Intune Device Sync Just Changed Again. This Time, It Is IC3!!!! First, the Device Sync moved away from triggering Windows MDM only and started waking IME workloads too: Win32 apps. PowerShell scripts. Proactive Remediations. Now, when triggering the remote Device Sync, the IME request no longer arrives through a second WNS notification. It comes through the existing IC3 and Trouter connection: WNS for Windows MDM. IC3 for IME. At the same time, a new StatusSync flow is tracking the progress of those workloads. That part deserves its own blog. patchmypc.com/blog/intune-on… #MSIntune #Intune #Windows

Always wanted to know which ASU your Intune tenant is hosted on and where that ASU is located...???? Well, that's easy... Keep an eye out for the blog on why I built this ASU Finder... #Intune #MSIntune @IntuneSuppTeam

Microsoft just announced system-level network configuration support for Intune Endpoint Privilege Management. That means standard users can change things like IP address, gateway, and DNS settings without being a local admin. That part is already interesting. But while looking at the latest EPM agent bits, I noticed something else besides it. Time Sync!!! Inside EpmElevate.exe, it looks like Microsoft is also going to add something to sync and change the time zone? I wrote down what I found in the client-side pieces, what Microsoft has now announced, and how it's going to work patchmypc.com/blog/intune-ep… #Intune #MSIntune #PatchMyPC

Intune Engineering fixed the IME Config issue!!... Nice job @IntuneSuppTeam Do you remember when an IME update deleted the application config file and Win32 app installations suddenly stopped? The Company Portal stayed stuck on “Downloading,” but underneath, the IME could no longer load the assemblies needed to validate the user token. Microsoft has now returned to that config file in IME 1.103.101.0, and this time the fix goes further. The installer keeps a clean backup, restores the config when it is missing, and even replaces it when the contents have drifted. It took a few attempts, but this finally appears to close both sides of the problem. I updated the original investigation with the new custom actions and exactly how the repair works. Read the updated blog below!!! #Intune #MSIntune #Windows11 patchmypc.com/blog/company-p…

Intune Management Extension: Release Notes. When something changes in Intune, we usually get a “What’s new” update or a roadmap update. But what happens when the local IME changes? That part is a big black box... And with the IME being responsible for much more than most people think. Win32 apps, scripts, remediations, reporting, APv2-related pieces, that list will only keep growing. So I wanted my own Intune Management Extension Release Notes :) @IntuneSuppTeam :P Every time a new IME version appears, an automation flow compares the MSI, custom actions, payload files, DLLs, and changed methods to determine what actually changed in the SideCar/IME agent. #Intune #MSIntune #Windows11 patchmypc.com/blog/intune-ma…

Under the Hood of the Intune Certificate The Intune certificate matters more than most people think. That Certificate keeps the policy sync alive and is also needed for IME communication, which means apps and scripts depend on it as well. But when the certificate or its chain breaks, things can get funny. The device can still show a recent last check-in, while it is no longer able to receive the latest policies, apps, or scripts. In this webinar, we will explain what the Intune MDM device certificate does, what changed with the Intune Intermediate certificate renewal, why some devices may have missed it, and how to find devices that still appear healthy but may not be. But hey, it is all fine because the last check-in still moved… right? Register here: patchmypc.com/events/intune-… #Intune #MSIntune