kesh

Alternatively, does anybody have a link that has the minimum requirements for BitLocker Management via Intune - trying to Google, but nothing easily found

Can on Prem AD joined machines be used for Intune Bitlocker deployment, or do all machines have to be Azure joined? Would all users require E3 or higher for Bitlocker deployment?

I have an issue with my CB setup. I have a single MP and 4 different sites. I have 4 boundary groups with a single DP in each group. MY MP also has the DP role as there are servers in the same site as my MP that require updates downloaded to them - those are working fine. The other servers only have the DP roles setup. My issue is that updates are being deployed to my remote sites. They only download and install if I add my MP into my boundary group however that is defeating the purpose as clients then access updates over the WAN. Once I remove it, I dont get the deployments. Content has been deployed to all DP's Logs from one of clients at the remote site Data transfer Log: DTS job {D058F6ED-9563-4060-949A-8BBDB033B719} has completed: Status : SUCCESS, Start time : 08/22/2019 18:01:57, Completion time : 08/22/2019 18:02:24, Elapsed time : 27 seconds DataTransferService 22 Aug 2019 18:02:24 4628 (0x1214) UpdateURLWithTransportSettings(): OLD URL - MP SERVER NAME/SMS_MP DataTransferService 22 Aug 2019 21:28:56 2136 (0x0858) UpdateURLWithTransportSettings(): NEW URL - MP SERVER NAME:80/SMS_MP DataTransferService 22 Aug 2019 21:28:56 2136 (0x0858) Added (source=.sms_pol?{fa212c1c-7a97-4736-a3be-1d1cdaed1c1c}.427_00,dest={9EF35546-5A6D-46FD-9BCF-8A0D4C9194D7}.tmp) pair from manifest. DataTransferService 22 Aug 2019 21:28:56 2136 (0x0858) DTSJob {020B3E9F-D5B4-470C-94C6-F1909A3B2DF8} created to download from 'MP SERVER NAME:80/SMS_MP' to 'C:\Windows\CCM\Temp'. DataTransferService 22 Aug 2019 21:28:56 2136 (0x0858) DTSJob {020B3E9F-D5B4-470C-94C6-F1909A3B2DF8} in state 'PendingDownload'. DataTransferService 22 Aug 2019 21:28:56 4996 (0x1384) WUHandler Its a WSUS Update Source type ({4AC8EAF8-6E98-44AE-A63D-934500C6A750}), adding it. WUAHandler 23 Apr 2019 11:09:57 5956 (0x1744) Device is not MDM enrolled yet. All workloads are managed by SCCM. WUAHandler 23 Apr 2019 11:09:57 3724 (0x0E8C) SourceManager::GetIsWUfBEnabled - There is no Windows Update for Business settings assignment. Windows Update for Business is not enabled through ConfigMgr WUAHandler 23 Apr 2019 11:09:57 3724 (0x0E8C) Existing WUA Managed server was already set (MP SERVER NAME:8530), skipping Group Policy registration. WUAHandler 23 Apr 2019 11:09:57 5956 (0x1744) Added Update Source ({4AC8EAF8-6E98-44AE-A63D-934500C6A750}) of content type: 2 WUAHandler 23 Apr 2019 11:09:57 5956 (0x1744) Location Services WSUS Path='MP SERVER NAME:8530', Server='MP SERVER NAME', Version='425', LocalityEx='SITE', SUPFallbackIn='360' LocationServices 23 Aug 2019 08:14:12 3240 (0x0CA8) Calling back with locations for WSUS request {34920EF8-27DD-4D2B-8902-E83C0253F321} LocationServices 23 Aug 2019 08:14:12 3240 (0x0CA8) Current AD site of machine is DBN LocationServices 23 Aug 2019 08:18:20 2956 (0x0B8C) Created and Sent Location Request '{C63AD811-555D-456A-B590-F4FF5B56354C}' for package {4AC8EAF8-6E98-44AE-A63D-934500C6A750} LocationServices 23 Aug 2019 08:18:21 2956 (0x0B8C) Calling back with the following WSUS locations LocationServices 23 Aug 2019 08:18:21 2352 (0x0930) WSUS Path='MP SERVER NAME:8530', Server='MP SERVER NAME', Version='425', LocalityEx='SITE', SUPFallbackIn='360' LocationServices 23 Aug 2019 08:18:21 2352 (0x0930) Calling back with locations for WSUS request {C63AD811-555D-456A-B590-F4FF5B56354C} LocationServices 23 Aug 2019 08:18:22 2352 (0x0930)

are you guys able to deploy Office 365 within your task sequence when deploying a new machine. My standard deployment to a machine works, however new deployments are not. TS keeps failing on the Office install part

I have setup my Free disk report, however it only allows me to select the default groups of servers. Is there a way I can setup the report for any of my custom groups?

yup same exact same VLAN. I've matched all the BIOS settings between them, but still no luck. The e5580 is set to Legacy Boot though and not UEFI. IT still images and boots into windows with no issue.

Normal Lan connection, switch to server on different VLAN. Yup positive. I even re-distributed the images. I also tested on E5580, and that imaged perfectly. I compared BIOS settings, and they are exact (apart from versions which I think I am going to upgrade now). This is a strange problem though.

Sorry, hope this is better 20190131_151104.mp4

20190131_112359.mp4 Sorry for the poor quality once again. I dont get that option

Not sure if this will help - sorry for the poor images

its in production I get the message below: No Boot devices found Press F1 key to retry boot Press F2 key to reboot into setup Press F5 key to run onboard diagnostics

If I change it to UEFI, I cant boot at all. I just just get No boot device found My settings are as follows: Boot Sequence: UEFI - Enabled Windows Boot Manager - Disabled Advanced Boot Options Enable Legacy Option ROMs - Disabled UEFI Boot PAth Security Always, Except Internal HDD - Enabled Always - Disabled Never - Disabled Integrated NIC Enabled w/PXE Secure Boot - Enabled

Apologies, that log was from the client machine. This log is from the server. I see a few errors - not sure if the issue lies here. Just an FYI - I imaged an E7450, and that image with erorrs at all. smsts.log

Hi no prolem, log attached now. I have just edited the names from the file. smsts.log

Hi it is. Please find screenshot of my test TS atatched. If I leave UEFI/Secure Boot enabled, I am unable to PXE boot