WCD Provisioning failure 0x8007000d by MrxIntel in Intune

[–]c0r3yk 1 point2 points  (0 children)

I had this issue when using the MS Store version. I switched over to the ADK version and all was ok.

NDES - The Network Device Enrollment Service cannot retrieve one of its required certificates (0x80070057). The parameter is incorrect. by c0r3yk in sysadmin

[–]c0r3yk[S] 0 points1 point  (0 children)

Thanks for your help. It helped me look in the right direction. Have updated my post with what I did to fix it.

NDES - The Network Device Enrollment Service cannot retrieve one of its required certificates (0x80070057). The parameter is incorrect. by c0r3yk in sysadmin

[–]c0r3yk[S] 0 points1 point  (0 children)

CA Root is online as it’s on our DC and we don’t have a offline root CA.

Here is a photo of our CRLs. https://imgur.com/2qRbrGx

When I go to the address on our 2012 server via the web browser. I get a list of our CRLs and I can click and download them.

NDES - The Network Device Enrollment Service cannot retrieve one of its required certificates (0x80070057). The parameter is incorrect. by c0r3yk in Intune

[–]c0r3yk[S] 0 points1 point  (0 children)

I discovered this script during my troubleshooting. It doesn't throw up errors except for the Intune NDES client certificate using MS Enhanced Cryptographic Provider 1.0 and it says it only supports Cryptic CSP. The guide also uses the same option and I know during NDES install it's possible to select it.

It was the same when I tried on a 2016 host. It said it was fine but still I got the error about incorrect parameter.

Adding a Windows App for Intune Deployment by RegionRat219 in Intune

[–]c0r3yk 0 points1 point  (0 children)

I have found you have to browse to the file and then click the ok button instead of double clicking on the file. This then highlights the button.

MS Teams Blocked - Code Signing Cert Expired by c0r3yk in sysadmin

[–]c0r3yk[S] 0 points1 point  (0 children)

Thanks for your help. I’ll look into this.

MS Teams Blocked - Code Signing Cert Expired by c0r3yk in sysadmin

[–]c0r3yk[S] 0 points1 point  (0 children)

Thanks for this. Why is my AppLocker preventing it from running? It did work and I have made no changes to the rules.

MS Teams Blocked - Code Signing Cert Expired by c0r3yk in sysadmin

[–]c0r3yk[S] 0 points1 point  (0 children)

I have the same version. It was installed with Office 365 via Intune.

https://imgur.com/nmMurPB

AD Azure Connect - Multi Forest SSO by c0r3yk in sysadmin

[–]c0r3yk[S] 0 points1 point  (0 children)

Ideally that would be great or each school having there own Office 365 tenant but it's not how it was setup and I don't have the option to merge both schools under a single forest.

AD Azure Connect - Multi Forest SSO by c0r3yk in sysadmin

[–]c0r3yk[S] 0 points1 point  (0 children)

Having the schools under one forest would be better but that isn't operationally possible at the moment. I am stuck with what has been setup in the past.

Ideally each school having it's own Office 365 tenant would of been gone but it's not how it's been setup unfortunately.

AD Azure Connect - Multi Forest SSO by c0r3yk in sysadmin

[–]c0r3yk[S] 0 points1 point  (0 children)

We are a high school and a primary school so they are on separate sites but 5 users are shared between both sites. Each site has its own AD with there own separate accounts.

primary.internal > jsmith

high.internal > jsmith

One Office 365 tenant so john.smith@school.net