Client assignment failed from http to pki with error code failed to verify message could not retrieve certificate from MPCERT

Starting in version Microsoft Endpoint Configuration Manager current branch 1910, we can use the optional feature called BitLocker management to manage BitLocker Drive Encryption (BDE) for on-premises Windows clients. It provides full BitLocker lifecycle management that can replace the use of Microsoft BitLocker Administration and Monitoring (MBAM). Configuration Manager doesn't enable this optional feature by…
How to find ConfigMgr client boundary and boundary group details based on boundary group caching

Use boundary groups in Configuration Manager to logically organize related network locations (boundaries) to make it easier to manage your infrastructure. You must Assign boundaries to boundary groups before using the boundary group. Clients use a boundary group for: Automatic site assignment To find a site system server that can provide a service, including: Distribution…
Microsoft Edge soft transition to private mode for blocked websites–Open in private if blocked

Microsoft Intune offers a policy-based protected browser which are intuned Managed Browser (retire soon) and Microsoft Edge mobile browser. Microsoft Edge delivers more compare to Intune managed browser and Edge is the future secure mobile browser for Microsoft Intune. The following are the feature comparison between Intune managed browser and Microsoft Edge. Microsoft Edge mobile…
What is new in Configuration Manager 1910 reporting

Microsoft has released update 1910 for SCCM which is now termed as Microsoft Endpoint Configuration Manager (#MEMCM) and is available as in-console update ONLY. You can apply this update on sites that runs on 1810 and later. For more information, please read If you want to install a new Configuration Manager site, you can download…
Configuration Manager update 1910 is now available as Microsoft Endpoint Configuration Manager Current Branch

Microsoft released an update 1910 for Configuration Manager. This update is available as an in-console update and not a baseline version. You can apply this update on sites that run version 1806 (Min version 5.00.8692.0000) or later. If you want to install a new Configuration Manager, then you must use the baseline version which is…
Authorization error when attempting to download Windows Store for Business application inventory – ConfigMgr

The Microsoft Store for Business (wsfb) is where you find and acquire Windows apps for your organization. When you connect the store to Configuration Manager, you then synchronize the list of apps you've acquired. View these apps in the Configuration Manager console, and deploy them like you deploy any other app. More information about Microsoft…
Status Codes Deep Dive – Troubleshooting Win32 App Deployment

About an year ago, Microsoft announced Windows (Win32) app deployment using Intune, since then it has been improving with new additions/features. Intune standalone allows greater Win32 app management capabilities. While it is possible for cloud-connected customers to use Configuration Manager for Win32 app management, Intune-only customers will have greater management capabilities for their Win32 line-of-business…