Forum Discussion
Intune Management Extension msi not installing
Hi, We're a newly setup intune hybrid join environment. All our computers are showing in Intune and compliant, however a large chunk are not actually properly setup. They do not roll out apps nor...
sjgibb99 how were those devices enrolled into Intune in the first place? as i have seen this happening when they did used the auto enroll functionality but juse manually enrolling with mdm only option
as descrbined here
MDM Only Enrollment | Breaks EPM deployment | DEM (call4cloud.nl)
Maybe checking what kind of enrollment there is on such a problem device?
I've double checked and the GPO rule for auto-enrollment is true. All devices should have been treated the same, we have devices both locally to the DC and access through VPN. I'd say probably a third of devices look like they are setup correctly.
This particular test machine I can see on Entra Admin Centre is showing as MDM = Microsoft Intune, Security Settings Management = Microsoft Intune and Compliant = Yes
Thanks for the link to the blog. It has a lot in there, referencing values in the registry but not necessarily where they are located. I do note there are links to other blog pages which maybe have the answer.
This particular test machine I can see on Entra Admin Centre is showing as MDM = Microsoft Intune, Security Settings Management = Microsoft Intune and Compliant = Yes
Thanks for the link to the blog. It has a lot in there, referencing values in the registry but not necessarily where they are located. I do note there are links to other blog pages which maybe have the answer.
- In the software\microsoft\enrollments. There should be a guid that corrosponds with the intune enrollment. I am wondering what enrollment type it mentions
- I found it after doing a search on the registry for ForceAadToken.
The value for EnrollmentType is 6.
Which going by the blog is correct?- Yep… and if you manually download the ime?