Every single computer reporting Type of system scan to perform failure suddenly

%3CLINGO-SUB%20id%3D%22lingo-sub-376767%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376767%22%20slang%3D%22en-US%22%3E%3CP%3EI%20reapplied%20the%20configuration%20policy%20and%20now%20all%20machines%20are%20showing%20the%20following%20error%20for%20Type%20of%20system%20scan%20to%20perform%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-2016281112%20(Remediation%20failed)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnd%20this%20is%20in%20the%20eventviewer%20for%20Device-Management-Enterprise-Diagnostics-Provider%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMDM%20PolicyManager%3A%20Set%20policy%20int%2C%20Policy%3A%20(ScanParameter)%2C%20Area%3A%20(Defender)%2C%20EnrollmentID%20requesting%20set%3A%20(1C7F1C5D-1365-4C20-8848-66C18F279E93)%2C%20Current%20User%3A%20(Device)%2C%20Int%3A%20(0x0)%2C%20Enrollment%20Type%3A%20(0x6)%2C%20Scope%3A%20(0x0)%2C%20Result%3A(0x86000011)%20Unknown%20Win32%20Error%20code%3A%200x86000011.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20well%20as%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMDM%20ConfigurationManager%3A%20Command%20failure%20status.%20Configuraton%20Source%20ID%3A%20(1C7F1C5D-1365-4C20-8848-66C18F279E93)%2C%20Enrollment%20Type%3A%20(MDMDeviceWithAAD)%2C%20CSP%20Name%3A%20(Policy)%2C%20Command%20Type%3A%20(SetValue%3A%20from%20Replace)%2C%20Result%3A%20(.%2FVendor%2FMSFT%2FPolicy%2FConfig%2FDefender%2FScanParameter).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376758%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376758%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F82527%22%20target%3D%22_blank%22%3E%40peter%20horrigan%3C%2FA%3ENo%2C%20it's%20still%20happening.%26nbsp%3B%20I've%20got%20a%20trouble%20ticket%20opened%20with%20Intune%20support%20on%20this%20one.%26nbsp%3B%20But%20it's%20a%20head%20scratcher%2C%20that's%20for%20sure.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376537%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376537%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20not%20seeing%20that%2C%20did%20it%20resolve%20itself%3F%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F145288%22%20target%3D%22_blank%22%3E%40William%20Cunningham%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-563033%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-563033%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F145288%22%20target%3D%22_blank%22%3E%40William%20Cunningham%3C%2FA%3E%2C%20did%20you%20come%20to%20a%20resolution%20on%20this%3F%20All%20my%20Intune%20devices%20are%20having%20the%20same%20error.%20Thanks%20in%20advance.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-891794%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-891794%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20seeing%20this%20issue%20as%20well.%26nbsp%3B%20Engaged%20Intune%20support%20and%20working%20through%20it.%26nbsp%3B%20We%20have%20found%20that%20this%20setting%20does%20exist%20in%20the%20Windows%20Defender%20ATP%20profile%20to%20configure%20the%20scan%20type%2C%20however%2C%20it%20does%20not%20make%20any%20difference%20when%20it%20is%20applied%20from%20my%20testing.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIntune%20build%201909.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-904149%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-904149%22%20slang%3D%22en-US%22%3EIn%20the%20MDM%20Baseline%2C%20set%20%22Defender%20schedule%20scan%20day%22%20to%20%22No%20Scheduled%20Scans%22.%20A%20false%20error%20will%20be%20reported%20if%20this%20is%20set%20to%20anything%20else%20because%20the%20baseline%20is%20missing%20the%20day%2Ftime%20options.%20Instead%2C%20set%20these%20parameters%20in%20the%20ATP%20Baseline%20or%20a%20regular%20Configuration%20Profile%20instead.%20That's%20how%20I%20got%20the%20error%20to%20go%20away.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1036780%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1036780%22%20slang%3D%22en-US%22%3EThis%20fixed%20the%20issue%20for%20myself%2C%20thanks.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1178415%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1178415%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F238982%22%20target%3D%22_blank%22%3E%40Kurt%20Mayer%3C%2FA%3E%26nbsp%3BThank%20you!%20That%20resolved%20my%20error.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1191470%22%20slang%3D%22en-US%22%3ERe%3A%20Every%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1191470%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%2C%20I%20give%20it%20a%20try!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376422%22%20slang%3D%22en-US%22%3EEvery%20single%20computer%20reporting%20Type%20of%20system%20scan%20to%20perform%20failure%20suddenly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376422%22%20slang%3D%22en-US%22%3E%3CP%3EA%20few%20hours%20ago%2C%20my%20Intune%20dashboard%20started%20reporting%20a%20failure%20on%20every%20single%20computer%20Intune%20manages%20for%20the%20device%20configuration%20setting%20%22Type%20of%20system%20scan%20to%20perform%22.%26nbsp%3B%20Anyone%20else%20seeing%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-376422%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
New Contributor

A few hours ago, my Intune dashboard started reporting a failure on every single computer Intune manages for the device configuration setting "Type of system scan to perform".  Anyone else seeing this?

9 Replies
Highlighted

I am not seeing that, did it resolve itself?@William Cunningham 

Highlighted

@peter horriganNo, it's still happening.  I've got a trouble ticket opened with Intune support on this one.  But it's a head scratcher, that's for sure.

Highlighted

I reapplied the configuration policy and now all machines are showing the following error for Type of system scan to perform: 

 

-2016281112 (Remediation failed)

 

And this is in the eventviewer for Device-Management-Enterprise-Diagnostics-Provider:

 

MDM PolicyManager: Set policy int, Policy: (ScanParameter), Area: (Defender), EnrollmentID requesting set: (1C7F1C5D-1365-4C20-8848-66C18F279E93), Current User: (Device), Int: (0x0), Enrollment Type: (0x6), Scope: (0x0), Result:(0x86000011) Unknown Win32 Error code: 0x86000011.

 

As well as:

 

MDM ConfigurationManager: Command failure status. Configuraton Source ID: (1C7F1C5D-1365-4C20-8848-66C18F279E93), Enrollment Type: (MDMDeviceWithAAD), CSP Name: (Policy), Command Type: (SetValue: from Replace), Result: (./Vendor/MSFT/Policy/Config/Defender/ScanParameter).

Highlighted

Hi @William Cunningham, did you come to a resolution on this? All my Intune devices are having the same error. Thanks in advance.

Highlighted

I am seeing this issue as well.  Engaged Intune support and working through it.  We have found that this setting does exist in the Windows Defender ATP profile to configure the scan type, however, it does not make any difference when it is applied from my testing.

 

Intune build 1909. 

Highlighted
In the MDM Baseline, set "Defender schedule scan day" to "No Scheduled Scans". A false error will be reported if this is set to anything else because the baseline is missing the day/time options. Instead, set these parameters in the ATP Baseline or a regular Configuration Profile instead. That's how I got the error to go away.
Highlighted
This fixed the issue for myself, thanks.
Highlighted
Highlighted