update management
991 TopicsSecure Boot Certificate Updates via InTune Policy
We are currently having issues applying the settings required to install secure boot cert updates using the InTune policy method. A brief overview to quickly explain : We are a reasonably large company managing a mix of over 10,000 Windows and iOS devices. Our Windows devices come from the supplier with the Professional edition of Windows pre-installed, this is then changed via an Enterprise key as part of our Autopilot enrolment process and activated via our users subscription license. To all sense and purposes Windows looks and feels like the Enterprise edition, indeed if you check using winver, system settings and activation status for example then Windows tells us that it is the Enterprise edition. However, if you check the licensing using slmgr /dli it shows that the licensing has been reverted back to the OEM Professional edition as pre-installed by the supplier on purchase. This may have always been the case but until very recently has gone unnoticed. Whilst testing the rollout of an InTune policy to allow secure boot cert updates as detailed here : Microsoft Intune method of Secure Boot for Windows devices with IT-managed updates - Microsoft Support , this is failing because the policy is rejected by licensing error : MDM PolicyManager: Policy is rejected by licensing, Policy: (ConfigureMicrosoftUpdateManagedOptIn), Area: (SecureBoot), Result:(0x82B00006) Unknown Win32 Error code: 0x82b00006 InTune reporting directly on the policy shows this as error 65000 We are able to change the key by using slmgr and a combination of MAK\KMS\OEM but whatever keys are applied this always reverts to being the OEM Professional key after the device has been restarted. I have seen that there is a group policy method for setting the required settings for the secure boot cert updates to work, this however seems a very backward approach by Microsoft in an area where they are trying to promote a cloud-first policy. Indeed since we rolled out Windows 11, we as an organisation have been moving anything that we can to cloud in readiness for retirement of our on-prem estate. Microsoft's response to my recent support request was that this is expected behaviour, which to all sense and purposes is not what i would class as a solution. Has anyone else had the same issues when using the InTune policy method, and was a solution found or did you have to return to the dark ages and resort to group policy? There seem to be lots of posts online referring to access to specific registry keys being blocked going as far back as 2024, the suggested script to resolve these permissions and suggested KB articles have not resolved the issue.10Views0likes0CommentsThe folder named "Delivery Optimization" suddenly appears in the D drive in Windows 11 system
A folder named "Delivery Optimization" was found in the root directory of the D drive. It is currently unclear whether the folder is generated by the system, used for update caching, or an abnormal file. Please explain whether it can be safely deleted and describe the specific function of this folder.32Views0likes1CommentPC health check says I'm eligible for windows 11 but update doesn't
I know windows 11 has a very strict hardware requirements so I ran the official PC Heath Check app and it tells me this PC is eligible to run Windows 11. When I went to the Windows update and it does not show any option for Windows 11 upgrade. My PC has a Intel 8th Gen CPU, 16GB RAM and 512GB SSD. How can I fix the PC health check says I'm eligible for windows 11 but Windows update doesn't issue?49Views0likes8CommentsPlan to upgrade to Windows 11. What is the windows 11 25h2 cpu support?
Just heard Windows 10 is out of official support so I plan to upgrade my Windows 10 to Windows 11 24H2, as it is the latest one I can download from Microsoft. I'm unsure about the Windows 11 25H2 CPU support and compatibility requirements for this specific release. Could someone clarify if the CPU prerequisites are changing from the current Windows 11 23H2/24H2, or if the existing requirements will remain the same?65Views0likes6CommentsDo you know Windows 11 version 24H2 ISO Download?
Alright, I'm feeling a bit out of the loop here. Where's the actual, legit place to download Windows 11 24H2 ISO? The official website does not hold download for old Windows 11 versions. I see a bunch of sketchy third-party sites and "leaks," but I don't trust that noise. Just want the official Microsoft channel so I don't brick my PC. Any help is appreciated, thanks! Trying to do a clean install on a new build and timing is kinda tight. However, I need to a safe place for Windows 11 24H2 iso download. Cheers for any insights.74Views0likes6CommentsPrinting or PDF not responding
From this Monday, I found that if I attempt to (1) convert a Word document to a PDF using the Adobe add-in in Word, or (2) print a document (any document; pdf, docx, jpeg, webpage, etc. ), the program which I attempt to do these action will enter "not responding" state. Restarting and updating the system could not solve this problem, and I desperately need these functions. Please help me! Many thanks.530Views0likes1CommentAfter updating to Win11 getting lots of application crashes and hardware crashes
I have done both a win10 upgrade and a fresh install of win11 and am receiving lots of errors in event viewer that I didn't get before with win10. The most intrusive is error #1 which crashes most games out and causes large lag spikes that last about 10-20 seconds while the hardware "reloads". Any help would be appreciated. Machine is fully patched with the latest optional updates as well and all drivers are up to date. Machine is currently a fresh install of Win11 from a freshly wiped NVME SSD. Currently using the Beta channel of insider but this issue has been happening from the very start of Win11. This machine is not on a domain. All hard drives SMART show as good. Machine is not overheating. Virus and Malware scans have been completed. sfc /scannow & DISM /Online /Cleanup-Image /RestoreHealth are not showing any issues. Machine Specs: I7-8700k 32GB DDR4-3200 4x8GB 970 Pro 1TB NVME WD Black 6TB SATA RTX 3080 Error#1 ----------------------------------------------------------------------------------------------------------------- This is the first instance of the error seen during this time period on Storport Device (Port = 0, Path = 0, Target = 3, Lun = 0) whose Corresponding Class Disk Device Guid is {00000000-0000-0000-0000-000000000000}: The request opcode was 0x85 and completed with SrbStatus 0x4 and ScsiStatus 0x2. The sense code was (0x0,0x0,0x0). The io latency was 2 ms. ----------------------------------------------------------------------------------------------------------------- Error#2 ----------------------------------------------------------------------------------------------------------------- WSMan operation Enumeration failed, error code 2150858770 ----------------------------------------------------------------------------------------------------------------- Error#3 ----------------------------------------------------------------------------------------------------------------- The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and configure the WinRM service: "winrm quickconfig". ----------------------------------------------------------------------------------------------------------------- Error#4 ----------------------------------------------------------------------------------------------------------------- Id = ; ClientMachine = MYDESKTOP; User = MYUSERNAME; ClientProcessId = 19336; Component = WMIService; Operation = connect to namespace : ROOT\CIMV2\Security\MicrosoftVolumeEncryption; ResultCode = 0x80041003; PossibleCause = the user was not granted appropriate permission on the namespace. ----------------------------------------------------------------------------------------------------------------- Error#5 ----------------------------------------------------------------------------------------------------------------- Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ProgramData\Microsoft\Windows\UUS\Packages\1022.1025.2012.1\amd64\UusBrain.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ----------------------------------------------------------------------------------------------------------------- Error#6 ----------------------------------------------------------------------------------------------------------------- Id = {00000000-0000-0000-0000-000000000000}; ClientMachine = MYDESKTOP; User = Window Manager\DWM-1; ClientProcessId = 1568; Component = Unknown; Operation = Start IWbemServices::ExecQuery - root\cimv2 : select ChassisTypes from Win32_SystemEnclosure; ResultCode = 0x80041003; PossibleCause = Unknown ----------------------------------------------------------------------------------------------------------------- Error#7 ----------------------------------------------------------------------------------------------------------------- The server name cannot be resolved. Error: The object was not found. Server name: desktop-spmg6ru Guidance: The client cannot resolve the server address in DNS or WINS. This issue often manifests immediately after joining a computer to the domain, when the client's DNS registration may not yet have propagated to all DNS servers. You should also expect this event at system startup on a DNS server (such as a domain controller) that points to itself for the primary DNS. You should validate the DNS client settings on this computer using IPCONFIG /ALL and NSLOOKUP. -----------------------------------------------------------------------------------------------------------------2.6KViews0likes1CommentHow to make partitons or Increase space of local C drive in window 11?
Hi! I'm using windows 11 and running perfectly but the issue that I faced is the full storage of Local C drive. Now I want to increase the space of it without installing new window in my computer. Please give the best suggestion. Thanks!287Views0likes1CommentThe Windows 11 login screen lacks a password field and displays a password error.
The Windows login screen fails to display the password input field. After clicking “Login,” it prompts that the password is incorrect (though the actual password is correct), preventing access to the system. Seeking an effective solution.51Views0likes1Comment