All about Microsoft Endpoint Manager

Efficiently Identify Co-Managed Devices: Techniques and Tools

Co-management is a feature that allows organizations to manage their devices using both Microsoft Intune and System Center Configuration Manager (ConfigMgr). This enables organizations to take advantage of the latest security features and cloud capabilities, such as conditional access and device compliance policies, while also being able to manage certain client actions without the need…

Investigating SCCM Client Policy Request and Communication Status with a Collection Specific Report

Being as SCCM Configmgr administrator, your primary aspect is to maintain health of your sccm clients for application deployment,software updates,inventory etc. Questions often come up in forums ,email list asking for ,list of computers not contacted the server since X days (25) or how do I know the clients who’s policy request is old or…

Right-click installer tools unable to register correctly with SCCM console

I was installing the famous SCCM right-click tools from recast software (there are other right-click tools as well) on the freshly installed SCCM site for a customer, the installation of right-click tools went well, the console doesn’t seem to get registered with the right-click tools and there is no option when you right-click on a…

Update scan failed due to Group policy settings were overwritten by a higher authority

Few years ago, I have blogged about the client update scan failure due to GPO’s. https://eskonr.com/2014/10/sccm-configmgr-2012-software-update-scan-error-group-policy-settings-were-overwritten-by-a-higher-authority-error-code-0x87d00692/ Introduction: When the software update point is configured for a site, client computers receive a machine policy that provides the active software update point server name (WSUS) and configures the Specify intranet Microsoft update service location local policy on…

Download ConfigMgr builds from the eval center

Update: Eval site is now restored with improved user experience and is accessible via Microsoft Evaluation Center .The new improved eval center does not require any sign-in to download the media files. This is quick post on the recent inquiry on various forums such as Twitter, reddit and Microsoft forums about the download of configuration manager…

SCCM Software Update installation failed with error code 0x87D00664

I was approached by a customer who had issues deploying the March 2022 windows 10 cumulative updates. The error code and the screenshot is provided below. The software updates are failed with error code 0x87D00664 (-2016410012). The error code 0x87D00664 translates to ‘Updates handler job was cancelled’. There could be several reasons why the updates…

How to deploy Microsoft Store apps (offline) using Microsoft Endpoint Manager

Microsoft Endpoint Manager (ConfigMgr & Intune) allows us to configure and deploy the Microsoft Store apps. For more information, please read through ConfigMgr and Intune . In my recent engagement with customer, there is need to deploy Microsoft store app (offline) using Configuration Manager as there is no integration with store for business. Online: This…

SCCM Collections for devices with pending reboot

Posted on February 23, 2022 by Eswar Koneti | 0 Comments

Long ago, I wrote a blog post on a report for finding the devices with pending reboot, more information is available on https://eskonr.com/2019/01/sccm-report-get-list-of-devices-with-pending-reboot-in-a-collection-with-different-states/ I was recently working on checking the compliance of the devices in SCCM for windows patching and I could see that the software update compliance is not that great due to various…

How to Add device to collection using task sequence- troubleshooting

I was recently looking for a solution to add a device to SCCM Collection using the Task sequence. During the search, I have found Trevor has a blog post on this. So before I use the code in the task sequence, I plan to test it on a client device. The full code is given below. You will have to…

Did you miss to download your samples from Technet Gallery Here is how you can do it.

Posted on February 27, 2021 by Eswar Koneti | 3 Comments | 9,778 Views

Technet Gallery has been there for almost 15 years for community to share scripts, files, utilities, tools etc for Microsoft Products. With the retirement/closure of Technet Gallery, there are large number of scripts/reports that I have uploaded to Technet for my blog and now am receiving the feedback from the blog readers that they cannot…

Company portal – Install option grayed out due to primary user

Posted on May 9, 2023 by Eswar Koneti | 0 Comments | 413 Views

Introduction: During my testing of Intune's delivery optimization feature using win32 apps, I encountered an issue where the installation option for an application was grayed out on one device while working fine on another. In this blog post, I will share my troubleshooting journey and explain the concept of primary users in Intune and…

Efficiently Target Your Devices and Users with Intune Filters

Posted on April 16, 2023 by Eswar Koneti | 0 Comments | 3,184 Views

As many of you are likely already aware, Intune filters is a feature of Microsoft Intune that enables administrators to filter and target specific groups of devices or users based on certain criteria. This helps to manage devices and users in a more efficient and effective way by applying policies and configurations only to the…

MyApps and Conditional Access – Exclude with ease

Posted on January 26, 2023 by Eswar Koneti | 0 Comments | 1,409 Views

Azure Active Directory (Azure AD) Conditional Access is a powerful feature that allows administrators to control access to cloud applications based on specific conditions. These conditions can include factors such as location, device type, and network status. By using Conditional Access, administrators can ensure that only authorized users are able to access sensitive resources, and…

Efficiently Identify Co-Managed Devices: Techniques and Tools

Posted on January 17, 2023 by Eswar Koneti | 0 Comments | 846 Views

Troubleshooting Azure MFA call to phone option missing (TwoWayVoiceMobile)

Posted on January 14, 2023 by Eswar Koneti | 0 Comments | 395 Views

Recently, while working on an office 365 hardening project, I came across an issue that was causing problems for many users in verifying the 2nd factor authentication (Azure MFA). During the 2nd factor authentication process, users were presented with the following screen. As you can see, the user has the option to verify their identity…

SCCM report list collections with no deployments

Posted on December 5, 2022 by Eswar Koneti | 6 Comments | 2,125 Views

The following SQL query can be used to query the list of collections that doesn't have any deployments. you can review the number of collections with no deployments and you can further extend the query to exclude certain folders where you use these exception collections for troubleshooting or other purpose. select Col.Name, col.CollectionID, case when…

SCCM Client HTTP Error sending DAV request HTTP code 503 content download issue

Posted on November 14, 2022 by Eswar Koneti | 0 Comments | 1,385 Views

This is a quick blog post on an issue that I recently looked at regarding the client issue with content download from the distribution point. Clients in one specific boundary could not able to download the content from its assigned distribution point. Though the client was healthy, the inventory cycle is up to date but…

Intune manage write access to mobile storage and removable data drives

Posted on November 11, 2022 by Eswar Koneti | 0 Comments | 668 Views

I was recently working on an assignment to manage windows 10 devices using Microsoft Intune. One of the ask is to Block the write access to the mobile storage devices when the user plugs into the windows device and Allow write access to the removal data drives (thumb drives) if they are bitlocker protected. I…