0x87d00244 The object or subsystem has not been initialized

So you have a client that is running several days behind on SCEP updates.  It can see the updates and the machine is working but when you run the Software Updates Deployment Evaluation Cycle you see this:

 

 

 

The error you find is (0x87d00244) Updates will not be made available.  This points to a subsystem not ready.  Could it be Windows Update agent is broken.  First check to see the state of the machine:  Running Windows Update we see the machine is in a pending reboot state:

 

The machine would really like to run the SCEP update but other updats are pending a process. Restart the box, see if will install the updates.

Intune Fun

Playing with several settings with my Win 8.1 phone and Intune.  First I install the

Project My Screen App for Windows Phone

https://www.microsoft.com/en-us/download/details.aspx?id=42536

This is a great applicaiton to show your Windows 8.1 device on the desktop or even project. 

Now to the fun I had.

One feature that is nice is the ability to change the security

I did notice that after Setting the policy for Advanced Password setting, it will set your numeric keyboard login to a normal keyboard (seen above)

 

Unfortunately, keyboard setting "Password" is locked out.  Even after changing the policy back and forth, retiring the device and performing the unenroll.  The device was not able to be changed from the keyboard back to the number pad.

 

I used the Intune Wipe feature and selected the feature to remove corporate data.  I was very impressed that in less than 3 seconds the device shutdown and started the wipe process.

 

I wasn't looking forward to the restore process.  With the backup feature enabled, my device restorted to the orginal settings in about 20 mins.  There are a few personal settings there were not set back. 

 

In the future, I will run some more tests and record the screen shots using the Windows Project My screen Application.

 

I was a playing more than cocentrating on writing a good article. More to come...

 

 

Intune update for March coming this week!

Today Microsoft announced the next update to the Microsoft Intune cloud service for mobile devices:
http://blogs.technet.com/b/microsoftintune/archive/2015/03/04/march-updates-coming-this-week-to-microsoft-intune.aspx

Updates include:

Ability to streamline the enrollment of iOS devices purchased directly from Apple or an authorized reseller with the Device Enrollment Program (DEP)

Ability to restrict access to SharePoint Online and OneDrive for Business based upon device enrollment and compliance policies

Management of OneDrive apps for iOS and Android devices

Ability to deploy .appx files to Windows Phone 8.1 devices

Ability to restrict the number of devices a user can enroll in Intune

These updates are for the cloud only service.  If you are using the Hybrid or "Unified" approach which has Intune integrated into your SCCM console then you will see the following changes:

•  create custom WiFi profiles with pre-shared keys (PSK) for Android devices

Microsoft, as you have seen over the last year, has increased the cadence at software distribution. None is so apparent as the Intune updates.  If we simply look at Intune from where it started several years ago to today is had greatly improved and is now in the running with other Mobile Device vendors.

Items that I would like to see in Intune is the ability to run it on Server class machines so that small companies can fully utilize the cloud based solution.  I can see Intune Partners or Vendors managing large number of small companies completely from Intune.  Then when a new version of Java is deployed all the small companies can pilot and then opt in and recieve it. 

The one problem is that Inune is individual tenant based and we need to look at a "Intune console" similar to what you have in SCCM to manage different site codes, collection of systems in order to manage all the companies effectively as many branches of a single company depending on what the deployment. 

While each "branch" might have a different need, this can be handled by the branch admins or even by the Intune Partner. 

Just some thoughts......