When subscription activation gets stuck, it could be due to conflicting tenant accounts. This blog dives into how to fix subscription activation by auto-removing extra work or school accounts. With a quick detection and remediation script, you can zap these conflicts in no time, ensuring your devices can upgrade back to Enterprise again.
Autopilot Device Preparation (AVP2/AP-DPP): Hiding the Privacy Settings
In this post, I’ll show you how to streamline the Out-of-Box Experience (OOBE) setup process even if you’re using Autopilot Device Preparation ( AVP2). While AVP2 is a fantastic tool for device provisioning, it doesn’t include all the customization options that Autopilot offers: Hide Privacy Settings, Software License Terms, or changing account options during OOBE. But don’t worry; I’ll walk you through how to work around this with a PowerShell script!
The Incredible story of using the Windows Performance Recorder to troubleshoot your Enrollments.
In this blog, I will show you how to set up the Windows Performance Recorder […]
Patch My PC Home Updater 5.0: Effortless Updates for Over 500 Apps
On October 23rd, 2024, Patch My PC dropped their brand new Home Updater version 5.0, […]
Autopilot Error 0x80280009: TPM Attestation. What is going on?
In this blog, we’ll explore why 0x80280009 (aka TPM_E_FAIL) is becoming a more common headache, particularly in virtual machines. We’ll look at what’s really going on inside the TPM when this error hits, why your Hyper-V VMs aren’t playing nice with Autopilot for pre-provisioned deployments, and, just maybe, how a new feature on the horizon, VTpmAttestation, might change the attestation game.
Local Administrator Protection vs. EPM: The Differences Explained!
After posting the blog about Administrator Protection, one question kept coming up: What are the key differences between Administrator Protection vs EPM (Endpoint Privilege Management)? Some even wondered if EPM is being replaced now that Administrator Protection is here. Let’s clear things up!
Strengthening Local Admin Security in Windows 11 with Local Administrator Protection
This blog will focus on a new Windows 11 insider build feature, Administrator Protection, announced in the latest Windows Insider Canary build (27718).
This feature is designed to eliminate always-on admin rights. Instead, it uses a hidden elevation mechanism to provide just-in-time privileges when needed, keeping admin rights in the shadows until required. “I am the Shadow Admin, always present but never seen.”
Troubleshooting Intune Enrollment: Solving the 0x80180031 MDM Not Configured Error
In this blog, we’ll dive into the common headache of enrolling existing devices to Intune […]
SecureChannelFailure Errors, and the Curious Case of the Failing IME
Have you ever struggled with Lenovo T480 or HP Elitedesk 800 G4 devices that refused to cooperate with Intune? In this blog, we unravel the saga of SecureChannelFailure errors, elusive SSL/TLS handshake issues, and a troublesome TPM. Armed with Fiddler and Wireshark, we uncovered a cryptographic glitch causing the chaos. The result? Apps wouldn’t install, and no PowerShell scripts could be deployed during Windows Autopilot.
The Subscription Activation Journey: Stuck on Pro
The May update broke Windows Subscription Activation, causing devices to drop from Enterprise to Pro. […]