Intune Policies not coming from Intune Education Portal

[cheekycharly]

Hi all, I set off testing some policies on the full blown Intune Portal then discovered the Education portal. I since went back to my full Intune Portal and removed the user access from the policies so nobody was getting them.

 

I then went back to the Education portal and created a policy under the group "Pupils" using the wizard. After logging in as a pupil I think that the policies are coming from full Intune Portal still as the tweaks I have made on the Educational one don't relate to the end user experience and under the policy it shows "0" on devices.

 

I logged on as an admin and ran a sync but no change.

 

Any ideas how I turn one off to try the other etc.

 

Thanks in advance all.

 

CC

Edited April 17, 2023 by cheekycharly

[snagrat]

They are technically the same, just the Edu has less features and is really aimed at Teachers.

 

Your changes probably haven’t synced to the client yet. This could be every 8 hours, regardless if you hit the sync button or not

[cheekycharly]

Ok, so I bombed off "Intune education" and created all the policies in the "Intune admin centre". When I log on with Windows 10, OneDrive starts setting its folders up, then any software that isn't on the system starts downloading so Sophos, Cloud Drive Mapper, Creative Cloud, Printix. All works great so I wiped a laptop and stuck windows 11 Professional on it to see how that behaved and its not doing anything to be fair.

 

I join the Windows 11 Pro laptop to Azure and restart. I then log on as an admin expecting the basics like Sophos (Pushed to all users) to start downloading and OneDrive to connect but nothing.

 

Intune admin centre just says under the "Windows devices" and "Managed Apps" "Waiting for install status" and stays on this forever.

 

I checked the activity log on the laptop and no alert to say its acknowledged its installing an app.

 

All my Configuration Profiles in Intune say "Platform: Windows 10 and later"

 

 

Any ideas what its playing at?

[IT_JB]

(Pushed to all users)

 

That might be the issue, it will be waiting for an assigned Azure AD user to sign in before applying anything. If you assign to the device it will do at the next check-in, or you could run a manual sync from the profile of the device in intune.

 

EDIT* I'm assuming you have just logged in with a local admin account.

Edited May 16, 2023 by IT_JB

[cheekycharly]

No I signed in with itadmin so our admin level login for azure then logged on as a Teacher then logged on as a pupil but all three logins sit idle and never start downloading. On the laptop in question under Work and school and Info (Heading towards the sync button) it does now say "Some app have failed to install" then the words "DownloadFailed" next to the first ID number. My Intune admin centre on the other hand is still showing "Waiting for install status" next to SophosSetup.exe.

 

Appears it has got stuck on this job twice and nothing else attempts to try installing.

 

Wiped another laptop and put Windows 11 on it and the same thing happens.

 

Removed all the Azure users on a Windows 10 laptop and logged in and they started setting up as they should so the config should work unless there is some huge difference between Intune configuration policies on Windows 10/11.

[cheekycharly]

So I think I have pinpointed the issue down to the Intune Management Extension not installing on Windows 11 devices after enrollment. Windows 10 get this application fine.

 

I double checked Windows 11 to see if this application is somehow native in the newer OS but the service is not there.

 

Anyone know why it might not be giving that application out when the device is enrolled and compliant and ready for service.

Edited May 17, 2023 by cheekycharly