Client assignment failed from http to pki with error code failed to verify message could not retrieve certificate from MPCERT

Starting in version Microsoft Endpoint Configuration Manager current branch 1910, we can use the optional feature called BitLocker management to manage BitLocker Drive Encryption (BDE) for on-premises Windows clients. It provides full BitLocker lifecycle management that can replace the use of Microsoft BitLocker Administration and Monitoring (MBAM). Configuration Manager doesn't enable this optional feature by…
How to find ConfigMgr client boundary and boundary group details based on boundary group caching

Use boundary groups in Configuration Manager to logically organize related network locations (boundaries) to make it easier to manage your infrastructure. You must Assign boundaries to boundary groups before using the boundary group. Clients use a boundary group for: Automatic site assignment To find a site system server that can provide a service, including: Distribution…
Using intune to install ConfigMgr client as win32 app using local source files without downloading from CMG

Few months ago i blogged about How to install SCCM client using win32 apps in Intune for co-management and CMG .when you create a win32 app for ConfigMgr client with the command line switches as said in the blog post, ccmsetup.exe will always get the source files from CMG. The download of the client files…
Microsoft Edge soft transition to private mode for blocked websites–Open in private if blocked

Microsoft Intune offers a policy-based protected browser which are intuned Managed Browser (retire soon) and Microsoft Edge mobile browser. Microsoft Edge delivers more compare to Intune managed browser and Edge is the future secure mobile browser for Microsoft Intune. The following are the feature comparison between Intune managed browser and Microsoft Edge. Microsoft Edge mobile…
What is new in Configuration Manager 1910 reporting

Microsoft has released update 1910 for SCCM which is now termed as Microsoft Endpoint Configuration Manager (#MEMCM) and is available as in-console update ONLY. You can apply this update on sites that runs on 1810 and later. For more information, please read If you want to install a new Configuration Manager site, you can download…
Configuration Manager update 1910 is now available as Microsoft Endpoint Configuration Manager Current Branch

Microsoft released an update 1910 for Configuration Manager. This update is available as an in-console update and not a baseline version. You can apply this update on sites that run version 1806 (Min version 5.00.8692.0000) or later. If you want to install a new Configuration Manager, then you must use the baseline version which is…
Authorization error when attempting to download Windows Store for Business application inventory – ConfigMgr

The Microsoft Store for Business (wsfb) is where you find and acquire Windows apps for your organization. When you connect the store to Configuration Manager, you then synchronize the list of apps you've acquired. View these apps in the Configuration Manager console, and deploy them like you deploy any other app. More information about Microsoft…
win32 app deployment status codes in Intune

About an year ago, Microsoft announced Windows (Win32) app deployment using Intune, since then it has been improving with new additions/features. Intune standalone allows greater Win32 app management capabilities. While it is possible for cloud-connected customers to use Configuration Manager for Win32 app management, Intune-only customers will have greater management capabilities for their Win32 line-of-business…