Compliance beats configuration, two compliance policies resolve to the most restrictive value, and two configuration profiles resolve to nothing at all. The report calls all of it Conflict.
Retire, wipe, delete, Fresh Start and Autopilot Reset do five different things to a device and to three separate records. Delete is the one that catches people.
The admin centre Sync action got fuller in 2607, and the properties catalog can now read the registry. Neither fixes a policy that was never going to apply.
New in service release 2607. A shell script that emits JSON, a rules file that judges it, and strict data types that fail quietly when you get them wrong.
New in preview: Intune-delivered Defender settings can now override Group Policy, Configuration Manager and local scripts. Useful, and not something to switch on tenant-wide.
Version 2609 moves ConfigMgr to one release a year. That is a maintenance signal, not a deprecation notice, and permanent co-management remains supported.
The app limit went to twenty five, managed installer stopped skipping Win32 apps, and Windows 365 automatic mode reached GA. Hybrid join still is not supported.
The checks that actually narrow it down, in the order that saves the most time.
The newsletter
Subscribe and get my 8-page PDF: 13 common Intune problems, the order to check them in, and the fix for each. Then Microsoft 365 fixes from the field, about twice a month. From G.R Badhon, Microsoft MVP.
