Event banner
Event details
Jason_Sandys
Microsoft
MicrosoftPlease open a support case to help dig into this as this is not the expectation.
Well, our company manages a lot of tenants for our customers. But the most heard frustration is that policies can take a "long time" to apply. Whenever you force a sync, the policies are applied quicker. I believe it still could be faster. Other MDM solutions use agents and when a new policy is configured a trigger is sent out to all those agents. This makes the change to policies almost instant for all online clients. Also reporting on if policies are applied is always behind. Especially when you are testing and need to see the results before publishing policies to production, reporting should be almost instant in my opinion.
- This is an issue for us too. There are scheduled tasks that get put down when joined that start out every couple of minutes for the first 15 minutes, then every 15 minutes for the first 2 hours, and then finally, every 8 hours. So, once you onboard to Intune, and the device is joined long enough, it only gets policy itself every 8 hours. It's hard to iterate to build policy sets over time on devices if I have to wait every 8 hours to see if the changes I make, make a difference or work as intended. We need a way to trigger policy application akin to gpupdate /force, and better reporting from both sides about conflicts. It's hard to find them and hard to then find the policy they are in.
- I agree about a way to create and deploy a scheduled task. I can see doing this like in the Templates on Remediation scripts. However, scheduled tasks are pretty important to Enterprise environments especially trying to provide a specific service kicking off at a particular time for a specific unit or Application as to not create a work stoppage.
- Jason_SandysThis is not accurate. The 8-hour sync interval is a planned "catch up" sync in case the device was offline or was not able to be contacted, however, there absolutely is an "agent" for Intune, it's just built into the OS already and there is a signal sent to devices as well when changes are made in the admin console that impact a device. On Windows, this is done using WNS which may or may not be able to notify devices on internal networks depending on the network configuration. There is also a service for WNS that we've seen folks disable. Finally, depending on other factors (like scale), these notifications can get throttled.
- Same here, especially also the status if policies are applied.
Greg NottageIn the portal go to Devices | All Devices - then click the Bulk Device Actions button in the toolbar at the top of the page. Select the relevant OS and under Device action select Sync.
