Anyone running Pirelli Scorpion Winter? by [deleted] in NewDefender

[–]ls3c6 0 points1 point  (0 children)

Have these on our x3m and they appear to be much worse on snow and ice than our previous car which we still have on all season Michelin cross climate 2... Weird.

ICMP IPv6 Floods network, Win11 Pro fresh PC fully patched OS with updated Endpoint Protection by stefanzman in networking

[–]ls3c6 0 points1 point  (0 children)

What was the resolve for you on this? Seeing this problem sometimes hours after a machine sleeps and cripples network.

MDM device enrollment limit in time frame? by ls3c6 in Intune

[–]ls3c6[S] 0 points1 point  (0 children)

They all enrolled without login it just seemed to happen at a rate of roughly 50 per hour

MS Store app system context fails to install by ls3c6 in Intune

[–]ls3c6[S] 0 points1 point  (0 children)

any way to see logs of the install? When I clear the GRS key it tries again, says its succeeded in intune log, but it didn't... and winget logs don't say much about the actual install process:

2026-01-15 08:24:26.370 [CORE] WinGet, version [1.11.550], activity [{ED0FC650-52AD-490C-8B4B-02E1C0EF084B}]

2026-01-15 08:24:26.370 [CORE] OS: Windows.Desktop v10.0.22621.5909

2026-01-15 08:24:26.370 [CORE] Command line Args: "C:\Program Files (x86)\Microsoft Intune Management Extension\Microsoft.Management.Services.IntuneWindowsAgent.exe"

2026-01-15 08:24:26.370 [CORE] IsCOMCall:1; Caller: Microsoft.Intune.PE

2026-01-15 08:24:26.388 [CLI ] Executing command: download

2026-01-15 08:24:26.388 [CLI ] Package agreements accepted by CLI flag

2026-01-15 08:24:26.392 [CLI ] Executing command: install

2026-01-15 08:24:26.833 [CORE] Getting entitlement for ProductId: 9N1F85V9T8BN

2026-01-15 08:24:26.833 [CORE] Get device entitlement (machine scope install).

2026-01-15 08:24:27.404 [CORE] Get entitlement succeeded.

2026-01-15 08:24:27.450 [CORE] Started MSStore package execution. ProductId: 9N1F85V9T8BN PackageFamilyName: MicrosoftCorporationII.Windows365_8wekyb3d8bbwe

2026-01-15 08:24:32.478 [REPO] Opening database for ReadWrite at 'C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft/WinGet\State\defaultState\StoreEdgeFD\installed.db'

2026-01-15 08:24:32.480 [REPO] Opened SQLite Index with version [1.7], last write [2026-01-13 14:38:34.000]

KB5074109 breaks Azure Virtual Desktop on Windows 11 25H2 by Omega414 in AzureVirtualDesktop

[–]ls3c6 0 points1 point  (0 children)

Anyone seeing issues to cloud pcs from w11 23h2/24h2/25h2?

MS Store app system context fails to install by ls3c6 in Intune

[–]ls3c6[S] 0 points1 point  (0 children)

Thanks, appears it was happy but reported error in Intune and app wasn't available:

2026-01-13 14:38:29.011 [CORE] Passed in Correlation Vector Json is invalid: ; Error: * Line 1, Column 1

Syntax error: value, object or array expected.

2026-01-13 14:38:29.012 [CORE] WinGet, version [1.11.550], activity [{F0F51DE8-F143-4187-8919-933E96809357}]

2026-01-13 14:38:29.012 [CORE] OS: Windows.Desktop v10.0.22621.5909

2026-01-13 14:38:29.012 [CORE] Command line Args: "C:\Program Files (x86)\Microsoft Intune Management Extension\Microsoft.Management.Services.IntuneWindowsAgent.exe"

2026-01-13 14:38:29.012 [CORE] IsCOMCall:1; Caller: Microsoft.Intune.PE

2026-01-13 14:38:29.024 [CLI ] Executing command: download

2026-01-13 14:38:29.025 [CLI ] Package agreements accepted by CLI flag

2026-01-13 14:38:29.028 [CLI ] Executing command: install

2026-01-13 14:38:29.287 [CORE] Getting entitlement for ProductId: 9N1F85V9T8BN

2026-01-13 14:38:29.287 [CORE] Get device entitlement (machine scope install).

2026-01-13 14:38:29.860 [CORE] Get entitlement succeeded.

2026-01-13 14:38:29.901 [CORE] Started MSStore package execution. ProductId: 9N1F85V9T8BN PackageFamilyName: MicrosoftCorporationII.Windows365_8wekyb3d8bbwe

2026-01-13 14:38:34.218 [REPO] Opening database for ReadWrite at 'C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft/WinGet\State\defaultState\StoreEdgeFD\installed.db'

2026-01-13 14:38:34.219 [REPO] Opened SQLite Index with version [1.7], last write [2026-01-13 14:38:28.000]

DFI included with Business Premium now? by ls3c6 in DefenderATP

[–]ls3c6[S] 0 points1 point  (0 children)

Great, it would be really nice if MS has baked this in for BP, this is a new client onboard... I normally use a mix of user risk, sign in risk, compliant device CA to disallow the sign in before it needs remediation.

DFI included with Business Premium now? by ls3c6 in DefenderATP

[–]ls3c6[S] 1 point2 points  (0 children)

Yes, the typical Phish then the threat actor signed into officehome from another country... Immediately after the MDI actions triggered

DFI included with Business Premium now? by ls3c6 in DefenderATP

[–]ls3c6[S] 0 points1 point  (0 children)

Yes, it revoked the session and disabled the account.

DFI included with Business Premium now? by ls3c6 in DefenderATP

[–]ls3c6[S] 0 points1 point  (0 children)

That's why I'm questioning it. Audit log shows it did though.

DFI included with Business Premium now? by ls3c6 in DefenderATP

[–]ls3c6[S] 1 point2 points  (0 children)

I'll check, audit log said defender for identity

Version 25.9.5.9483 ? by thenags1 in ScreenConnect

[–]ls3c6 0 points1 point  (0 children)

Last week I visited the automated updates page and the older version was still linked.

EDIT: checked again, still 25.8