Hi @AllenLiu-MSFT
This option is not activated:
Use PKI client certificate (client authentication capability) when available

Hi @Jason-MSFT ,
users are hybrid, How can I check if they are receiving PTR from AAD?

Hi @HanyunZhu-MSFT ,

If I do a ping to the my CMG address should there be a ping?

As you can see I ping the CMG address of my organization, and it refers to the service in Azure, but no ping

Hi @HanyunZhu-MSFT
After a few hours the DP returned to work.
But the SCCM's agent did not. I reinstalled it a few times but it does not help.

106263-ccmsetup.log

Thanks.
And select "Allow intranet and internet connections" ?

Hi @Amandayou-MSFT ,
Thanks for the response but it does not answer my question.

I want to enforce a restart on the stations, and the deadline is set for two weeks.
And in these two weeks users can not install apps through SC and I can not push new updates until users restart their stations. Is there a way to allow installations via SC and install new updates up to the deadline?

Thanks @Jason-MSFT .
How safe is VM Scale Sets to use in a production environment?

@Jason-MSFT It appears in Microsoft documents somewhere? thanks

@Jason-MSFT In the SCCM console it appears as a pre release.

Hi @LucasLiu-MSFT
1. All services in automatic state , And I tried to start them manually without success.
2. I added the entry to Registry and the server restarted, and still not working

Thanks.
The result is the names of the servers and an empty field of the owner.
I can do this for one server this way:

             $11Server = Get-ADComputer -Filter {Name -eq 'EXchangeServer'} -Properties ManagedBy | Select-Object -Property Name, @{label='ManagedBy';expression={$_.ManagedBy -replace '^CN=|,.*$'}}
             $22Owner = $11Server.ManagedBy
             $33mail =  Get-ADUser -Filter {Name -eq $22Owner} -Properties mail | Select-Object mail
             $11Server.ManagedBy = $33mail.mail
             $11Server
            
         Name                      ManagedBy
         EXchangeServer      Stevo.Polyi@Contoso.com

How do I make this happen for a list of servers as in the first example?
Thanks

Gets the following error, The same goes for Get-ADObject:

Get-ADUser : A parameter cannot be found that matches parameter name 'Expand'.
At line:5 char:50
+ ManagedBy = Get-ADUser $_.ManagedBy -Expand EMailaddress
+ ~~~~~~~
+ CategoryInfo : InvalidArgument: (:) [Get-ADUser], ParameterBindingException
+ FullyQualifiedErrorId : NamedParameterNotFound,Microsoft.ActiveDirectory.Management.Commands.GetADUser

Does not work.
Email does not exist in ManagedBy details.
In this way it does work for me, But only if I ask about one server:

         $11Server = Get-ADComputer -Filter {Name -eq 'EXchangeServer'} -Properties ManagedBy | Select-Object -Property Name, @{label='ManagedBy';expression={$_.ManagedBy -replace '^CN=|,.*$'}}
         $22Owner = $11Server.ManagedBy
         $33mail =  Get-ADUser -Filter {Name -eq $22Owner} -Properties mail | Select-Object mail
         $11Server.ManagedBy = $33mail.mail
         $11Server
        
     Name                      ManagedBy
     EXchangeServer      Stevo.Polyi@Contoso.com

How do I make this happen for a list of servers as in the first example?
Thanks

The deployment is with "As soon as possible" So how does it make sense?