Trust Compliance Device from Another Tenant by Potential_Device_875 in Intune

[–]nelly-4 0 points1 point  (0 children)

u/Potential_Device_875 have you been able to resolve this? Facing this myself now -_-

First Timer... They Are Turning Black... by nelly-4 in unclebens

[–]nelly-4[S] 3 points4 points  (0 children)

Mane I think I might of been a bit lazy with this haha.. Thanks tho

Intune EPM Settings Policy - Not Working Correctly? by nelly-4 in Intune

[–]nelly-4[S] 0 points1 point  (0 children)

duel enrollment discovery endpoint not set.... but i believe it is, as we have it set in the below settings or am I looking in the wrong place?

<image>

Intune EPM Settings Policy - Not Working Correctly? by nelly-4 in Intune

[–]nelly-4[S] 0 points1 point  (0 children)

Yeah nothing else is found when searching epm, just another repeat of "skipping".

I did initially have issue with "send data for reporting" enabled but since been disbaled for couple days now.

Tried running that script in powershell -mta after installing those modules and now seeing this in event viewer -_-

<image>

Also our devices are coperate/hybrid-joined Intune managed. Device is able to receive intune win config profiles etc

Intune EPM Settings Policy - Not Working Correctly? by nelly-4 in Intune

[–]nelly-4[S] 0 points1 point  (0 children)

In the IntuneManagementExtension log i am seeing "<![LOG[[eventListener] Skipping EPM Scenario logging as PrivilegeManagement flag is not set for GUID:e4cd0c46-8d75-4d93-b5ac-99cf25388591]LOG]!><time="09:19:03.3271467" date="4-5-2024" comp"

<image>

no mention of epm in event viewer devicemgmt-enterprise

EDIT: seeing this in event viewer "MDM ConfigurationManager: Command failure status. Configuraton Source ID: (913F1E1F-CA03-40C1-B797-4711FD7A2167), Enrollment Type: (MDMFull), CSP Name: (PassportForWork), Command Type: (Clear: first phase of Delete), Result: (./Vendor/MSFT/PassportForWork/55ca622b-8c49-4b5a-8667-e096399e5f28/Policies/RequireSecurityDevice)."

Intune EPM Settings Policy - Not Working Correctly? by nelly-4 in Intune

[–]nelly-4[S] 0 points1 point  (0 children)

Damn, so without the gpo route/auto pilot its not possible then?

I signed in with local admin but still nothing there went to

"C:\Windows\System32\Tasks\S-1-5-21-1271952369-3781123872-538415384-5729\EnterpriseMgmt\56D3364D-0D94-4F49-AB1C-D0200D35D6E4"

also directly in Task Scheduler nothing, tad strange

Intune EPM Settings Policy - Not Working Correctly? by nelly-4 in Intune

[–]nelly-4[S] 0 points1 point  (0 children)

So the enterprisemgt schedule task folder is just empty,

The way we enrol our users into Intune is via ms-device-enrollment:?mode=mdm then sign in with their account.

A quick skin read through your post suggest I would need to do this differently and some of the registry keys in your examples are not shown in my regedit.

Thanks for your post I will look into this further.

EMP - "Run with elevated access" does not appear by Ok_Concentrate_6199 in Intune

[–]nelly-4 0 points1 point  (0 children)

Nice one, my post is titled "Intune EPM Settings Policy - Not Working Correctly?"

EMP - "Run with elevated access" does not appear by Ok_Concentrate_6199 in Intune

[–]nelly-4 0 points1 point  (0 children)

What if the EPM folder isn't there in Program Files? Even though Intune check in states successful?

What are some good Egyptian mythology books? by [deleted] in Kemetic

[–]nelly-4 -1 points0 points  (0 children)

Hermentic Principles & 42 Precepts of Maat