question

net1994-7989 avatar image
0 Votes"
net1994-7989 asked Jason-MSFT commented

Apply Intune configuration profile changes after AutoPilot device enrollement?

Hello all,

We have started our AutoPilot testing. So far, so good. However when we change a configuration profile in Intune, the AutoPilot systems don't seem to take the new change. During provisioning/enrollment, they get everything fine. We tried removing the PC from the group and re-adding to get the updated profile, but the system didn't get the change. We assumed as with AD GPOs, policy changes should apply after a pc checks into the domain controller on a regular interval.

Thoughts?

mem-intune-generalmem-intune-device-configurations
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered

What profile type exactly are you changing?

In general, changes should be immediate (taking into account network latencies of course). See https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-troubleshoot for details.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Crystal-MSFT avatar image
0 Votes"
Crystal-MSFT answered Jason-MSFT commented

@net1994-7989, Thanks for posting in our Q&A. From your description, I know that once we configured the configuration profile, the Autopilot didn’t work anymore. If there's any misunderstanding, feel free to let us know.

Based on my research, some policy settings can cause conflicts with Windows Autopilot. Please go through the following link and check if there's any conflict setting configured in our environment:
https://docs.microsoft.com/en-us/mem/autopilot/policy-conflicts

Hope it can help


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@net1994-7989 How are things going? I’m currently writing to see if our problems are resolved? If there is anything unclear, please feel free to let us know.

0 Votes 0 ·

Hi Crystal,

The doc in your link doesn't really apply to our scenario. The AP devices enroll fine, they just don't get any policy updates after when we change configuration profiles. The doc lists out specific AP enrollment issues, but that's not applicable in our case.

Any other thoughts?

0 Votes 0 ·

What about my question above?

Also, is this a co-management scenario at all?

0 Votes 0 ·
Crystal-MSFT avatar image
0 Votes"
Crystal-MSFT answered Crystal-MSFT edited

@net1994-7989 Thanks for your reply. I know the Autopilot enroll is successful but the device configuration policy seems not be applied.

To check our issue, could you please collect the following information for us?
1. Could you go to Devices > Configuration profiles > find the affected configuration profile and get a screen shot of the Properties . Get a screen shot of the setting and let us know what is the changed settings ? Also check the device status under here.
85234-image.png
Device Status:
85247-image.png
2. Go to troubleshooting + support, select the affected user and check if there’s any device configuration profile related log there.
85159-image.png
Note: To protect our environment, please remove any privacy.

3.Go to affected device to check device management event log to see if there's any error with the device configuration policy. Location: "even viewer"->Applications and services logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider-> Admin options.

4,Check if sync is successful on the client side, please open Settings > Accounts > Access work or school, click and open the Info option in your Azure AD account. In Device sync status, you can see if the sync was successful. If not, please click Sync to do the sync action manually and wait to be applied.

Please check the above information and if there’s anything unclear, feel free to let us know.



image.png (144.8 KiB)
image.png (111.8 KiB)
image.png (84.2 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.