Forum Discussion

Adam Berns's avatar
Adam Berns
Brass Contributor
Dec 29, 2019

I cannot assign apps in intune to users for Windows 10

I am a little stuck. And there is a lot to it.  I have on premise AD, and I have dirsync in play syncing everything. I also have AD Premier plan 2 and Intune. I see the user there and I have added th...
Intune
SCCM
Software Management
Thijs Lecomte's avatar
Thijs Lecomte
Bronze Contributor
Dec 30, 2019
If you want to deploy apps/policies from Intune to your on-prem devices using SCCM you need to set-up Co Management.
The prequisite for Co Management is HYbrid Azure AD Joined computers (this means that your computers register itself to AzureAD. Check out this link: https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-managed-domains

For more details on Co Management, check this out: https://docs.microsoft.com/en-us/configmgr/comanage/tutorial-co-manage-clients
Adam Berns's avatar
Adam Berns
Brass Contributor
Dec 30, 2019

Thijs Lecomte I do not want to do co management. I want just Azure for some machines and sccm for others. But if I understand what you are saying, if I remove the PC from the on-prem and join it to the azure ad instead, that would fix it? I would find that hard to believe that is how this issue would be fixed.

  • Thijs Lecomte's avatar
    Thijs Lecomte
    Bronze Contributor
    Dec 30, 2019
    What are you trying to achieve exactly?

    You want to manage a machine that is AD joined, to be managed by Intune, but not by SCCM?

    Or do you want a machine that is only AAD Joined and full cloud native?
    • Adam Berns's avatar
      Adam Berns
      Brass Contributor
      Dec 30, 2019

      Thijs Lecomte 

      I want to be able to deploy apps to my windows 10 desktop via intune.

      I have checked the hybrid stuff both domain joined and sccm, and everything is showing up correctly.

      The only problem is that I am not seeing apps in the company portal app.

      • Adam Berns's avatar
        Adam Berns
        Brass Contributor
        Dec 30, 2019

        Just to confirm, I only show enrollment for devices, not users. No matter how I assign the group, a device group, a user group, on-prem AD group or cloud group, or cloud user or on prem user, the app never shows up in the company portal on the client. And I am at loss of tyring to find logs to look at. Nothing in DeviceManagement-Enterprise-Diagnostic-Provider, but nothing related to apps. The only error in that log is this, which I think has nothing to do with this problem: MDM ConfigurationManager: Command failure status. Configuration Source ID: (C65624AF-D59E-40A3-8B59-66777E8415D7), Enrollment Name: (MDMDeviceWithAAD), Provider Name: (Policy), Command Type: (Add: from Replace or Add), CSP URI: (./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Receiver/Properties/Policy/FakePolicy/Version), Result: (The system cannot find the file specified.). (BTW, I have no idea what FakePolicy is)