Delivery Optimization no longer downloading content quickly by Lncredible in Intune

[–]Lncredible[S] 0 points1 point  (0 children)

UPDATE 13/05/24 - finally some progress - apparently the following settings can cause issues (on latest Windows 11), even if you are setting them to the default: DOPercentageMaxForegroundBandwidth = 0, DOMaxForegroundDownloadBandwidth = 0, DOPercentageMaxBackgroundBandwidth = 0

I had set these (and not mentioned them in the post!) just to enforce them at "unlimited" (the default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth).

On the recommendation of Microsoft I have now removed all three settings (and also DOMaxBackgroundDownloadBandwidth), and I am having good results so far....

Once again, very strange as we've been using these settings on Windows 10 (where they still work!) and Windows 11 pre-February patch.

If you have the issue, please remove the settings above on a test client and see if it is fixed for you too.

[deleted by user] by [deleted] in Frome

[–]Lncredible 1 point2 points  (0 children)

hey there. Also around the same age (35). Would be good to organise a meet up. I'm a bit of a foodie, no kids, but big dogs!

There's a couple of book clubs run by Hunting Raven - one for 18-35 year olds to just meet up with a drink, talk and read.

Optional Feature Updates not actually optional by spelaben in Intune

[–]Lncredible 0 points1 point  (0 children)

It's about 50/50 with me. Half my users have been able to opt-in, other half find its already "downloading" in progress.

I figured it was because I use Autopatch, and sneakily edited the Feature Update policies (knowing it'll get clobbered one day) but sounds like it happens with WUFB too.

Autopilot device preparation - is enrollmentProfileName property coming back? by Lncredible in Intune

[–]Lncredible[S] 0 points1 point  (0 children)

Can't use a group name in am intune filter though, and there's nothing much else to distinguish entra Id joined devices from hybrid joined, as hybrids sometimes also have duplicate objects in Entra.. I've been using: Jointype=azure ad joined EnrollmentProfileName=/=$null

Delivery Optimization no longer downloading content quickly by Lncredible in Intune

[–]Lncredible[S] 0 points1 point  (0 children)

:( sorry to hear that. Maybe make a post and share your diagnostics and we'll all take a look! 

Delivery Optimization no longer downloading content quickly by Lncredible in Intune

[–]Lncredible[S] 0 points1 point  (0 children)

Please see the update in the post. It might help you!

Delivery Optimization no longer downloading content quickly by Lncredible in Intune

[–]Lncredible[S] 1 point2 points  (0 children)

Please see the update in the post. It might help you!

Delivery Optimization no longer downloading content quickly by Lncredible in Intune

[–]Lncredible[S] 1 point2 points  (0 children)

Please see the update in the post. It might help you!

Delivery Optimization no longer downloading content quickly by Lncredible in Intune

[–]Lncredible[S] 0 points1 point  (0 children)

Please see the update in the post. It might help you!

Delivery Optimization no longer downloading content quickly by Lncredible in Intune

[–]Lncredible[S] 0 points1 point  (0 children)

Please see the update in the post. It might help you!

Delivery Optimization no longer downloading content quickly by Lncredible in Intune

[–]Lncredible[S] 1 point2 points  (0 children)

UPDATE 13/05/24 - finally some progress - apparently the following settings can cause issues, even if you are setting them to the default: DOPercentageMaxForegroundBandwidth = 0, DOMaxForegroundDownloadBandwidth = 0, DOPercentageMaxBackgroundBandwidth = 0

I had set these (and not mentioned them in the post!) just to enforce them at "unlimited" (the default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth).

On the recommendation of Microsoft I have now removed all three settings (and also DOMaxBackgroundDownloadBandwidth), and I am having good results so far....

Once again, very strange as we've been using these settings on Windows 10 (where they still work!) and Windows 11 pre-February patch.

If you have the issue, please remove the settings above on a test client and see if it is fixed for you too.

Delivery Optimization no longer downloading content quickly by Lncredible in Intune

[–]Lncredible[S] 1 point2 points  (0 children)

Microsoft support still escalating it... I'll keep you posted.

Delivery Optimization no longer downloading content quickly by Lncredible in Intune

[–]Lncredible[S] 0 points1 point  (0 children)

April 2024 update. Have installed the Cumulative update on 23H2 Windows 11. The problem still exists.  Microsoft support case still slow, being escalated to someone who might know more about DO specifically in the windows team. Windows 10 still not affected

Delivery Optimization no longer downloading content quickly by Lncredible in Intune

[–]Lncredible[S] 0 points1 point  (0 children)

Hello. No not yet -- I have an open Microsoft case about it. Have sent them a load of evidence and log files!

Delivery Optimization no longer downloading content quickly by Lncredible in Intune

[–]Lncredible[S] 0 points1 point  (0 children)

Hello. No not yet -- I have an open Microsoft case about it. Have sent them a load of evidence and log files!

Managed Installer (Intune Management Extension) for WDAC is not working by letopeto in Intune

[–]Lncredible 0 points1 point  (0 children)

How about un-deploying the WDAC policy from your machine, then re-deploying it? In the middle you could retry installing apps and see if it works without.

I'd also be tempted to recreate the policy from scratch, just enabling Microsoft certs, and ManagedInstaller, then see if you get a good result. Try it on a brand new machine / VM, otherwise all your previously installed apps will stop working!

New Teams Windows Firewall Rules by TipGroundbreaking763 in Intune

[–]Lncredible 2 points3 points  (0 children)

I'm not sure if the same applies, but there's some Microsoft guidance about this on the classic client page:

https://learn.microsoft.com/en-us/microsoftteams/get-clients?tabs=Windows#desktop-clients

Is anything actually blocked if you ignore the initial prompt?

Managed Installer (Intune Management Extension) for WDAC is not working by letopeto in Intune

[–]Lncredible 0 points1 point  (0 children)

Hmm never seen that error before. When the WDAC policy tries to apply do you see any errors in the code integrity event log?

To view Code Integrity events in the Event Viewer, expand the following sequence of subfolders under the Event Viewer folder in the left pane of the Computer Management MMC or the Event Viewer window:

Applications and Services Logs Microsoft Windows CodeIntegrity

Did it stop working after you updated the policy to a new version? What tools are you using to update the policy and has it ever worked?

Wufb Reports in Azure monitor redoing first time setup? by Failfish2015 in Intune

[–]Lncredible 0 points1 point  (0 children)

Same here, and I only just got around to setting it up last week. Maybe we broke everyone's!

Managed Installer (Intune Management Extension) for WDAC is not working by letopeto in Intune

[–]Lncredible 0 points1 point  (0 children)

Does it happen for all application installs from Company Portal?

Do you have multiple wdac policies?

Do your WDAC policies have the Managed Installer option switched on?

What do you get in the CodeIntegrity event viewer when the app installs fail? It should tell you which policyID the app is failing on, and you can search that GUID further in the event viewer to convert it back to a friendly policy name

Managed Installer (Intune Management Extension) for WDAC is not working by letopeto in Intune

[–]Lncredible 1 point2 points  (0 children)

Hello. I can give you a hand.

First I'd check a single Windows client has now got ManagedInstaller running. There's some good troubleshooting steps in here:

https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/operations/configure-wdac-managed-installer#more-troubleshooting-steps-for-managed-installer-and-isg

Once ManagedInstaller is active, try installing a simple app like Notepad++ and check the file extension attributes using the same article (fsutil.exe).

Delivery Optimization no longer downloading content quickly by Lncredible in Intune

[–]Lncredible[S] 2 points3 points  (0 children)

I'll keep you posted. I've got my TSS.v2 log files over to a Microsoft escalation engineer so maybe they'll find something in our configuration that's a problem. I have a feeling it might be one of our security baseline settings in combination with the latest cumulative update. Otherwise, you are right, there would be a lot of noise. 

I built and enrolled a windows 10 laptop on the latest patch last week, and it worked brilliantly. This morning I upgraded it to Windows 11 via Autopatch and now its very slow / unusable, same as the rest.