Equebal Ahmad Blog

The Windows 10 / 11 build version number can be used to identify each Windows version uniquely. In SCCM | ConfigMgr, you can use WQL query to create collection based on Windows build version to deploy applications or policies to specific version only. In Microsoft Intune, you can use build version to create Azure AD group or assignment filters based on OS build number to narrow down your policy deployment scope. Checkout complete post on my new blog. https://techuisitive.com/windows-10-11-operating-system-build-versions/

Microsoft deprectaed HTTP-only communication in Configuration Manager to increase security. The HTTP-only communication will not be supported with first release after Oct 31, 2022. Hence, existing infrastructure should be configured for HTTPS based communication in ConfigMgr. The HTTPS communication can be enabled using PKI certificates or Configuration Manager Enhanced HTTP option. The HTTPS communication is also required for Management Point if you want to use Cloud Management Gateway (CMG) to support internet-based clients. If you are not ready for HTTPS based communication for all clients and need HTTPS management point for CMG only then dedicate a management point for CMG and configure that one for HTTPS See complete article on my new blog. https://www.techuisitive.com/post/configure-management-point-for-https-configmgr-sccm

The USB devices are a quick way to move the data across different devices. However it's also pose a huge risk to corporate data security. Hence organization either block the usage of USB devices or deny write access. In this blog post, we will discuss how to deny write access to USB devices using Microsoft Endpoint Manager / Intune. We will also discuss the approach to provide an exception whenever there is a genuine business needs. Read the complete article on our new blog. https://www.techuisitive.com/post/deny-write-access-to-usb-devices-using-intune-catalog-settings

Microsoft Endpoint Manager | Intune Win32 app deployment and troubleshooting articles at our new blog Techuisitive. Win32 App Detection Rules Win32 App Dependencies Win32 App Supersedence Intune Win32 App vs LOB Troubleshooting's: https://www.techuisitive.com/post/intune-win32-app-deployment-failed-with-error-code-0x80070643 https://www.techuisitive.com/post/intune-win32-app-deployment-failed-with-error-0x87d1041c https://www.techuisitive.com/post/intune-win32-app-deployment-failed-with-error-0x87d300c9 https://www.techuisitive.com/post/intune-win32-app-failed-with-error-code-0x80070653

This post is a collection of Microsoft Endpoint Manager / Intune error codes and reference articles. Intune : Win32 App Deployment Intune : Win32 app deployment failed with error code 0x87D300C9 Error code : 0x87D300C9 Error Description: The unmonitored process is in progress, however it may timeout. Intune : Win32 app deployment failed with error code ​0x80070653 Error code: ​0x80070653 Decimal: 1619 Error Name: ERROR_INSTALL_PACKAGE_OPEN_FAILED Error Description: ​This installation package could not be opened. Verify that the package exists and that you can access it, or contact the application vendor to verify that this is a valid Windows Installer package. Intune : Win32 app deployment failed with error code 0x87D1041C Error code : ​ 0x87D1041C Error Description: ​The application was not detected after installation completed successfully. Intune: Win32 app deployment failed with error code 0x80070643 Error code: ​ 0x80070643 Decimal: 1603 Error Name: ​ERROR_INSTALL_FAILURE Err

 In Microsoft Intune, Detection Rules are used to determine the presense of a Win32 App. The detection rules ensure that app installation only start if it's not installed yet. A Win32 App can have multiple detection rules and all detection rule must be met to detect the application. However in the case of an Uninstall, only one detection rule should match in order to trigger uninstall. Read complete article on my new blog. https://www.techuisitive.com/post/intune-understanding-win32-app-detection-rules