Home

Update device configuration Profile

%3CLINGO-SUB%20id%3D%22lingo-sub-248275%22%20slang%3D%22en-US%22%3EUpdate%20device%20configuration%20Profile%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-248275%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20created%20a%20device%20configuration%20profile%20to%20ingest%20Onedrive%20ADMX.%3C%2FP%3E%3CP%3EThose%20admx%20ingestion%20only%20contains%20the%20policies%20to%20silent%20config%20Onedrive.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20know%20want%20to%20replcace%20the%20xml%20with%20a%20new%20xml%20that%20has%20more%20policies%20so%20i%20can%20configure%20known%20folder%20move.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20i%20do%20that%20de%20admx%20is%20not%20loaded%20on%20the%20targeted%20devices.%20Instead%20i%20get%20an%20event%20ID%20454%20error.%3C%2FP%3E%3CP%3EWhat%20am%20i%20doing%20wrong%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELogboeknaam%3A%20Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%2FAdmin%20Bron%3A%20Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%20Datum%3A%208-9-2018%2011%3A06%3A28%20Gebeurtenis-id%3A454%20Taakcategorie%3A%20Geen%20Niveau%3A%20Fout%20Trefwoorden%3A%20Gebruiker%3A%20SYSTEM%20Computer%3A%26nbsp%3Bxxxxxxx%20Beschrijving%3A%20MDM%20ConfigurationManager%3A%20Command%20failure%20status.%20Configuraton%20Source%20ID%3A%20(E60DE700-BEFA-43C6-90F3-8F8906C7BB83)%2C%20Enrollment%20Type%3A%20(MDMDeviceWithAAD)%2C%20CSP%20Name%3A%20(Policy)%2C%20Command%20Type%3A%20(SetProperty%3A%20Format%20or%20Type%20change)%2C%20Result%3A%20(.%2FVendor%2FMSFT%2FPolicy%2FConfigOperations%2FADMXInstall%2FOneDriveNGSC%2FPolicy%2FOneDriveAdmx).%20Gebeurtenis-XML%3A%20%3CEVENT%20xmlns%3D%22%26quot%3B%26lt%3BA%22%20href%3D%22http%3A%2F%2Fschemas.microsoft.com%2Fwin%2F2004%2F08%2Fevents%2Fevent%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%3CA%20href%3D%22http%3A%2F%2Fschemas.microsoft.com%2Fwin%2F2004%2F08%2Fevents%2Fevent%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fschemas.microsoft.com%2Fwin%2F2004%2F08%2Fevents%2Fevent%3C%2FA%3E%22%26gt%3B%20%3CSYSTEM%3E%20%3CPROVIDER%20name%3D%22%26quot%3BMicrosoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%26quot%3B%22%20guid%3D%22%26quot%3B%7B3DA494E4-0FE2-415C-B895-FB5265C5C83B%7D%26quot%3B%22%3E%3C%2FPROVIDER%3E%20%3CEVENTID%3E454%3C%2FEVENTID%3E%20%3CVERSION%3E0%3C%2FVERSION%3E%20%3CLEVEL%3E2%3C%2FLEVEL%3E%20%3CTASK%3E0%3C%2FTASK%3E%20%3COPCODE%3E0%3C%2FOPCODE%3E%20%3CKEYWORDS%3E0x8000000000000000%3C%2FKEYWORDS%3E%20%3CTIMECREATED%20systemtime%3D%22%26quot%3B2018-09-08T09%3A06%3A28.706361600Z%26quot%3B%22%3E%3C%2FTIMECREATED%3E%20%3CEVENTRECORDID%3E20531%3C%2FEVENTRECORDID%3E%20%3CCORRELATION%3E%3C%2FCORRELATION%3E%20%3CEXECUTION%20processid%3D%22%26quot%3B6180%26quot%3B%22%20threadid%3D%22%26quot%3B5128%26quot%3B%22%3E%3C%2FEXECUTION%3E%20%3CCHANNEL%3EMicrosoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%2FAdmin%3C%2FCHANNEL%3E%20%3CCOMPUTER%3EXXXXXXXXXXX%3C%2FCOMPUTER%3E%20%3CSECURITY%20userid%3D%22%26quot%3BS-1-5-18%26quot%3B%22%3E%3C%2FSECURITY%3E%20%3C%2FSYSTEM%3E%20%3CEVENTDATA%3E%20%3CDATA%20name%3D%22%26quot%3BMessage1%26quot%3B%22%3EE60DE700-BEFA-43C6-90F3-8F8906C7BB83%3C%2FDATA%3E%20%3CDATA%20name%3D%22%26quot%3BMessage2%26quot%3B%22%3EMDMDeviceWithAAD%3C%2FDATA%3E%20%3CDATA%20name%3D%22%26quot%3BMessage3%26quot%3B%22%3EPolicy%3C%2FDATA%3E%20%3CDATA%20name%3D%22%26quot%3BInternalCmdType%26quot%3B%22%3E9%3C%2FDATA%3E%20%3CDATA%20name%3D%22%26quot%3BMessage5%26quot%3B%22%3E.%2FVendor%2FMSFT%2FPolicy%2FConfigOperations%2FADMXInstall%2FOneDriveNGSC%2FPolicy%2FOneDriveAdmx%3C%2FDATA%3E%20%3CDATA%20name%3D%22%26quot%3BHexInt1%26quot%3B%22%3E0x86000011%3C%2FDATA%3E%20%3C%2FEVENTDATA%3E%20%3C%2FEVENT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-248275%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-250654%22%20slang%3D%22en-US%22%3ERe%3A%20Update%20device%20configuration%20Profile%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-250654%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Roland%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20need%20to%20investigate%20how%20to%20correctly%20overwrite%20or%20delete%20an%20existing%20ingested%20ADMX%20policy%2C%20but%20in%20the%20meantime%20a%20working%20way%20is%20to%20ingest%20the%20new%20ADMX%20with%20a%20new%20identifier%20and%20then%20address%20the%20new%20one%20during%20configuration%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIngest%20the%20new%20ADMX%20file%3A%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E.%2FVendor%2FMSFT%2FPolicy%2FConfigOperations%2FADMXInstall%2FOneDrive%3CSTRONG%3ENew%3C%2FSTRONG%3ENGSC%2FPolicy%2FOneDrive%3CSTRONG%3ENew%3C%2FSTRONG%3EAdmx%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EConfig%20it%20via%20new%20Identifier%3A%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E.%2FDevice%2FVendor%2FMSFT%2FPolicy%2FConfig%2FOneDrive%3CSTRONG%3ENew%3C%2FSTRONG%3ENGSC~Policy~OneDriveNGSC%2FSilentAccountConfig%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3Ebest%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EOliver%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-250130%22%20slang%3D%22en-US%22%3ERE%3A%20Update%20device%20configuration%20Profile%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-250130%22%20slang%3D%22en-US%22%3EI%20have%20additional%20information.%20I%20did%20a%20test%20with%20another%20admx%20ingestion%20(Google%20Chrome%20admx)%20After%20the%20ingestion%20was%20succesfully%20implemented%20i%20removed%20the%20configuration%20profile.%20The%20i%20watch%20the%20eventviewer%20what%20would%20happen.%20In%20the%20eventviewer%20i%20noticed%20remove%20the%20policy%20would%20not%20remove%20the%20admx%20ingested%20policies.%20Instead%20there%20was%20a%20error.%20So%20somehow%20it%20is%20impossible%20to%20remove%20or%20change%20an%20ingested%20admx.%20Is%20this%20a%20know%20bug%3F%20MDM%20ConfigurationManager%3A%20Command%20failure%20status.%20Configuraton%20Source%20ID%3A%20(E60DE700-BEFA-43C6-90F3-8F8906C7BB83)%2C%20Enrollment%20Type%3A%20(MDMDeviceWithAAD)%2C%20CSP%20Name%3A%20(Policy)%2C%20Command%20Type%3A%20(Clear%3A%20first%20phase%20of%20Delete)%2C%20Result%3A%20(.%2FDevice%2FVendor%2FMSFT%2FPolicy%2FConfigOperations%2FADMXInstall%2FChrome%2FPolicy%2FChromeAdmx).%3C%2FLINGO-BODY%3E
Ronald Meer
Contributor

We have created a device configuration profile to ingest Onedrive ADMX.

Those admx ingestion only contains the policies to silent config Onedrive.

 

I know want to replcace the xml with a new xml that has more policies so i can configure known folder move.

 

When i do that de admx is not loaded on the targeted devices. Instead i get an event ID 454 error.

What am i doing wrong?

 

 

Logboeknaam: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin Bron: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider Datum: 8-9-2018 11:06:28 Gebeurtenis-id:454 Taakcategorie: Geen Niveau: Fout Trefwoorden: Gebruiker: SYSTEM Computer: xxxxxxx Beschrijving: MDM ConfigurationManager: Command failure status. Configuraton Source ID: (E60DE700-BEFA-43C6-90F3-8F8906C7BB83), Enrollment Type: (MDMDeviceWithAAD), CSP Name: (Policy), Command Type: (SetProperty: Format or Type change), Result: (./Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/OneDriveNGSC/Policy/OneDriveAdmx). Gebeurtenis-XML: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider" Guid="{3DA494E4-0FE2-415C-B895-FB5265C5C83B}" /> <EventID>454</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2018-09-08T09:06:28.706361600Z" /> <EventRecordID>20531</EventRecordID> <Correlation /> <Execution ProcessID="6180" ThreadID="5128" /> <Channel>Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin</Channel> <Computer>XXXXXXXXXXX</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="Message1">E60DE700-BEFA-43C6-90F3-8F8906C7BB83</Data> <Data Name="Message2">MDMDeviceWithAAD</Data> <Data Name="Message3">Policy</Data> <Data Name="InternalCmdType">9</Data> <Data Name="Message5">./Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/OneDriveNGSC/Policy/OneDriveAdmx</Data> <Data Name="HexInt1">0x86000011</Data> </EventData> </Event>

2 Replies
I have additional information. I did a test with another admx ingestion (Google Chrome admx) After the ingestion was succesfully implemented i removed the configuration profile. The i watch the eventviewer what would happen. In the eventviewer i noticed remove the policy would not remove the admx ingested policies. Instead there was a error. So somehow it is impossible to remove or change an ingested admx. Is this a know bug? MDM ConfigurationManager: Command failure status. Configuraton Source ID: (E60DE700-BEFA-43C6-90F3-8F8906C7BB83), Enrollment Type: (MDMDeviceWithAAD), CSP Name: (Policy), Command Type: (Clear: first phase of Delete), Result: (./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Chrome/Policy/ChromeAdmx).

Hi Roland,

 

I need to investigate how to correctly overwrite or delete an existing ingested ADMX policy, but in the meantime a working way is to ingest the new ADMX with a new identifier and then address the new one during configuration:

 

Ingest the new ADMX file:

./Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/OneDriveNewNGSC/Policy/OneDriveNewAdmx

 

Config it via new Identifier:

./Device/Vendor/MSFT/Policy/Config/OneDriveNewNGSC~Policy~OneDriveNGSC/SilentAccountConfig

 

best,

Oliver

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
Extentions Synchronization
ChirmyRam in Discussions on
3 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies