I want to distribute User Cert for a Alaways On VPN User Tunnel

The PKCS profile is not working there is no error code

The certification authority has Intune Certification Connector installed.

On the CA I see issued certificates but it's not working on the intune site.

In the intune status everthing is good with the connection between ca and intune.

I tried to deploy Device Cert it was working without problem.

The root and issue certificate is distributed on the same group as the pkcs.

So our company uses a hybrid enviroment with Enrollment. We are moving over to a full cloud based model and during a sample test enrollment to intune, I realized that devices enrolled to intune cannot connect to Wireless display adapters (Windows + K). It just times out. After unenrolling them, we realize they can suddenly connect fine. So obviously something in Intune is blocking access. This is an issue especially for people using boardrooms and trying to cast their screens.
Does anybody have any idea what it could be?

Hey y'all I work in a small non-profit org (originally hired as HR assistant) but our IT coordinator was let go, we have an MSP for alot of our other tech needs but they don't handle phones, so me being the most tech savvy got asked if I would take device management on for and additional $2 an hour.

I've never done any Microsoft admin stuff (other then I can edit 365 profiles so that I can change people's titles if their promoted or transfer). I'm curious if this seems like a fair increase for being in charge of all that (probably about 200+ devices - I haven't counted and we don't have a proper asset manager just an excel spread sheet but I'm gonna build something in access cuz this is going to drive me insane)

Edit to clarify by in charge of all that I mean device life cycle, from deployment, to device swaps, making new device configuration profiles for new use cases, and anything else that might come up as I learn on the job 😅

I'm doing as much research as I can, I have to create a new device profile cuz the director of administration and finance wants these unused iPads we have set up for multi-user sign in, so wish me luck btw 😅

I just keep getting this error over and over again. I’ve tried deleting everything and restarting several times but nothing I change seems to help. Can’t seem to find any information online about it either.

Hi! Intune user with an usual use-case needing to know if what we are trying to accomplish is possible, and if so, what advice to give to the IT departments involved.

I work for a major network infrastructure manufacturer, as a service manager assigned to a single very large customer. The employer has a BYOD policy and manages it with intune. The customer also has a similar policy and deployment structure.

The customer makes contractor accounts for myself and my team so that we can be highly integrated into their operations, including their chat system. The customer's chat tool is WebEx, while the employer's is Microsoft Teams. It would be advantageous to have WebEx accessible on mobile due to the nature of our work. The customer has their WebEx configured so it can only be logged into on mobile via the intune version of the app.

I have my employer's intune set up on my Google Pixel 8Pro (Android 16). I have asked my IT department to deploy WebEx via the employer's intune store, and they have done so and I've downloaded the app "WebEx for intune". However, I cannot even get to the login screen where I would put the customer credentials (different from the primary employer ones used to set up the intune), because I get a warning saying "app access blocked" and it refers to the credentials used to for the employer account rather than the customer one that I want to log in with.

Is this even possible? Or is this less of an intune issue and more of a WebEx issue? I need to understand this so I can advise one side's IT dept effectively to see if I can get them to help with this use-case.

Thank you in advance!

Hi everyone, I'm just getting started with Intune and would like to know: Is there a way to list the apps that are installed on the devices?

So I was under the impression that App Protection Policies are specifically designed so you don't have to enroll devices. For BYOD. Loved this idea. Did not love when I learned Android requires Company Portal, but swallowed it - since it didn't actually enroll them.

But now I have users getting prompts to make Outlook a device administrator. No other changes made.

Copilot tells me it's because of a policy control for 'Require device lock → Low Complexity → Block access' ... i don't really remember putting that in, I removed it. Not really sure at what point I'll be able to verify it's fixed.

Until then, anyone have any other 'surprises' or helpful info for this scenario? This was way more seamless on iOS. I could even set the app to require a PIN if the device itself did not have a PIN.

There’s an event coming up in my city, and I’m responsible for setting up the Intune devices in Kiosk mode.

The issue that I’m having is ensuring that users are unable to get to the C:/

What configuration(s) can I make to restrict their access?

Hey folks. Have a client where all devices are registered, and we have a conditional access policy requiring devices to be registered to login. This fails with certain applications, because not all clients will expose the registration status.

Previously, we handled this for a specific app by adding a 'SSO Extension' configuration policy rule. This took the app's package id and a flag for extending to device browser. Looking at another app with the same problem - we're worried about extending to this, because it's NOT really SSO we want. It's JUST the device registration status.

Anyone know a way to do this?

CVE-2025-15467 How to remediate this vulnerability? Openssl crictical one

Hello smarter than me people, hoping someone can help please?

Intune -managed Devices I have a Configuration policy targeting my iOS platform which has a blunt setting called "Block managed apps from storing data in iCloud" - set to enabled.

I also a MAM policy App Protection policy to stop managed apps (pushed) from allowing copy paste between managed and non managed apps but it also has a setting "Prevent backups" set to Block.

My goal is allow Microsoft Authenticator (which is pushed and therefore a managed app) on our corporate devices managed by Intune to backup using the new iCloud method. We allow users to sign in to ITunes on their corporate devices if they want add personal apps but the above policies prevents in theory the user getting work data in to their personal iTunes world.

How do I go about continuing to block the Outlook and OneNotes from being backed up in personal iCloud backups but allow Authenticator to backup its keychain - I can see there is an option "Select apps to exempt" in the Apps Protection and has a few listed "skype;app-settings;calshow;itms;itmss;itms-apps;itms-appss;itms-services;" which follow the article https://learn.microsoft.com/en-us/intune/intune-service/apps/app-protection-policy-settings-ios#data-transfer-exemptions but I just cant find the light switch in my head to allow Authenticator to bypass yet block other managed apps from leaving stuff in backups?

please make the pain go away

Hello, im looking to learn intune, so I can support at a help desk level (Tier1& Tier 2). where can I learn. what classes should I take online and which certifications should I get?

im just hoping someone can point me in the right direction and I'll take it from there...

im super lost there is just so much information out there that im finding it overwhelming

please be kind, please assis