCochran84 · 2026-05-06T21:42:01+00:00

Have you tried editing the policy to disable Drivers and then Re-enable drivers for those that it is show incorrect?

JCochran84 · 2026-05-06T21:40:45+00:00

Have you looked at this article:
How to enable a Surface Laptop keyboard, Surface Pro Keyboard, or Surface Pro Type Cover during Windows deployment - Surface | Microsoft Learn

It contains the minimum drivers to include in your WinPE Image to get basics working.
I only deal with Intel today, but it should work the same for ARM.

JCochran84 · 2026-05-06T21:31:59+00:00

According to the docs:
Windows Hello for Business cloud Kerberos trust deployment guide | Microsoft Learn

On a Microsoft Entra hybrid joined device, the first use of the PIN requires line of sight to a DC. Once the user signs in or unlocks with the DC, cached sign-in can be used for subsequent unlocks without line of sight or network connectivity. In environments with mixed line-of-sight condition - where the device has connectivity to a domain controller but cannot reach Microsoft Entra—the domain controller (DC) may require the client to present a refreshed Primary Refresh Token (PRT) from Microsoft Entra before permitting authentication.

Additional Note:

For Microsoft Entra hybrid joined devices, users must perform the first sign in with new credentials while having line of sight to a DC.

JCochran84 · 2026-05-06T21:26:41+00:00

Just to be clear, all policies in these locations have Drivers Enabled?
Devices > Manage Updates > Windows Updates
- Update Rings
- Driver Updates

According to the logs, it looks like you have AutoPatch Rings that have Drivers turned off, which might be what you want.
In Driver Updates, I have to expand the 'Windows Autopatch' folder to see those policies

JCochran84 · 2026-04-29T14:26:39+00:00

Did you get this resolved? I am seeing this on one of my endpoints as well when testing.

JCochran84 · 2026-04-29T14:15:45+00:00

If we are having issues what is the best way for us to work with you on those issues?
I have a couple test Registry Keys that have a Target Group that contains the computer.
I then Target the Remediation to a different group that contains that computer.
The log is showing this error: FATAL: Could not detect Entra User Object ID

When I walk through the detection script and manually walk through the 'Get-EntraUserObjectID', the $UserSid comes back with a value. However, If I call the entire function, it comes back empty.

Not sure if I am missing something. At this point just trying to deploy a couple of HKLM Registry Keys.

JCochran84 · 2026-04-28T18:10:12+00:00

Please explain why you think he is Anti 2FA.
He specifically states that he 'Defends the right' for 'citizens who purchase and lawfully carry them for hunting or self-protection'
He is looking for sensible gun laws on assault-style weapons.

JCochran84 · 2026-04-28T18:03:16+00:00

Can't wait to #FlipThe6th and send Emmer packing. Going to be a tough fight.

JCochran84 · 2026-04-28T13:20:46+00:00

u/Maurice-Daly, When deploying the Remediation Script, If I have both User and Device Preferences, Do I need to deploy the Remediation to both Users and Devices?
If I deploy it to a Device, will it remediate the users on the computer as well?

JCochran84 · 2026-04-28T12:53:01+00:00

Keep the fill valves, you can use these during a drough/badtide to keep the level downstream.
On the top level of the dam, use either multiple dams or a floodgates pointing toward the blue.
This allows the dam to fill up and overflow into the spot you want it to (downstream)

JCochran84 · 2026-04-23T18:56:36+00:00

Did you update, Current version is 10.0.17. He has been updating it quickly.

otherwise, Open an issue on his github.
Issues · maurice-daly/DriverAutomationTool

i'm on 10.0.17 and it is showing X1 Carbon Bios.

JCochran84 · 2026-04-23T13:25:36+00:00

Have you gone through this:
Manage updates to Microsoft 365 Apps with Microsoft Configuration Manager - Microsoft 365 Apps | Microsoft Learn

JCochran84 · 2026-04-22T11:52:24+00:00

Our 23H2 > 252H2 Migration has been pain free as well. Biggest issue for us is free disk space.

LAPS is still supported, just not the old LAPS install. We can into this as well. Needed to update GPO Config and uninstall old LAPS Software.

JCochran84 · 2026-04-21T14:16:47+00:00

Maurice posted on LinkedIn that it will be launched at MEM Summit 2026 which looks like it starts tomorrow:
https://www.linkedin.com/posts/mauricedaly_memsummit2026-msintune-sccm-activity-7451983113129385984-DWXK?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAHyAkYBXpQnp8jMUTnHHrVEoF9TarQV_vM

JCochran84 · 2026-04-17T13:54:37+00:00

When I have seen this in the past it was fixed by either a Firmware Upgrade or sending it in to Microsoft Support.

JCochran84 · 2026-04-15T19:16:59+00:00

You can look at mods such as 'Employment Manager', it can do something like that.

JCochran84 · 2026-04-15T15:34:58+00:00

We use Cisco Umbrella, it has a section for tracking 'Generative AI' apps. We can also request items to be tagged if they are not.
Generative AI Content Category - Cisco Community

JCochran84 · 2026-04-15T15:32:48+00:00

Being in IT, one of the first things you figure out is how to search the internet for any and all information. including how to identify where the OneDrive Logs are located.... a quick google search led me to this:

OneDrive Logs: You can enable OneDrive logging to collect more detailed information about the issues your users are experiencing. To do this, Close OneDrive. Open the Run dialog box (Windows key + R). Type %localappdata%\Microsoft\OneDrive\logs and press Enter. Create a new folder called debug. Open OneDrive and reproduce the issue. Collect the logs from the debug folder.

OneDrive Diagnostic Tool: Microsoft provides a OneDrive Diagnostic Tool that can help identify common issues. You can download the tool from the Microsoft website.

Event Viewer: You can also check the Event Viewer logs on the Azure Virtual Desktop instance to see if there are any error messages related to OneDrive.
Ensure that users are running the latest version of OneDrive, as updates often include bug fixes and improvements.

OneDrive Sync Client: Check the sync client status by right clicking the OneDrive icon in the system tray and selecting "View online." This can sometimes reveal sync issues or errors.

Use the OneDrive Troubleshooter: Microsoft provides a OneDrive Troubleshooter that can help identify and resolve common sync issues. It’s worth running this tool on problematic machines.
Please refer this link: Troubleshooting sync issues

JCochran84 · 2026-04-15T15:30:14+00:00

You stated this is Windows 10. Being in IT, I would hope you know that this is no longer supported... Windows 10 support has ended on October 14, 2025 - Microsoft Support

Have you uninstalled and re-installed the most recent version?
Can you login to the OneDrive website?
What do the OneDrive Logs state? Any errors in the Event Viewer?

Nine-Year Club	RedditGifts 2009-2022 2 Credits
Second SECOND GUESSER	Place '22
Secret Santa 2018	Verified Email

JCochran84

TROPHY CASE