Windows 10 Intune Devices, Smoothwall and Policies Applying Inconsistently

[_techie_]

Hi.

 

I have recently moved jobs to a new school, and have inherited a domain that is slowly being moved over to InTune.

We seem to be having some odd issues with Smoothwall (which I am very familiar with) and newly imaged InTune devices not picking up certain policies, and giving us issues with the sync not working correctly - often we get Sync could not be initiated when running manually from the settings panel.

Is there anything I need to look out for with regards to setting up Smoothwall to allow InTune to work in its most optimal way?

 

Thanks

[EssentialRug]

Hi.

 

I have recently moved jobs to a new school, and have inherited a domain that is slowly being moved over to InTune.

We seem to be having some odd issues with Smoothwall (which I am very familiar with) and newly imaged InTune devices not picking up certain policies, and giving us issues with the sync not working correctly - often we get Sync could not be initiated when running manually from the settings panel.

Is there anything I need to look out for with regards to setting up Smoothwall to allow InTune to work in its most optimal way?

 

Thanks

 

Not too sure about Smoothwall specifically, but have you had a look at the IP's/ports needed by Intune here?

 

https://docs.microsoft.com/en-us/mem/intune/fundamentals/intune-endpoints

[dmason2]

how soon are you leaving the devices before checking the policies have applied? We enrol ipads via ASM and intune. I've noticed that it could take over night for all policies on the iPads to push through

[_techie_]

Thanks both. We've had a smoothwall checkup, and a bit of tidying up has been done. The overall experience is generally working.

 

We are still having "sync could not be initiated" errors on shared devices, that are not assigned to users. Some devices are consistently working whilst syncing, whilst others of the same model are giving us sync could not be initiated. All devices are checking out via smoothwall aside from a few 404 errors to Microsoft sites in the event log which also show up in the smoothwall web filter live reports. These are the same 404 errors between working syncing and non syncing devices

 

The only thing of interest is that whilst the devices support TPM 2.0 in the bios, (Dell 7050 units) my manager had to use the user driven autopilot configuration, even though no user has been assigned in the Autopilot console.

 

Surely we should be using the self deploying profile if the devices support TPM 2.0?

 

Bit of an Azure n00b here, but I'm quickly learning.

The machines that are successfully syncing are working great.