Microsoft admits Samsung phones under Intune mobile device management are dropping out of compliance
(2021/11/12)
- Reference: 1636741453
- News link: https://www.theregister.co.uk/2021/11/12/intune_compliance/
- Source link:
Some Samsung phones managed by Microsoft Intune [1]are dropping out of compliance after an automatic restart or update, the Windows giant has admitted.
Samsung Galaxy kit running Android 9 (or later) with Android Device Administrator management or an Android Enterprise personally owned work profile are affected as well as Samsung Android 11 hardware provisioned as Android Enterprise fully managed devices.
The former can drop out of compliance after an auto-restart while a managed update can do for the latter.
[2]
Intune is Microsoft's take on Mobile Device Management (MDM) and Mobile Application Management (MAM). The theory goes that administrators can use the cloud-based service to control how an organisation's devices are used, including smartphones.
[3]
[4]
The company faces stiff competition in the MDM arena, not least from Apple and Jamf, making the issue all the more awkward. Particularly since the workaround requires some manual intervention on behalf of the user, somewhat defeating the point of a device management platform.
Afflicted Samsung devices show as noncompliant, which could potentially block access to corporate resources. Getting round the issue requires a user to manually unlock the phone and trigger a sync in order to regain compliancy.
[5]
Microsoft's admission comes amid [6]growing rumbles of discontent from users finding devices in their fleets dropping out of compliance unexpectedly. One responded to Microsoft's post: "I had a bunch of Samsung devices go non-compliant with a password remediation failed error for no reason."
In recent weeks, Intune customers have found devices [7]dropping out due to password policy enforcement changes. Android 11 work profile devices or device administrator enrolled devices were affected.
[8]What? Apple products need management?! Cupertino intros device management for SMBs
[9]JumpCloud attempts to cash in on work-from-home era with Zero Touch Mac enrolment
[10]Bork to school: Apple kit management service Jamf pulls a sickie for IT crews trying to get pupils on iPads
[11]Report: UK colleges face testing times with ageing kit, iffy connectivity, and some IT staff supporting 1k+ users
The Intune team assured customers they are "working to resolve this issue with Samsung," but still found time to trumpet the arrival of Feedback for Microsoft 365 apps and services.
We’re pleased to announce the preview of Feedback for Microsoft 365 apps and services including Microsoft Endpoint Manager!
Have a feature you love, or when a [12]@MSIntune feature could be better? Share your feedback! [13]https://t.co/1NokkIQaq4 [14]#MEMpowered [15]#MSIntune — IntuneSupportTeam (@IntuneSuppTeam) [16]November 11, 2021
We imagine there aren't many administrators out there who would describe a device dropping out of compliance and the subsequent support ticket as a "feature you love." ®
Get our [17]Tech Resources
[1] https://techcommunity.microsoft.com/t5/intune-customer-success/known-issue-samsung-devices-are-noncompliant-after-restart-or/ba-p/2952544
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YY7yJcQql4kFY50RJovnxAAAANA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YY7yJcQql4kFY50RJovnxAAAANA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YY7yJcQql4kFY50RJovnxAAAANA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YY7yJcQql4kFY50RJovnxAAAANA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://twitter.com/cjtheway/status/1454086448383135746
[7] https://www.reddit.com/r/Intune/comments/qalo2p/intune_is_still_causing_issues_for_android_users/
[8] https://www.theregister.com/2021/11/11/apple_business_essentials/
[9] https://www.theregister.com/2021/03/16/jumpcloud_zero_touch_mac_wfh/
[10] https://www.theregister.com/2021/02/01/jamf_school_apple_titsup/
[11] https://www.theregister.com/2020/10/26/jisc_research/
[12] https://twitter.com/MSIntune?ref_src=twsrc%5Etfw
[13] https://t.co/1NokkIQaq4
[14] https://twitter.com/hashtag/MEMpowered?src=hash&ref_src=twsrc%5Etfw
[15] https://twitter.com/hashtag/MSIntune?src=hash&ref_src=twsrc%5Etfw
[16] https://twitter.com/IntuneSuppTeam/status/1458811754209755140?ref_src=twsrc%5Etfw
[17] https://whitepapers.theregister.com/
Samsung Galaxy kit running Android 9 (or later) with Android Device Administrator management or an Android Enterprise personally owned work profile are affected as well as Samsung Android 11 hardware provisioned as Android Enterprise fully managed devices.
The former can drop out of compliance after an auto-restart while a managed update can do for the latter.
[2]
Intune is Microsoft's take on Mobile Device Management (MDM) and Mobile Application Management (MAM). The theory goes that administrators can use the cloud-based service to control how an organisation's devices are used, including smartphones.
[3]
[4]
The company faces stiff competition in the MDM arena, not least from Apple and Jamf, making the issue all the more awkward. Particularly since the workaround requires some manual intervention on behalf of the user, somewhat defeating the point of a device management platform.
Afflicted Samsung devices show as noncompliant, which could potentially block access to corporate resources. Getting round the issue requires a user to manually unlock the phone and trigger a sync in order to regain compliancy.
[5]
Microsoft's admission comes amid [6]growing rumbles of discontent from users finding devices in their fleets dropping out of compliance unexpectedly. One responded to Microsoft's post: "I had a bunch of Samsung devices go non-compliant with a password remediation failed error for no reason."
In recent weeks, Intune customers have found devices [7]dropping out due to password policy enforcement changes. Android 11 work profile devices or device administrator enrolled devices were affected.
[8]What? Apple products need management?! Cupertino intros device management for SMBs
[9]JumpCloud attempts to cash in on work-from-home era with Zero Touch Mac enrolment
[10]Bork to school: Apple kit management service Jamf pulls a sickie for IT crews trying to get pupils on iPads
[11]Report: UK colleges face testing times with ageing kit, iffy connectivity, and some IT staff supporting 1k+ users
The Intune team assured customers they are "working to resolve this issue with Samsung," but still found time to trumpet the arrival of Feedback for Microsoft 365 apps and services.
We’re pleased to announce the preview of Feedback for Microsoft 365 apps and services including Microsoft Endpoint Manager!
Have a feature you love, or when a [12]@MSIntune feature could be better? Share your feedback! [13]https://t.co/1NokkIQaq4 [14]#MEMpowered [15]#MSIntune — IntuneSupportTeam (@IntuneSuppTeam) [16]November 11, 2021
We imagine there aren't many administrators out there who would describe a device dropping out of compliance and the subsequent support ticket as a "feature you love." ®
Get our [17]Tech Resources
[1] https://techcommunity.microsoft.com/t5/intune-customer-success/known-issue-samsung-devices-are-noncompliant-after-restart-or/ba-p/2952544
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YY7yJcQql4kFY50RJovnxAAAANA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YY7yJcQql4kFY50RJovnxAAAANA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YY7yJcQql4kFY50RJovnxAAAANA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YY7yJcQql4kFY50RJovnxAAAANA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://twitter.com/cjtheway/status/1454086448383135746
[7] https://www.reddit.com/r/Intune/comments/qalo2p/intune_is_still_causing_issues_for_android_users/
[8] https://www.theregister.com/2021/11/11/apple_business_essentials/
[9] https://www.theregister.com/2021/03/16/jumpcloud_zero_touch_mac_wfh/
[10] https://www.theregister.com/2021/02/01/jamf_school_apple_titsup/
[11] https://www.theregister.com/2020/10/26/jisc_research/
[12] https://twitter.com/MSIntune?ref_src=twsrc%5Etfw
[13] https://t.co/1NokkIQaq4
[14] https://twitter.com/hashtag/MEMpowered?src=hash&ref_src=twsrc%5Etfw
[15] https://twitter.com/hashtag/MSIntune?src=hash&ref_src=twsrc%5Etfw
[16] https://twitter.com/IntuneSuppTeam/status/1458811754209755140?ref_src=twsrc%5Etfw
[17] https://whitepapers.theregister.com/
MDM/MAM frustration
Just had this om my phone under MDM, post update started getting emails that it was not compliant. Attempted to correct the issue in question ( the pin code wasn't long enough) needed to be 6 digits, was 6 digits but intune didn't believe me or the device. tried to change the digits to 7 but intune could see no change.
Turns out that if you follow the correction path indicated by intune, it will not apply the change. You have to change your Pin or password via the phones normal security setting path. A trap that is easy to fall into as most other MS stuff has short cuts that work.
Hope that helps