Apply Policy CSP Error for "RequirePrivateStoreOnly" , "TurnOnPowerShellScriptBlockLogging" and "ConfigureWindowsSpotlightOnLockScreen" when apply in intune portal to my devices.

Question

question

changhian asked Mar 18, '21 LuDaiMSFT-0289 commented Mar 22, '21

Apply Policy CSP Error for "RequirePrivateStoreOnly" , "TurnOnPowerShellScriptBlockLogging" and "ConfigureWindowsSpotlightOnLockScreen" when apply in intune portal to my devices.

Hi All, I have apply this 3 CSP in my Intune following "CIS Microsoft Intune for Windows 10 (Release 2004) Benchmark" to my window 10 devices and I got Error. Anyone encounter the same problem? you can try on your devices, I suspect it will not work on windows 10 20H2. do let me know if you encounter the same Error ( -2016281112 (Remediation failed) ERROR CODE 0x87d1fde8)

18.9.72.2 RequirePrivateStoreOnly (Page 852)

./Device/Vendor/MSFT/Policy/Config/ApplicationManagement/RequirePrivateStoreOnly
Integer "1"

18.9.95.1 TurnOnPowerShellscriptBlockLogging (Page 892)

./Device/Vendor/MSFT/Policy/Config/WindowsPowerShell/TurnOnPowerShellScriptBlockLogging
Integer "0"

19.7.8.1 ConfigureWindowsSpotlightOnLockScreen (Page 954)

./User/Vendor/MSFT/Policy/Config/Experience/ConfigureWindowsSpotlightOnLockScreen
Integer "2"

One more question which is not related , will my posted question be deleted after few days if i never read? i remember I posted one question 1 weeks back and now is gone. how can i find all the question i posted before?

mem-intune-general mem-intune-device-configurations

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2021-03-19T08:28:34.593Z

LuDaiMSFT-0289 answered Mar 19, '21 LuDaiMSFT-0289 commented Mar 22, '21

@changhian Thanks for posting in our Q&A. For this issue, I have done the test in my lab(Windows 10 version 20H2). The settings are same as you provided.

For "RequirePrivateStoreOnly" custom profile, I delploy it to my device group and I find it is successful.

For "TurnOnPowerShellScriptBlockLogging", there is the same build-in setting under Administrative Templates, so it is suggested to configure in Administrative Templates and it will succeed.

For "ConfigureWindowsSpotlightOnLockScreen" custom profile, I deploy it to my user group and I find it is successful.

If you want to find the case you posted, you can click on the "Q&A" in the upper left corner and enter the question title to find. Another way is click on the "Activity" under your own name.

If there is anything unclear, feel free to let us know.

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

image.png (37.5 KiB)

image.png (109.1 KiB)

image.png (54.7 KiB)

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LuDaiMSFT-0289 · Mar 22, 2021 at 03:11 AM

@changhian I am currently standing by for further update from you and would like to know how things are going. If you have any questions or concerns on the recent information I've provided you, please don't hesitate to let me know.

0 ·

Answer 2 · 2021-03-22T07:05:59.093Z

changhian answered Mar 22, '21 LuDaiMSFT-0289 commented Mar 22, '21

Hi,

@LuDaiMSFT-0289

I have realise my issue as well, previously I have tested it on window 10 pro and I encounter the error for "RequirePrivateOnly" and "ConfigureWindowsSPotlightONLOckScreen".
Now I have setup window 10 enterprise and both the error is gone except for "TurnonPOwershellScriptBlockLogging", it will not work on both WIndow 10 Pro and Enterprise. Thus I will just follow the GUI step you have provided above.

Thanks a lot for your time to help me to test it out. Really appreciate for your kindness and God Bless.

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LuDaiMSFT-0289 · Mar 22, 2021 at 07:11 AM

@changhian You're welcome. If you have any problem in the future, welcome to post in our Q&A.

Thanks and have a nice day. : )

0 ·

question