New SyncML Viewer version

Quite some time ago now, I published the SyncML Viewer to monitor the MDM protocol between a Windows client device and the Microsoft MDM backend (Intune). In the meantime, Microsoft brought to life the Microsoft Managed Platform Cloud (MMP-C) and uses the so-called Declared Configuration protocol which is still using the underlying OMA-DM SyncML protocol.…

Read More

Deep dive of SCEP certificate request/renewal on Intune-managed Windows clients

Today we are going to look under the hood of certificate requests or renewals on an MDM (Intune) managed Windows client. The environment is simple and uses a Windows client and SCEPman as the Cloud CA, which is easily set up and nothing more than an Azure App Service. It is especially interesting, as this…

Read More

Windows 10 MDM client activity monitoring with SyncML Viewer

Do you ever wanted to know what is going on behind the curtain when clicking MDM Sync on Windows 10? Gaining insights into how the SyncML representation protocol is used during device management of Windows 10 clients? With SyncML Viewer you have the chance to easily get deep insights now. I’ve written a small tool…

Read More

Intune Policy Processing on Windows 10 explained

In this post I will dive into the Intune policy processing on a MDM managed Windows 10 client. Intune is an MDM system and has the ability to deploy so called device configuration profiles to managed Windows 10 endpoints. We will have a look at the architecture, the settings, and the actual processing including the…

Read More

Deep dive ADMX ingestion to configure SilentAccountConfig with OneDrive

Since Windows 10 1703 you can use a feature called ADMX ingestion to extend policy settings in Intune. What it basically does is to parse an ADMX file and build a MDM policy of it. In the end you can configure the ADMX settings via OMA-URIs in Intune. More details about ADMX ingestion can be…

Read More