Blog Post

Configuration Manager Blog
4 MIN READ

Managing remote machines with cloud management gateway in Microsoft Endpoint Configuration Manager

RobYork's avatar
RobYork
Icon for Microsoft rankMicrosoft
Mar 18, 2020
In light of the global situation that has escalated over the past weeks regarding COVID-19 and the coronavirus; there has been a significant increase in the number people working from home. Indeed, m...
Updated Mar 18, 2020
Version 3.0
cloud-attached management
cm current branch
Unified Endpoint Management
Andy D'Hollander's avatar
Andy D'Hollander
Brass Contributor
Mar 26, 2020

https://twitter.com/robdotyork We've been implementing CMG (using Enhanced HTTP + Azure AD) and are happy to see already quite some traffic from the Cloud DP's.
However, we run into an issue where clients using the CMG as management point, don't see user-targeted applications in their Software Center, and in the SCClient logs it shows: 

 

Using endpoint Url: https://*********.CLOUDAPP.NET/CCM_Proxy_MutualAuth/72057594037927951:443/CMUserService_WindowsAuth, Windows authentication (Microsoft.SoftwareCenter.Client.Data.ACDataSource+<>c at <RefreshLocalSettingsAsync>b__16_0) SCClient 3/26/2020 12:33:19 PM 5 (0x0005)

GetApplicationsAsync: The HTTP request was forbidden with client authentication scheme 'Negotiate'.. Unable to fetch user categories, unknown communication problem.      (Microsoft.SoftwareCenter.Client.ViewModels.SoftwareListViewModel+<LoadAppCatalogApplicationsAsync>d__164 at MoveNext)
 
Any ideas on what I'm missing? All the rest seems to work fine.