MicrosoftIncredible news Chris_Morrissey!
Looking forward to the IPP story, Secure Boot commandlets, and Smart App control!
Many thanks for upcoming AMA about Secure Boot. Many unmanaged devices and Windows Server I see stuck in the state they have DL the updates but cannot apply it. 😕
Questions:
For the IPP, is the team working on an experience that makes it easier to change and removing the drivers natively in Settings app?
Current devices often have a fax queue and printing queue. Settings app control for default printer doesn't work as expected. fallback to control panel is required for setting up the default queue. Filed that in the hub but no action so far.
MicrosoftHello Karl-WE , Thank you for reporting the issue. Is your team observing the Secure Boot updates not being applied even after setting the AvaialbleUpdates policy and running the Secure Boot Update task? Do you see any of the Secure Boot error events under TPM-WMI channel in System.evtx log ? List of all Secure Boot events are documented at Secure Boot DB and DBX variable update events - Microsoft Support .
Can you share the output of Powershell command Get-SecureBootUEFI -name DB -Decoded to look what certificates ar ein DB?
Prabhakar_MSFT if possible let's look into this offline. I would reply here if we find a common pattern or remediation. You can certainly DM me and we can continue via MVP NDA channels.
For the new command I need to check the output again. Errors exist will provide it then.
Thanks for helping out!
