Home

Every single computer reporting Type of system scan to perform failure suddenly

%3CLINGO-SUB%20id%3D%22lingo-sub-376422%22%20slang%3D%22en-US%22%3EEvery%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376422%22%20slang%3D%22en-US%22%3E%3CP%3EA%20few%20hours%20ago%2C%20my%20Intune%20dashboard%20started%20reporting%20a%20failure%20on%20every%20single%20computer%20Intune%20manages%20for%20the%20device%20configuration%20setting%20%22Type%20of%20system%20scan%20to%20perform%22.%26nbsp%3B%20Anyone%20else%20seeing%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-376422%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376767%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376767%22%20slang%3D%22en-US%22%3E%3CP%3EI%20reapplied%20the%20configuration%20policy%20and%20now%20all%20machines%20are%20showing%20the%20following%20error%20for%20Type%20of%20system%20scan%20to%20perform%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-2016281112%20(Remediation%20failed)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnd%20this%20is%20in%20the%20eventviewer%20for%20Device-Management-Enterprise-Diagnostics-Provider%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMDM%20PolicyManager%3A%20Set%20policy%20int%2C%20Policy%3A%20(ScanParameter)%2C%20Area%3A%20(Defender)%2C%20EnrollmentID%20requesting%20set%3A%20(1C7F1C5D-1365-4C20-8848-66C18F279E93)%2C%20Current%20User%3A%20(Device)%2C%20Int%3A%20(0x0)%2C%20Enrollment%20Type%3A%20(0x6)%2C%20Scope%3A%20(0x0)%2C%20Result%3A(0x86000011)%20Unknown%20Win32%20Error%20code%3A%200x86000011.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20well%20as%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMDM%20ConfigurationManager%3A%20Command%20failure%20status.%20Configuraton%20Source%20ID%3A%20(1C7F1C5D-1365-4C20-8848-66C18F279E93)%2C%20Enrollment%20Type%3A%20(MDMDeviceWithAAD)%2C%20CSP%20Name%3A%20(Policy)%2C%20Command%20Type%3A%20(SetValue%3A%20from%20Replace)%2C%20Result%3A%20(.%2FVendor%2FMSFT%2FPolicy%2FConfig%2FDefender%2FScanParameter).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376758%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376758%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F82527%22%20target%3D%22_blank%22%3E%40peter%20horrigan%3C%2FA%3ENo%2C%20it's%20still%20happening.%26nbsp%3B%20I've%20got%20a%20trouble%20ticket%20opened%20with%20Intune%20support%20on%20this%20one.%26nbsp%3B%20But%20it's%20a%20head%20scratcher%2C%20that's%20for%20sure.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376537%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376537%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20not%20seeing%20that%2C%20did%20it%20resolve%20itself%3F%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F145288%22%20target%3D%22_blank%22%3E%40William%20Cunningham%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-563033%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-563033%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F145288%22%20target%3D%22_blank%22%3E%40William%20Cunningham%3C%2FA%3E%2C%20did%20you%20come%20to%20a%20resolution%20on%20this%3F%20All%20my%20Intune%20devices%20are%20having%20the%20same%20error.%20Thanks%20in%20advance.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-891794%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-891794%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20seeing%20this%20issue%20as%20well.%26nbsp%3B%20Engaged%20Intune%20support%20and%20working%20through%20it.%26nbsp%3B%20We%20have%20found%20that%20this%20setting%20does%20exist%20in%20the%20Windows%20Defender%20ATP%20profile%20to%20configure%20the%20scan%20type%2C%20however%2C%20it%20does%20not%20make%20any%20difference%20when%20it%20is%20applied%20from%20my%20testing.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIntune%20build%201909.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-904149%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-904149%22%20slang%3D%22en-US%22%3EIn%20the%20MDM%20Baseline%2C%20set%20%22Defender%20schedule%20scan%20day%22%20to%20%22No%20Scheduled%20Scans%22.%20A%20false%20error%20will%20be%20reported%20if%20this%20is%20set%20to%20anything%20else%20because%20the%20baseline%20is%20missing%20the%20day%2Ftime%20options.%20Instead%2C%20set%20these%20parameters%20in%20the%20ATP%20Baseline%20or%20a%20regular%20Configuration%20Profile%20instead.%20That's%20how%20I%20got%20the%20error%20to%20go%20away.%3C%2FLINGO-BODY%3E
William Cunningham
New Contributor

A few hours ago, my Intune dashboard started reporting a failure on every single computer Intune manages for the device configuration setting "Type of system scan to perform".  Anyone else seeing this?

6 Replies

I am not seeing that, did it resolve itself?@William Cunningham 

@peter horriganNo, it's still happening.  I've got a trouble ticket opened with Intune support on this one.  But it's a head scratcher, that's for sure.

I reapplied the configuration policy and now all machines are showing the following error for Type of system scan to perform: 

 

-2016281112 (Remediation failed)

 

And this is in the eventviewer for Device-Management-Enterprise-Diagnostics-Provider:

 

MDM PolicyManager: Set policy int, Policy: (ScanParameter), Area: (Defender), EnrollmentID requesting set: (1C7F1C5D-1365-4C20-8848-66C18F279E93), Current User: (Device), Int: (0x0), Enrollment Type: (0x6), Scope: (0x0), Result:(0x86000011) Unknown Win32 Error code: 0x86000011.

 

As well as:

 

MDM ConfigurationManager: Command failure status. Configuraton Source ID: (1C7F1C5D-1365-4C20-8848-66C18F279E93), Enrollment Type: (MDMDeviceWithAAD), CSP Name: (Policy), Command Type: (SetValue: from Replace), Result: (./Vendor/MSFT/Policy/Config/Defender/ScanParameter).

Hi @William Cunningham, did you come to a resolution on this? All my Intune devices are having the same error. Thanks in advance.

I am seeing this issue as well.  Engaged Intune support and working through it.  We have found that this setting does exist in the Windows Defender ATP profile to configure the scan type, however, it does not make any difference when it is applied from my testing.

 

Intune build 1909. 

In the MDM Baseline, set "Defender schedule scan day" to "No Scheduled Scans". A false error will be reported if this is set to anything else because the baseline is missing the day/time options. Instead, set these parameters in the ATP Baseline or a regular Configuration Profile instead. That's how I got the error to go away.
Related Conversations
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
7 Replies