Forum Widgets
Latest Discussions
Reminder: Intune-managed Win32 app delivery will be HTTPS-only, affecting Connected Cache customers
Starting today, Intune will be enforcing HTTPS-only delivery for managed Win32 app content Why this matters for Connected Cache customers: if HTTPS isn't configured on your cache nodes, clients that previously pulled Intune Win32 app content through Connected Cache can still download content, but those requests bypass cache nodes and fall back to CDN. This behavior can increase internet egress and bandwidth usage. This enforcement was previously announced in February via Message Center and the Intune Tech Community blog: How to enable HTTPS support for Microsoft Connected Cache for Enterprise and Education. Get started with the following documentation: Configure HTTPS on your cache nodes HTTPS setup on Windows HTTPS setup on Linux Validate HTTPS functionality Validate HTTPS on Windows Validate HTTPS on Linux Additionally, you can verify Intune Win32 HTTPS enforcement on a client machine Open C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\AppWorkload.log. Find log entries that include the app download URL for the app assignment you are validating. Confirm the URL is HTTPS (for example, starts with https://). Optionally correlate with Delivery Optimization status to verify whether bytes are being served from cache versus CDN. Configuration Manager customers If you're using Configuration Manager distribution points with Connected Cache, review and apply the published hotfix and prerequisites: Connected Cache update for Microsoft Configuration Manager versions 2409, 2503, and 2509 (KB33247081). If you'd find it useful, reply in this thread and we can also post a step-by-step TLS setup walkthrough video for the Connected Cache community.
WSL Install Failures - 2.7.8.0
For those deploying new MCC servers, you may run into an error installing the distro for WSL, this appears to be due to a bug in WSL 2.7.8.0. Affecting KVM & AMD CPU devices. WSL 2.7.9 should be available shortly to mitigate this issue. Errors seen: Error code: Wsl/InstallDistro/Service/RegisterDistro/CreateVm/0x800705b4 Error code: Wsl/InstallDistro/0x80072eff Failure, expected Distro: Ubuntu-24.04. No Distros found. The same errors will be seen when running 'wsl --install' which defaults to downloading Ubuntu. https://github.com/microsoft/WSL/issues/40783
Windows 11 :: Return Code: 13631746
Hi Trying to install Cache Node on Windows 11 and it fails with the below error: System.Management.Automation.RuntimeException: Failure: MCC failed to install during provisioning command line, please check install from registered task install logs to diagnose issue and retry, Return Code: 13631746 Checked the log "WSL_Mcc_Install_FromRegisteredTask_Transcript_01-13-2025_03-19-26.txt" and last few lines shared below Get:37 http://security.ubuntu.com/ubuntu jammy-security/multiverse amd64 c-n-f Metadata [224 B] Fetched 15.2 MB in 2s (7274 kB/s) Reading package lists... E: Could not get lock /var/lib/dpkg/lock-frontend. It is held by process 1934 (unattended-upgr) E: Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend), is another process using it? E: Could not get lock /var/lib/dpkg/lock-frontend. It is held by process 1934 (unattended-upgr) E: Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend), is another process using it? ./installiotedge.sh: line 352: /etc/docker/daemon.json: No such file or directory ./installiotedge.sh: line 353: /etc/docker/daemon.json: No such file or directory ./installiotedge.sh: line 355: /etc/docker/daemon.json: No such file or directory Failed to restart docker.service: Unit docker.service not found. Hit:1 https://packages.microsoft.com/ubuntu/22.04/prod jammy InRelease Hit:2 http://security.ubuntu.com/ubuntu jammy-security InRelease Hit:3 http://archive.ubuntu.com/ubuntu jammy InRelease Hit:4 http://archive.ubuntu.com/ubuntu jammy-updates InRelease Hit:5 http://archive.ubuntu.com/ubuntu jammy-backports InRelease Reading package lists... E: Could not get lock /var/lib/dpkg/lock-frontend. It is held by process 1934 (unattended-upgr) E: Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend), is another process using it? Rules updated Rules updated (v6) Rules updated Haven't faced this error in other installation done on the same type of configurationLarge Intune Win32 apps don't seem to cache
I was hoping to see one of our MCC's cache some large Intune Win32 app packages. One is around 28GB and a couple of others are around 18GB. This is within Intune's Win32 app size limit. It's for a self-deploying Autopilot build and these are large sets of maps and documents. All packages deploy accurately given the download time needed. We have 700 to build. The Internet service available at build sites is not really sufficient. An MCC seemed like the perfect solution. Unfortunately, there is apparent evidence that the packages are not being cached. Not only do they not appear to register in the metrics, each device takes all day to build. Obviously, the more we try to do at once, the worse it gets. Here is a screenshot of the metrics for the last 30 days: This cache is dedicated to our PC Build Room's VLAN subnet. As you can see, Intune content only seems to account for 1.99GB when it should be much more than this. The MCC is 300GB in size. Being able to diagnose why the MCC is not caching these Win32 app packages would be extremely useful. Is it our infrastructure or something else? I have an open support case and also posted about it in the MCCP. Microsoft reps advised that MCC should be able to support these packages.
Question regarding update requests on the MCC node
So, as I have understood it, the MCC requires an update request to be requested 3 times by different devices before it actually starts to download it to cache it. 1. How many downloads does the MCC node download at the same time? 2. Does the MCC node keep a que list? 3. Does an update request ever "time out" on the MCC node or is it kept forever until reaching 3? What we have seen on the lab with 10 laptops, it is struggling to get more than 20% updates distributed from the MCC node. We re-install the laptops with the same USB installer multiple times when Windows reports it to be updated, so all of them are installed on the same build level every time. 4. How many times do we need to "re-install" windows until all updates are cached?Check cache status on MCC node
Is it posssible to check/monitor the amount of data the MCC node has cached? Since the MCC downloads updates only when requested 3x by the clients, it would be good to know how much % of an update is actually cached. This would give the most value when troubleshooting the MCC and the distribution of updates. We have configured a MCC in our LAB with 10 connected clients, and the amount of data shared varies too much for each client.MCC Container missing mount points - unable to get CSR
MCC for Enterprise installed on Server 2022 I have around 20 nearly identical servers set up with MS Connected Cache, but two of them refuse to deploy the container in a fully operational state. Everything works perfectly fine over port 80. However, when I run the generateCSR.ps1 script, it fails. After digging around for quite a while, I found that the mount point inside the container is missing. This means that although the CSR is being generated, it can't send it back to Ubuntu and then to Windows. Running the 'docker inspect MCC' command yields this result: But, it's supposed to look like this: Apparently, you can't just add a mount point to the container. It has to be removed and redeployed with the mount point specified. However, I'm not able to figure out any way of doing that since the script seems to be deploying the container in a way that it generates the configuration file when running the deployment script instead of me being able to modify it for the deployment. I'm at a bit of a loss as to how to fix this or why it's even happening. I've already tried ripping everything out, including WSL and Hyper-V, and redeploying, with no success. Thoughts?
