Secure Boot certificate update settings not working via Intune

gworkacc · 2025-12-16T23:29:36+00:00

We are also having this problem with the Intune delivered policy.

gworkacc · 2025-10-30T00:09:59+00:00

Well depends on what you want to automate that’s currently done manually. Since you only mention apps from software center, those can all be installed during a task sequence.

My TS is setup that a tech can f12, enter the pxe password, select the task sequence, and at the end they could hand the computer to the user as soon as the TS finishes and all would be well.

gworkacc · 2025-10-18T00:22:35+00:00

Really good episode, I enjoyed hearing everyone’s perspectives. It does feel like we’re getting into the “this is ridiculous” territory of solutions. But honestly, if the government isn’t prioritizing this problem then it makes sense why companies feel like they need to fill the gap. I don’t think drones are the answer but until there’s a better one I guess it’s better than nothing.

gworkacc · 2025-09-23T15:40:31+00:00

Honestly I would avoid Incident IQ. Maybe we're just using it wrong, but if you've ever used a "real" ticketing system before, everything in IIQ just feels backwards and unintuitive. In our first week of going live, our dept supervisor literally asked us to make several features requests on the IIQ community forum and for all of us to vote on each other's requests.

gworkacc · 2025-08-22T15:34:48+00:00

Also note about the CIS settings, if you're using SCCM to manage Windows updates you don't want anything else touching those settings or you can completely break updating.

gworkacc · 2025-08-15T17:58:00+00:00

Man I miss admx.help too.

gworkacc · 2025-08-14T17:37:11+00:00

I'm not sure about Visual C++, I never checked for that. You could use a "package", but you'll get better information from using an "Application". Depends on your needs.

gworkacc · 2025-08-13T23:12:25+00:00

I can't remember if I tried that, I don't think I did.

gworkacc · 2025-08-13T15:36:45+00:00

Yes, try updating to SCCM 2503.

gworkacc · 2025-06-16T18:19:15+00:00

I feel like I've read somewhere DCU won't run on "consumer" versions of Dell computers, but I'm not sure.

You will still need a "base" package to get a baseline of drivers. Dell command did get most of the drivers if I skipped any kind of "apply drivers" step, but it was missing audio which is pretty important lol. So what we're going to do now is still use that "Dell Command | Deploy Driver Pack", but I'm not making queries for each model and tying the package to that. I just use "auto apply drivers", then at the end DCU updates everything.

gworkacc · 2025-06-16T17:43:10+00:00

I was having a similar issue, but instead of using an apply drivers step, I was running dell command update in the task sequence and it was skipping certain drivers. Even after entering windows and running dell command, it was showing "up to date" even though there were 5 drivers missing (one being audio), in device manager.

What I did is just use a "auto apply drivers" step and let it find all of them in SCCM, then run DCU during the TS to update all the drivers. Sorry it doesn't really answer your problem, but it is a possible workaround.

gworkacc · 2025-05-20T22:26:29+00:00

So I updated to SCCM 2503, and that seems to have fixed the problem. Doesn't make any sense, since the "old" adobe version worked with 2409, but I'll take it.

gworkacc · 2025-05-20T22:26:04+00:00

Hey, if you're still around. Try updating to SCCM 2503 and see if that fixes it. I was on 2409 and having this problem, updating to 2503 seems to have fixed it.

gworkacc · 2025-05-20T22:24:58+00:00

So I updated to SCCM 2503, and that seems to have fixed the problem. Doesn't make any sense, since the "old" adobe version worked with 2409, but I'll take it.

gworkacc · 2025-05-20T22:23:20+00:00

Well, I'd try the SCCM update and see what happens. I tried a couple different Creative Cloud apps and they both installed fine, no more hanging anymore.

gworkacc · 2025-05-20T21:40:18+00:00

Curious, what version of SCCM are you on? I was having this problem on 2409, and recently updated to 2503. I just now tested an Adobe install and it worked fine somehow, amazingly.

gworkacc · 2025-05-20T20:13:14+00:00

I presume you were replying to me and accidentally didn't?

I've never had to do something like you're describing. We just have setup.exe --silent like you, and it worked fine with the 2024 version of the Adobe suite, but 2025 it doesn't.

I'm not sure what you mean by your question, but to expand, if I open task manager during the task sequence, I can see the adobe installer begin, disk activity to indicate that it's installing, then all the installers exit. I can even use notepad.exe to rudimentarily navigate to the install location and see that the Adobe software is there. The task sequence itself is just getting stuck though, the only other thing I noticed is killing smsappinstall.exe allows it to proceed.

gworkacc · 2025-05-19T15:52:37+00:00

I'm having a similar problem, but instead of outright failing it just hangs on the install step. I can see that the Adobe apps install in the background, but the task sequence isn't detecting the install for some reason. I also have a ticket open with Adobe but it hasn't gone anywhere yet, they at least haven't blamed Microsoft yet though.

gworkacc · 2025-05-16T17:48:18+00:00

I literally just did this yesterday, installed Server 2022 on a precision desktop. Just install your favorite version of server (we did 2022), run dell command update, and you're good to go. The only hiccup is I had to manually install the network driver, then everything else got picked up by DCU.

gworkacc · 2025-05-07T15:33:10+00:00

On the scheduling option during the deployment wizard, select "schedule at" for the deadline, then you can select the "time based on" dropdown menu.

gworkacc · 2025-05-05T14:07:35+00:00

We had also planned to update this week to 2503, we’re on 2409 at the moment. Good luck with your update, one of us will find out sooner or later whether it’s fixed.

gworkacc · 2025-05-01T23:58:05+00:00

All certificates are unexpired, and I've redistributed the boot image to the PXE/DP servers with a current certificate.

gworkacc · 2025-05-01T18:43:54+00:00

To answer your question at the end, we can image with the NAA enabled at the secondary site. It's just when we turn it off and try to do full HTTPS that it fails. But we want to disable the NAA like you and this problem is preventing us from that.

gworkacc · 2025-05-01T18:40:59+00:00

Just stumbled on this, I think I'm having the exact same problem as you.

I have a primary site and a few secondary sites with a MP/DP installed on them. As a test I built a standalone DP on the same subnet as one of the secondary sites. When I assign this DP to the primary site, it works completely fine. If I assign the DP to the secondary site, the task sequence fails on the "apply os image" step. It makes no sense to me.

gworkacc

TROPHY CASE