DanZi's MEM site

MDM wins over GPO 🎤 check 1-2-1-2

But does it always? There are a lot of caveats and exceptions, although this just expected to work out of the box. Microsoft's own article warns us that not all settings are equal. ControlPolicyConflict Policy CSPLearn more about the ControlPolicyConflict Area in Policy CSP.Microsoft Learnofficedocspr5 One of

Autopilot Deployment Profile Assignment Issue

Recently I came across an issue with Autopilot Deployment Profile assignment which took some time to debunk. Long story short, for the existing devices I wanted the hashes to be imported automatically - via the option 'Convert all targeted devices to Autopilot' to save some time. I assigned

Save a Failed Autopilot Enrollment

In case you have your ESP set to fail on blocking apps - this page might come up if one of those apps fails to install during Autopilot provisioning. At his stage the Try again button seems to only try to re-do the detection method or re-read one key part

Force Company Portal app repair/reinstall by Intune Management Extension

At times some apps fail, need to be deleted and reinstalled, but Intune is a bit notorious on waiting for full app inventory refreshes As I recall, it's only once every 7 days. So I have uninstalled half a dozen apps from a test machine and Intune will

'Attention required: vulnerabilities in Openssl' - says Defender

Do you have Defender complaining about libssl-3-x64.dll and libcrypto-3-x64.dll? Chances are that some of these files are in your driverstore folder and aren't used at all Each driver version will have its own folder with potentially different versions of these dll files for each version of

DanZi's MEM site © 2026