u/Rudyooms

2,066 post karma · 11.4k comment karma · joined Jun 2021 · moderator

Rudyooms
Rudyooms

oww wait.. i was reading it like you removed them from intune :) ... if you could repro it .... have the syncml tool open on the device while exeucting that command ..

Rudyooms

The device needs to check in to get the fresh start command… if somehow the push notification that asks the device to sync isnt ack… and you deleted the object… well once the device wants to check in , intune has no knowledge about the device anymore… with it no assignments

Rudyooms

+1 .. :)

Rudyooms

This.. i fully fully and fully agree with andrew

Rudyooms

Yep :) administrator protection is using the same thing as epm (sort off… in high level) with epm you could prevent it from doing it with powershell… with admin protection enabled… well :) have fun

https://patchmypc.com/blog/powershell-script-is-failed-to-execute-the-file-parameter-does-not-exist/

Rudyooms

yep... :) ... i didnt say they dont look the same.. :).. but read between the lines why apv1 has a limited lifetime in my opnion ...

Rudyooms
Rudyooms

I was more refering to hotpatch :) if that one is enabled (by default) it could potentialy give some issues as i epxlained in that same blog

Rudyooms

Well i am going to make a wild guess... Hotpatch --> Hotpatch Updates, Secure Boot, and the Reset This PC Problem... and i would check if there is a mismatch between the winre version and windows as well --> There was a Problem Resetting your PC: Fixing: 0x800f0991 ... Which option did you selected in the windwos settings and which option in Intune :) ?

Rudyooms

I will upvote that opinion :p

Rudyooms

You should google mmp-c windc call4cloud patchmypc :) i wrote some documentation about epm in general and details

Rudyooms

Most of them are already out there in prod

Rudyooms

Yep…. And i think the same…

Rudyooms

Looks like they pulled the plug on that option… but yeah a dev tenant could be your issue here as well… so i would submit a ticker to msft

Rudyooms
Rudyooms

do you happen to have the company portal installed on such a device so you can alos examine what hte devices tells you ? some backgorund info for these checks --> Understanding the Default Compliance Policy: Enrolled User Exists

Rudyooms

Are you using okta or something btw

Rudyooms
Rudyooms

Hehehe seems marketing needs to start rebranding intune again :P

Rudyooms

Reporting is indeed another cup of tea... but well ... It will be getting better :)

Rudyooms

Well i am a bit of an idiot :) but yeah i get it…. Luckily its not fluff based… but based on details and facts

Rudyooms

Change is coming… and i am not bulshitting :)

Rudyooms

Then it are still improvements?

Rudyooms

Thanks for the advice :)