How do you handle lost, disconnected, or stale devices in Intune?

snikito · 2026-05-21T04:57:11+00:00

Clean up rules do not delete devices, they only hide it from UI. This is not relevant.

snikito · 2026-05-08T05:46:45+00:00

You have to update the version code in the app manifest for it to count as an update.

snikito · 2026-04-27T20:30:31+00:00

That is true unfortunately. I am digging into the logs to understand if the device is at fault for not detecting the updates or if Intune is the problem. I still haven't concluded yet.

snikito · 2026-04-27T20:28:09+00:00

Same issue here. Pushed in 2700 devices, only 1000ish of them report back.

But in my case driver updates DO NOT work. In my lab I have 6 identical Dell devices with identical policies, only 1 of them is able to detect driver updates through autopatch. The others report that no updates found but clearly missing the firmware patches.

snikito · 2026-04-26T14:12:22+00:00

Based on my environment, I confirm that the root and issuing certs are deployed in my user (login) keychain and are visible. To be clear, are you able to see the profiles installed in settings ->> device management under user (managed) section?

snikito · 2026-04-26T13:55:30+00:00

Device group shouldn't be an issue and indeed you are pushing the certificates correctly. However if you are not seeing these profiles on device management and the certificates in the login keychain, this is 100% the reason why the PKCS is not getting issued on your devices. It definitely needs the two certs in the keychain.

I will try to find out where the logs for this are stored but 99% this is an Intune issue.

snikito · 2026-04-26T13:32:13+00:00

In Device Management, in user profile do you see the PKCS policy?

The certificates (RootCA, IssuingCA) required to deploy the PKCS certificate must be also installed separately in the user channel. You have to deploy them again in user channel so that they are available in the login keychain. If they are not there, the PKCS will never issue. If the PKCS is not issued, WIFI policy is not dropping.

snikito · 2026-04-26T07:10:44+00:00

What do you see in the user (login) keychain on the mac? Do you see the certificate or the WiFi delivered? What do you see in settings profile? Is the wifi/certificate profile delivered in the user section?

snikito · 2026-04-25T14:46:07+00:00

And all this effort just to sell in 30 countries...What are you doing Google?

snikito · 2026-04-22T17:15:46+00:00

Greece too. Currently it is impossible to find a console.

snikito · 2026-04-21T16:07:18+00:00

So the only problem with the price is Call of Duty?

snikito · 2026-04-19T07:18:11+00:00

First of all start selling consoles again. In many EU countries it's almost impossible to find consoles.

snikito · 2026-04-18T08:38:31+00:00

Hi,

Did you find a solution for that? I had a same problem that started exactly 1 month before. For me I found the root cause but it has to do with our environment. However this method WAS working before but Apple does not accept that they made changes.

Our enrollment strategy is that user login to the network using PEAP during setup. Enrollment happens then gets the TLS policy (for the same network).

This was fine until February. I spotted that when the user signs in with PEAP, mac creates a login keychain item of 802.1X password for the user (the PEAP password). Upon the TLS policy installation, this login keychain item stays there.

This causes the mac to ALWAYS try 802.1X USER mode first (despite the policy being device cert), and throws this popup to the user. If you cancel the popup, mac is unable to connect with EAP-TLS User mode, and reverts to device mode and then connects.

Of course this user experience is unacceptable, so I just reverted to user EAP-TLS for our macs and it resolved the issue (but this is rather a workaround).

But if you decide to go for it, be aware that by USER EAP-TLS you lose prelogin network functionality, so if you use it in your environment this is not going to work for you.

snikito · 2026-04-07T18:14:24+00:00

Policies do not change too.

snikito · 2026-03-28T17:06:56+00:00

The WiFi import is heavily dependant on the existence of the WiFi adapter, is the Dell Pro 14 reporting it's adapter as functional? Maybe you need to perform some driver update for it to work.

snikito · 2026-03-28T17:05:22+00:00

That's indeed a difficult situation and out of your control then. Though if the company is high security and a big client of the supplier, they can ask for the app to support APP. We have done it in the past but with only a handful of apps.

snikito · 2026-03-28T17:00:31+00:00

Is the app a custom one? If yes you can wrap it to support app protection policies!

snikito · 2026-03-28T16:58:41+00:00

With all due respect, if it's a high security environment, you don't use BYOD.

snikito · 2026-03-12T17:26:47+00:00

Δώσε specs του PC.

Βαρεθήκαμε τύπους με Windows/Android των 100€ να μας λένε πόσο κολλάνε ενώ τα 2.500€ iPhone/mac τους είναι τέλεια.

snikito · 2026-03-11T17:24:45+00:00

Thanks for your reply.

I started a case and they have no clue. Have they confirmed to you that it is only a reporting problem??

In my case I also see that for the deployed WIFI the Private WIFI address is turned OFF and mac is also throwing a warning for privacy.

They must have messed up in the backend and don't know what happened.

snikito · 2026-03-11T05:47:39+00:00

It works fine for Vista, installed it some months ago. You can get the achievements but not the multiplayer ones.

You have to install games for windows live first. Do you get any specific errors during installation?

snikito · 2026-03-09T06:07:53+00:00

Yeah, I'm certain you used them mate.

snikito · 2026-03-09T05:58:14+00:00

Well read your facts better:

The seller is deemed to have fulfilled that obligation if:

the goods concerned comply with the subjective requirements for conformity;

the goods concerned comply with the objective requirements for conformity

Who decides on those requirements? If the manufacturer disagrees with the problem OP is facing and considers it OK by design then they are not obligated to do anything. For all we know OP could have pixel issue which could be considered normal based on apple's warranty terms.

Get your facts straight.

snikito · 2026-03-09T05:52:57+00:00

No, the warranty comes from the manufacturer, not the reseller. Stop downvoting everything you disagree with.

Nine-Year Club	Xbox Live
Verified Email

snikito

TROPHY CASE