Moving from MDT/WDS to Autopilot – Real-World Lessons, Wins & Gotchas
Hi all, We’ve been moving away from an ageing WDS + MDT setup and over to Windows Autopilot, and I thought I’d share a few key lessons and experiences from the journey. In case anyone else is working through the same transition (...or about to). Why the change? MDT was becoming unreliable, drivers/apps would randomly fail to install, WDS is on the way out, and we needed a more remote-friendly approach. We also wanted to simplify things for our small IT team and shift from Hybrid Azure AD Join to Azure AD Join only. We’re doing this as a phased rollout. I harvested existing device hashes using a script from a central server, and manually added machines that weren’t online at the time (most of which were just unused spares, we haven't introduced new hardware yet). If you want a copy of this auto-harvest, please see my next post, this script is useful as it'll just go off and import the hardware hashes into Intune, and can run against multiple computers at a time. (I will add the link to the post once made). Some of the biggest hurdles: • 0x80070002 / 0x80070643 errors (typically due to incomplete registration or app deployment failures) • Enrollment Status Page (ESP) hangs due to app targeting issues (user vs device) and BitLocker config conflicts • Wi-Fi setup with RADIUS (NPS) was complex, Enterprise Certificates and we're still using internal AD for authentication, so user accounts exist there and sync over to Azure. • Legacy GPOs had to be rebuilt manually in Intune, lots of trial and error • Some software (like SolidWorks) wouldn’t install silently via Intune, so I used NinjaOne to handle these, along with remediation scripts in Intune where needed We also moved from WSUS to Windows Autopatch, which improved update reliability and even helped with driver delivery via Windows Update. What’s gone well: Device provisioning is more consistent, updates are more reliable, build time per machine has dropped, and remote users get systems faster. It’s also reduced our reliance on legacy infrastructure. What I’m still working on: Tightening up compliance and reporting, improving detection/remediation coverage, figuring out new errors that may occur, and automating as much manual processes as possible. Ask me anything or share your own experience! I’m happy to help anyone dealing with similar issues or just curious about the move. Feel free to reply here or message me. Always happy to trade lessons learned, especially if you’re in the middle of an Autopilot project yourself. Cheers, Timothy Jeens
WiFi in Win11 issues in .3915
So i'm going crazy here and don't know where to go next, to Microsoft support or my internet provider... I've happily had Hyper-V on my Windows 11 Insider and some VMs i use for delivering trainings. Few days ago i noticed i no longer can connect to the internet on the VMs. Existing VMs, new VMs, VMs with past snapshots applied, etc.... no internet on the VMs, period. I tried creating new switches several times and nothing helps. However, although i don't need internet to deliver the trainings, when doing so at the university, i always use my host/laptop's internal card with a SIM in it and have no issues whatsoever with the internet in VMs. The SIM i have is from the same provider as my home cable is from. I just turned off my WiFi and connected the cellular network. Boom! VMs instantly have internet access. Turning on WiFi -> no internet again. So at this point i'm kind of stuck and not sure where to go for help. Obviously there is nothing wrong with my Windows OS in general, but there is an issue with the WiFi. On the host, i have no issues with the WiFi, internet is fine and working properly. I'm shutting down my laptop every night, so "restarting" did not fix it. Should i try resetting my router or go to Microsoft Windows support first? I think going to the internet provider has no benefit now, as they will blame the OS. Any thoughts?
Windows 10 Download Speed is very slow
Although there is no internet connection speed issue on other mobile devices and computers connected to the same modem, the internet download speed is 2 Mbps and the upload speed is 9 Mbps on my computer. Both Windows 10 Pro and MacOS are installed on the same computer (i.e Macbook Pro). When I switch to MacOS, the internet download speed is 75Mbps as it should be. I've tried the most common solutions suggested on Microsoft's site and other sites on the subject. None of them worked out. I reinstalled Windows 10 by protecting the files and programs on my computer, but there was no solution. I also shut down all non-Windows applications and services that started automatically when the computer was booted, again, there was no solution. I tried 7-8 more actions without any solution. My computer did not have such a problem 2 weeks ago. It started suddenly. Windows 10 Pro was upgraded recently to version 1909. Even though, I'm not sure I suspect this might be the problem. Any advice is appreciated. Thanks in advance. Update after 5 years (22 August 2024): I could not find a solution to this problem. I experienced this problem twice. Each time, I had to completely format the Windows installation on Boot Camp. Then, reset macOS. After that reinstalled Windows on Macbook Pro via Boot Camp from scratch. That solved my issue. I suspect the issue might be due to some updates that came via Boot Camp. Also, don't install Wifi related updates provided as optional updates on Windows if you don't experience any issue at that moment. Such updates may be the reason as well.
iOS Wifi Profile not getting delivered
For the past few months we have had a profile set up that gets a restriction profile that locks the device into kiosk mode for an app and also has the setting "Join Wi-Fi networks only using configuration profiles" configured. We push out our Wi-Fi network to the devices along with root cert + SCEP profile for certificate based authentication. This has been working great for the past few months. Starting last we were enrolling iPads as we have been doing, but when enrolling the device into Intune it gets the green check mark for 'Get your device managed' and goes to 'Update device settings' and can never confirm device settings. Looking at the device its been disconnected from the WiFi network. Going to Settings -> WiFi; theres no networks available (I have verified there are multiple networks available) and it says 'Your iPad can only join WiFi networks that are configured by your organization's admin'. Checking the management profile on the device I can see all the restrictions and both the SCEP certificate and root certificate, but the WiFi profile is not listed in there. Checking the device in Intune shows that the WiFi profile is still 'pending' for the device, along with the management profile, root cert and SCEP cert. If I enroll a regular user based device assigned the same WiFi profile (but not restrictions profile) it gets the profile and connects without issue. It seems like the device is getting the policy to only allow access to the network from the configuration profile and disabling WiFi on the device before it gets the WiFi profile. Has anyone run into this or have a solution? We can remove "Join Wi-Fi networks only using configuration profiles" but I'm not sure how that would impact the already enrolled ~80 devices.Teams on smartphone should only ring if connected to company WLAN
Hello, I have a client who wants to switch to Teams with their telephony. The company would like to have the following for certain people: - The smartphone should only receive incoming calls when connected to the company WLAN. However, if you are outside the network, you should simply be able to make calls, but not receive calls. Is there a way to configure this? So far I have found this from Skype for Business, where you can set a policy with WifiOndly. https://learn.microsoft.com/de-de/powershell/module/skype/set-csteamsmobilitypolic New-CsTeamsMobilityPolicy -Identity "Test-WifiOnly" -IPVideoMobileMode WiFiOnly Grant-CsTeamsMobilityPolicy -Identity email address removed for privacy reasons -PolicyName "Test-WifiOnly". However, this policy does not work in my tests either. What options are there for configuring this?Android Enterprise Wifi deployment using SCEP Cert problems
Hi all, I am trying to setup android phones to connect to the wifi through a wifi profile. We use SCEP certificates. The trusted root certificate and the SCEP certificate deploy successfully to the device via Intune. The trusted root CA automatically gets put into the User store (dont know if this is causing the issue as its not in system store). However, we cant see the deployed SCEP certificate on the phone without using an app called 'My Certificates'. This confirms that both the CA and SCEP certificate are on the device. The Wifi profile is then sent to the device and again this says successful on intune but the phone doesnt connect to the wifi. The SSID it is trying to connect to appears but it doesn't connect. Looks like it tries connecting and then fails. Nothing can be seen on the networks ISE servers so it doesnt even look like its getting that far. Then tried to add the wifi manually. WPA2 enterprise. When I select the option to select a certificate, it shows the ssid name (mustve got this from the wifi profile deployment) with '_NULL' at the end? Dont understand what this is or what it means? Tried selecting the null certificate but this doesnt connect either. Connection we want to use is EAP-TLS. We DONT use the Company portal. The android phones are fully managed corporate devices. The above method to deploy the Certs and wifi profile works fine with iOS devices but not android Any help would be greatly appreciated Thanks SASlow upload speed ubuntu vs windows on wifi
2 pc's with same hardware specs are connected to the same wifi router. One is ubuntu and other one is windows 10. Download speeds are exactly same but upload speeds on windows is 90% slower than on ubuntu. I already tried clean boot and driver updates. Speedtest.net, Netflix fast tool and Google speed test show the same result. Any solutions? Case id # 102855447
