https://www.oeltayeb.com/ Practical troubleshooting guides and how-tos for Microsoft Intune, Configuration Manager, Entra ID, Defender, Exchange and Microsoft 365. en https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html https://www.oeltayeb.com/articles/intune-wifi-vpn-profile-not-applying-scep-pkcs-certificates.html Microsoft Intune Thu, 08 Oct 2026 08:00:00 +0000 Trace a stuck Wi-Fi or VPN profile back through the certificate chain: trusted root, SCEP/PKCS profile, Certificate Connector and NDES, using the logs and event IDs Microsoft documents. https://www.oeltayeb.com/articles/exchange-server-441-4-4-1-connection-timed-out-outbound-queues.html https://www.oeltayeb.com/articles/exchange-server-441-4-4-1-connection-timed-out-outbound-queues.html Exchange Server (on-premises & hybrid) Thu, 08 Oct 2026 08:00:00 +0000 Outbound mail stuck in Retry with 441 4.4.1 or 421 4.4.2? Test port 25 and the smart host, read the send protocol log, fix the network or TLS cause and retry before 4.4.7 NDRs. https://www.oeltayeb.com/articles/exchange-server-se-in-place-upgrade-from-2019.html https://www.oeltayeb.com/articles/exchange-server-se-in-place-upgrade-from-2019.html Exchange Server (on-premises & hybrid) Thu, 08 Oct 2026 08:00:00 +0000 Upgrade Exchange Server 2019 CU14 or CU15 to Exchange Server SE in place: prerequisites, AD preparation, the Setup command, DAG maintenance mode, product keys and post-upgrade checks. https://www.oeltayeb.com/articles/exchange-server-third-party-transport-agents-antivirus-scanmail-eset.html https://www.oeltayeb.com/articles/exchange-server-third-party-transport-agents-antivirus-scanmail-eset.html Exchange Server (on-premises & hybrid) Thu, 08 Oct 2026 08:00:00 +0000 Mail stuck in Submission, event 1050 or EdgeTransport crashes after adding or updating an on-server mail security product? Find the agent, isolate it safely and prove the fix. https://www.oeltayeb.com/articles/windows-kiosk-shared-pc-intune-configuration.html https://www.oeltayeb.com/articles/windows-kiosk-shared-pc-intune-configuration.html Microsoft Intune Wed, 07 Oct 2026 08:00:00 +0000 Configure single-app and multi-app kiosks with the Intune Kiosk template or Assigned Access XML, set up Shared PC mode, pair with Autopilot self-deploying mode, and fix kiosks that won't launch. https://www.oeltayeb.com/articles/defender-xdr-incident-first-hour-triage-containment.html https://www.oeltayeb.com/articles/defender-xdr-incident-first-hour-triage-containment.html Microsoft Defender Wed, 07 Oct 2026 08:00:00 +0000 A time-boxed first hour for a Defender XDR incident: claim it, read the attack story, scope users, devices and mailboxes with hunting, contain safely and document the hand-off. https://www.oeltayeb.com/articles/conditional-access-oidc-scope-enforcement-change-2026.html https://www.oeltayeb.com/articles/conditional-access-oidc-scope-enforcement-change-2026.html Microsoft Entra ID Tue, 06 Oct 2026 08:00:00 +0000 Sign-ins requesting only openid, profile, email or User.Read are now subject to All resources policies with exclusions: who is affected, how to find the apps in sign-in logs, how to fix them, and the timeline. https://www.oeltayeb.com/articles/exchange-server-antivirus-exclusions-check.html https://www.oeltayeb.com/articles/exchange-server-antivirus-exclusions-check.html Exchange Server (on-premises & hybrid) Tue, 06 Oct 2026 08:00:00 +0000 The folders, processes and file extensions Microsoft says to exclude from antivirus on Exchange Server SE and 2019, how AMSI differs, and how to prove the exclusions work with Test-ExchAVExclusions. https://www.oeltayeb.com/articles/microsoft-365-tenant-hardening-checklist-secure-score.html https://www.oeltayeb.com/articles/microsoft-365-tenant-hardening-checklist-secure-score.html Microsoft 365 Tue, 06 Oct 2026 08:00:00 +0000 A practical hardening pass for a Microsoft 365 tenant: track progress in Secure Score, then fix admin roles, app consent, legacy authentication, SMTP AUTH, risky defaults and auditing. https://www.oeltayeb.com/articles/intune-device-query-kql-inventory.html https://www.oeltayeb.com/articles/intune-device-query-kql-inventory.html Microsoft Intune Mon, 05 Oct 2026 08:00:00 +0000 Run KQL in Intune against one Windows device in real time or across your fleet's inventory: licensing, permissions, the properties catalog policy and queries you can reuse. https://www.oeltayeb.com/articles/windows-hello-for-business-provisioning-errors-intune.html https://www.oeltayeb.com/articles/windows-hello-for-business-provisioning-errors-intune.html Microsoft Intune Mon, 05 Oct 2026 08:00:00 +0000 Fix Windows Hello for Business PIN setup failures on Intune PCs: the 0x801C and 0x8009 codes, Event ID 360 prerequisite lines, conflicting policy sources and dsregcmd checks. https://www.oeltayeb.com/articles/aadsts50076-aadsts50079-aadsts50158-mfa-errors.html https://www.oeltayeb.com/articles/aadsts50076-aadsts50079-aadsts50158-mfa-errors.html Microsoft Entra ID Sun, 04 Oct 2026 08:00:00 +0000 What the MFA-related AADSTS codes mean, how to read the Authentication details and Conditional Access tabs of a sign-in, and how to fix legacy clients, unregistered users and authentication strength mismatches. https://www.oeltayeb.com/articles/entra-cloud-sync-vs-connect-sync-choosing-migrating.html https://www.oeltayeb.com/articles/entra-cloud-sync-vs-connect-sync-choosing-migrating.html Microsoft Entra ID Sun, 04 Oct 2026 08:00:00 +0000 Architecture differences, the Learn feature comparison, when each sync tool fits, and the documented pilot-OU migration from Connect Sync to Cloud Sync with cloudNoFlow and JoinNoFlow rules. https://www.oeltayeb.com/articles/configmgr-current-branch-upgrade-updates-and-servicing.html https://www.oeltayeb.com/articles/configmgr-current-branch-upgrade-updates-and-servicing.html Configuration Manager (SCCM) Sun, 04 Oct 2026 08:00:00 +0000 Prepare the site, get the update through the service connection point, pass the prerequisite check, install it, unstick downloads and installs, and finish the post-upgrade tasks. https://www.oeltayeb.com/articles/entra-emergency-access-break-glass-accounts.html https://www.oeltayeb.com/articles/entra-emergency-access-break-glass-accounts.html Microsoft Entra ID Sun, 04 Oct 2026 08:00:00 +0000 Build two cloud-only emergency access accounts with passkeys, keep them out of Conditional Access lockouts, alert on every sign-in and test them at least every 90 days. https://www.oeltayeb.com/articles/exchange-server-content-index-failed-search-not-working.html https://www.oeltayeb.com/articles/exchange-server-content-index-failed-search-not-working.html Exchange Server (on-premises & hybrid) Sun, 04 Oct 2026 08:00:00 +0000 ContentIndexState Failed or Unknown, or users can't find mail? Separate client from server problems, reseed or rebuild the Exchange 2016 catalog, and fix search on Exchange 2019 and SE. https://www.oeltayeb.com/articles/exchange-server-email-gateway-rejection-codes-quick-reference.html https://www.oeltayeb.com/articles/exchange-server-email-gateway-rejection-codes-quick-reference.html Exchange Server (on-premises & hybrid) Sun, 04 Oct 2026 08:00:00 +0000 Look up a rejection or deferral from Mimecast, Barracuda, FortiMail or Cisco (IronPort) in front of Exchange Server, or Exchange's own reply to the gateway: meaning, who fixes it, first check. https://www.oeltayeb.com/articles/exchange-server-managed-availability-health-sets-probes.html https://www.oeltayeb.com/articles/exchange-server-managed-availability-health-sets-probes.html Exchange Server (on-premises & hybrid) Sun, 04 Oct 2026 08:00:00 +0000 Why did Exchange recycle an app pool or reboot itself? How probes, monitors and responders work, how to trace what Managed Availability did, and when an override is justified. https://www.oeltayeb.com/articles/exchange-server-poison-message-queue-submission-queue.html https://www.oeltayeb.com/articles/exchange-server-poison-message-queue-submission-queue.html Exchange Server (on-premises & hybrid) Sun, 04 Oct 2026 08:00:00 +0000 Messages in the poison queue, or a Submission queue that won't drain? Find what crashed or stalled transport, then export, resume or remove messages safely. https://www.oeltayeb.com/articles/windows-laps-intune-entra-backup.html https://www.oeltayeb.com/articles/windows-laps-intune-entra-backup.html Microsoft Intune Sat, 03 Oct 2026 08:00:00 +0000 Set up Windows LAPS end to end: enable it in Microsoft Entra ID, build the Intune account protection profile, retrieve and rotate passwords, and check the LAPS event log. https://www.oeltayeb.com/articles/exchange-server-proofpoint-integration-connectors-errors.html https://www.oeltayeb.com/articles/exchange-server-proofpoint-integration-connectors-errors.html Exchange Server (on-premises & hybrid) Sat, 03 Oct 2026 08:00:00 +0000 Proofpoint in front of Exchange Server: scope the receive connector, relay outbound through Proofpoint, fix TLS and recipient lists, and work out which side wrote each rejection. https://www.oeltayeb.com/articles/intune-android-zero-touch-enrollment-reseller-dpc-extras.html https://www.oeltayeb.com/articles/intune-android-zero-touch-enrollment-reseller-dpc-extras.html Microsoft Intune Sat, 03 Oct 2026 08:00:00 +0000 Fix Android zero-touch devices that skip Intune: reseller registration, linking the zero-touch account, DPC extras JSON and tokens, and the checksum and Conditional Access errors. https://www.oeltayeb.com/articles/jamf-pro-vs-intune-macos-ios-comparison-2026.html https://www.oeltayeb.com/articles/jamf-pro-vs-intune-macos-ios-comparison-2026.html Microsoft Intune Sat, 03 Oct 2026 08:00:00 +0000 A balanced look at Jamf Pro and Microsoft Intune for Apple devices in 2026: declarative management, scripting and inventory, Self Service vs Company Portal, compliance, identity and when to run both. https://www.oeltayeb.com/articles/export-intune-device-inventory-graph-powershell.html https://www.oeltayeb.com/articles/export-intune-device-inventory-graph-powershell.html Microsoft Intune Fri, 02 Oct 2026 08:00:00 +0000 Export your Intune device inventory to CSV with the Microsoft Graph PowerShell SDK, spot stale and noncompliant devices, and run it unattended with certificate-based app-only sign-in. https://www.oeltayeb.com/articles/exchange-online-message-trace-troubleshooting.html https://www.oeltayeb.com/articles/exchange-online-message-trace-troubleshooting.html Exchange Online Fri, 02 Oct 2026 08:00:00 +0000 Run a message trace in the Exchange admin center or with Get-MessageTraceV2, read the delivery status and events, and pull older data from downloadable reports. https://www.oeltayeb.com/articles/legitimate-email-going-to-junk-tuning-anti-spam-exchange-online.html https://www.oeltayeb.com/articles/legitimate-email-going-to-junk-tuning-anti-spam-exchange-online.html Exchange Online Fri, 02 Oct 2026 08:00:00 +0000 Read the X-Forefront-Antispam-Report header (CAT, SFV, BCL, compauth) to see why a good message was junked, then fix it the supported way: submissions, Tenant Allow/Block List, sender authentication, not bypass rules. https://www.oeltayeb.com/articles/configure-microsoft-entra-hybrid-join-scp-targeted-deployment.html https://www.oeltayeb.com/articles/configure-microsoft-entra-hybrid-join-scp-targeted-deployment.html Microsoft Entra ID Thu, 01 Oct 2026 08:00:00 +0000 Pilot Microsoft Entra hybrid join with a client-side SCP, get computer sync scope right, switch to the forest-wide SCP in Entra Connect and validate with dsregcmd and Graph. https://www.oeltayeb.com/articles/entra-b2b-guest-access-cross-tenant-access-settings.html https://www.oeltayeb.com/articles/entra-b2b-guest-access-cross-tenant-access-settings.html Microsoft Entra ID Thu, 01 Oct 2026 08:00:00 +0000 How external collaboration settings and cross-tenant access settings fit together: default vs organizational settings, trusting partner MFA and devices, and B2B direct connect. https://www.oeltayeb.com/articles/exchange-hybrid-certificate-renewal-without-breaking-mail-flow.html https://www.oeltayeb.com/articles/exchange-hybrid-certificate-renewal-without-breaking-mail-flow.html Exchange Server (on-premises & hybrid) Thu, 01 Oct 2026 08:00:00 +0000 A safe runbook for renewing the public certificate behind hybrid mail flow: install it on every server, enable SMTP, update the connectors or rerun the HCW, then prove TLS works. https://www.oeltayeb.com/articles/intune-samsung-knox-mobile-enrollment-knox-service-plugin.html https://www.oeltayeb.com/articles/intune-samsung-knox-mobile-enrollment-knox-service-plugin.html Microsoft Intune Thu, 01 Oct 2026 08:00:00 +0000 Samsung devices skipping KME, failing to enroll in Intune or ignoring Knox Service Plugin settings? Check the KME profile JSON, the token, device upload, network and the OEMConfig profile. https://www.oeltayeb.com/articles/sharepoint-onedrive-external-sharing-settings-explained.html https://www.oeltayeb.com/articles/sharepoint-onedrive-external-sharing-settings-explained.html Microsoft 365 Thu, 01 Oct 2026 08:00:00 +0000 How organization, site and link settings combine to decide who can share what in SharePoint and OneDrive, with Set-SPOTenant and Set-SPOSite commands to audit and set them. https://www.oeltayeb.com/articles/training-path-ms-102-microsoft-365-administrator-exchange.html https://www.oeltayeb.com/articles/training-path-ms-102-microsoft-365-administrator-exchange.html Exchange Online Mon, 28 Sep 2026 08:00:00 +0000 A six-stage MS-102 study plan built on the official Microsoft Learn paths, with extra Exchange Online practice, lab ideas and what the November 2026 retirement of the exam means for you. https://www.oeltayeb.com/articles/intune-linux-ubuntu-rhel-enrollment-compliance-errors.html https://www.oeltayeb.com/articles/intune-linux-ubuntu-rhel-enrollment-compliance-errors.html Microsoft Intune Sun, 27 Sep 2026 08:00:00 +0000 Fix Ubuntu and RHEL devices that won't register, stay Not evaluated or Not compliant, or get blocked in Microsoft Edge: supported versions, compliance checks, journalctl logs and a clean reset. https://www.oeltayeb.com/articles/exchange-server-public-folders-not-accessible-outlook.html https://www.oeltayeb.com/articles/exchange-server-public-folders-not-accessible-outlook.html Exchange Server (on-premises & hybrid) Thu, 24 Sep 2026 08:00:00 +0000 Public folders missing, out of date or failing to open in Outlook? Check the public folder mailboxes, each user's hierarchy mailbox, hierarchy sync and folder permissions. https://www.oeltayeb.com/articles/exchange-server-mimecast-integration-connectors-errors.html https://www.oeltayeb.com/articles/exchange-server-mimecast-integration-connectors-errors.html Exchange Server (on-premises & hybrid) Wed, 23 Sep 2026 08:00:00 +0000 Route Exchange Server mail through Mimecast: regional smart hosts, authorized outbound IPs or SMTP authentication, a scoped receive connector, and the Mimecast replies that point to each fix. https://www.oeltayeb.com/articles/exchange-server-autodiscover-scp-internal-outlook-profile.html https://www.oeltayeb.com/articles/exchange-server-autodiscover-scp-internal-outlook-profile.html Exchange Server (on-premises & hybrid) Mon, 21 Sep 2026 08:00:00 +0000 Outlook can't build a profile or warns about an internal server name. Read the Test E-mail AutoConfiguration log, fix the SCP and DNS records, then clear 401, 404 and certificate failures. https://www.oeltayeb.com/articles/exchange-server-high-cpu-memory-noderunner-w3wp.html https://www.oeltayeb.com/articles/exchange-server-high-cpu-memory-noderunner-w3wp.html Exchange Server (on-premises & hybrid) Sat, 19 Sep 2026 08:00:00 +0000 Store processes holding most of the RAM is by design; sustained high CPU isn't. Map the busy process to its cause - search, IIS app pools, transport - and capture evidence with ExPerfWiz. https://www.oeltayeb.com/articles/windows-11-26h2-rollout-with-intune-feature-update-policy.html https://www.oeltayeb.com/articles/windows-11-26h2-rollout-with-intune-feature-update-policy.html Microsoft Intune Thu, 17 Sep 2026 08:00:00 +0000 How 26H2 installs as an enablement package, the Intune feature update policy and rollout options to deploy it, the known issues listed at launch, how safeguard holds show up, and how to verify a device. https://www.oeltayeb.com/articles/configmgr-microsoft-365-apps-updates-deployment.html https://www.oeltayeb.com/articles/configmgr-microsoft-365-apps-updates-deployment.html Configuration Manager (SCCM) Thu, 17 Sep 2026 08:00:00 +0000 Install Microsoft 365 Apps from the Configuration Manager console, then update it through the software update point: products, client settings, channels, ADRs and the logs that prove it. https://www.oeltayeb.com/articles/exchange-server-message-tracking-get-messagetrackinglog.html https://www.oeltayeb.com/articles/exchange-server-message-tracking-get-messagetrackinglog.html Exchange Server (on-premises & hybrid) Mon, 14 Sep 2026 08:00:00 +0000 Follow any email through Exchange Server SE or 2019: read the tracking event IDs, filter Get-MessageTrackingLog, search every server and set log retention. https://www.oeltayeb.com/articles/intune-macos-shell-scripts-custom-attributes-not-running.html https://www.oeltayeb.com/articles/intune-macos-shell-scripts-custom-attributes-not-running.html Microsoft Intune Mon, 14 Sep 2026 08:00:00 +0000 Why Intune shell scripts and custom attributes don't run on Macs: the agent's 8-hour cycle, user vs root context, shebangs, exit codes and proxies, plus agent logs and Collect logs. https://www.oeltayeb.com/articles/configmgr-hardware-inventory-extend-classes-inventoryagent.html https://www.oeltayeb.com/articles/configmgr-hardware-inventory-extend-classes-inventoryagent.html Configuration Manager (SCCM) Fri, 11 Sep 2026 08:00:00 +0000 Add a WMI class to Configuration Manager hardware inventory, pilot it, and follow the data from InventoryAgent.log through MP_Hinv.log and dataldr.log to Resource Explorer. https://www.oeltayeb.com/articles/intune-ios-account-driven-user-enrollment-byod.html https://www.oeltayeb.com/articles/intune-ios-account-driven-user-enrollment-byod.html Microsoft Intune Fri, 11 Sep 2026 08:00:00 +0000 Set up account-driven User Enrollment for personal iPhones and iPads in Intune: Managed Apple Accounts, the service discovery file, JIT registration, the enrollment profile and the user flow. https://www.oeltayeb.com/articles/jamf-pro-deploy-microsoft-365-apps-company-portal-mac.html https://www.oeltayeb.com/articles/jamf-pro-deploy-microsoft-365-apps-company-portal-mac.html Microsoft Intune Thu, 10 Sep 2026 08:00:00 +0000 Deploy Microsoft 365 for Mac, Company Portal and Microsoft AutoUpdate with Jamf Pro: official packages, App Installers or policies, an MAU profile, activation and verification. https://www.oeltayeb.com/articles/exchange-server-event-4999-watson-crash-reports.html https://www.oeltayeb.com/articles/exchange-server-event-4999-watson-crash-reports.html Exchange Server (on-premises & hybrid) Wed, 09 Sep 2026 08:00:00 +0000 Decode MSExchange Common event 4999: which process failed, where and why, how to tell noise from real crashes, and how to match the report to bugs fixed in later updates. https://www.oeltayeb.com/articles/microsoft-365-message-center-service-health-change-management.html https://www.oeltayeb.com/articles/microsoft-365-message-center-service-health-change-management.html Microsoft 365 Wed, 09 Sep 2026 08:00:00 +0000 A simple change routine for Microsoft 365: Message center preferences and digests, Planner sync, service health alerts, Targeted release and the Graph service communications API. https://www.oeltayeb.com/articles/retention-policies-litigation-hold-exchange-online-purview.html https://www.oeltayeb.com/articles/retention-policies-litigation-hold-exchange-online-purview.html Exchange Online Tue, 08 Sep 2026 08:00:00 +0000 Purview retention policies vs retention labels vs Exchange MRM tags vs litigation hold: what each does, what wins in a conflict, licensing, how to set them up and how to prove a mailbox is really on hold. https://www.oeltayeb.com/articles/intune-mam-windows-edge-app-protection-errors.html https://www.oeltayeb.com/articles/intune-mam-windows-edge-app-protection-errors.html Microsoft Intune Mon, 07 Sep 2026 08:00:00 +0000 Edge keeps asking Windows users to sign in, or MAM never applies? Check prerequisites, the Conditional Access grant, the Edge profile and the Windows Security Center connector. https://www.oeltayeb.com/articles/defender-for-endpoint-onboarding-errors-sense-event-ids.html https://www.oeltayeb.com/articles/defender-for-endpoint-onboarding-errors-sense-event-ids.html Microsoft Defender Sun, 06 Sep 2026 08:00:00 +0000 A field guide to Defender for Endpoint onboarding failures: onboarding script error codes, SENSE Operational event IDs, Intune error codes, and the registry and service checks that show where it broke. https://www.oeltayeb.com/articles/autopilot-pre-provisioning-hybrid-join-policy-conflict-domain-controller.html https://www.oeltayeb.com/articles/autopilot-pre-provisioning-hybrid-join-policy-conflict-domain-controller.html Microsoft Intune Sat, 05 Sep 2026 08:00:00 +0000 Autopilot pre-provisioning for hybrid join fails in the technician flow when a policy such as a User Rights setting needs a domain controller. How to read the 0x800706FD event and fix the scoping. https://www.oeltayeb.com/articles/intune-macos-pkg-dmg-app-deployment-errors.html https://www.oeltayeb.com/articles/intune-macos-pkg-dmg-app-deployment-errors.html Microsoft Intune Sat, 05 Sep 2026 08:00:00 +0000 Fix Intune macOS PKG and DMG app failures: the documented 0x87D3 error codes, LOB vs unmanaged PKG rules, Included apps detection, pre-install scripts, agent logs and verification. https://www.oeltayeb.com/articles/configmgr-automatic-deployment-rules-patch-tuesday-rings.html https://www.oeltayeb.com/articles/configmgr-automatic-deployment-rules-patch-tuesday-rings.html Configuration Manager (SCCM) Fri, 04 Sep 2026 08:00:00 +0000 Build one Patch Tuesday automatic deployment rule with pilot, early and broad deployments, an offset schedule and maintenance windows, then confirm each run in RuleEngine.log. https://www.oeltayeb.com/articles/entra-app-registrations-expiring-secrets-overprivileged-apps.html https://www.oeltayeb.com/articles/entra-app-registrations-expiring-secrets-overprivileged-apps.html Microsoft Entra ID Fri, 04 Sep 2026 08:00:00 +0000 Find expiring app secrets and certificates with Graph PowerShell, lock down user consent, enable the admin consent workflow and track down over-privileged service principals. https://www.oeltayeb.com/articles/exchange-server-dag-copy-queue-replay-queue-length-high.html https://www.oeltayeb.com/articles/exchange-server-dag-copy-queue-replay-queue-length-high.html Exchange Server (on-premises & hybrid) Fri, 04 Sep 2026 08:00:00 +0000 Passive DAG copies falling behind? Learn what the copy and replay queues measure, find out whether the network, storage or a lagged copy is responsible, and watch the queues drain. https://www.oeltayeb.com/articles/exchange-server-offline-address-book-0x8004010f-not-downloading.html https://www.oeltayeb.com/articles/exchange-server-offline-address-book-0x8004010f-not-downloading.html Exchange Server (on-premises & hybrid) Thu, 03 Sep 2026 08:00:00 +0000 Outlook can't download the offline address book from Exchange Server? Check the OAB assignment, web distribution, generation mailbox and OAB URL, then force a clean download. https://www.oeltayeb.com/articles/exchange-online-ews-retirement-ewsenabled-allowlist-october-2026.html https://www.oeltayeb.com/articles/exchange-online-ews-retirement-ewsenabled-allowlist-october-2026.html Exchange Online Wed, 02 Sep 2026 08:00:00 +0000 Exchange Web Services is being disabled in Exchange Online from October 2026. What changes, how EwsEnabled and EwsAllowedAppIDs work, how to find what still uses EWS and how to buy time safely. https://www.oeltayeb.com/articles/exchange-hybrid-cross-premises-permissions-delegation.html https://www.oeltayeb.com/articles/exchange-hybrid-cross-premises-permissions-delegation.html Exchange Server (on-premises & hybrid) Wed, 02 Sep 2026 08:00:00 +0000 Which mailbox permissions work between Exchange Server and Exchange Online, how to make objects ACLable, and how to grant Full Access, Send on Behalf and Send As correctly. https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html https://www.oeltayeb.com/articles/intune-android-enrollment-error-codes-quick-reference.html Microsoft Intune Tue, 01 Sep 2026 08:00:00 +0000 Look up an Android error in Intune: DeviceCapReached, Company Portal Temporarily Unavailable, work profile and corporate enrollment blocks, Play Integrity and other compliance failures. https://www.oeltayeb.com/articles/autopilot-co-management-configmgr-client-install-esp.html https://www.oeltayeb.com/articles/autopilot-co-management-configmgr-client-install-esp.html Configuration Manager (SCCM) Fri, 28 Aug 2026 08:00:00 +0000 Use Intune's co-management settings policy to install the Configuration Manager client from the CMG during Autopilot, keep the ESP within its timeout and check each stage. https://www.oeltayeb.com/articles/release-quarantined-email-defender-office-365.html https://www.oeltayeb.com/articles/release-quarantined-email-defender-office-365.html Microsoft Defender Thu, 27 Aug 2026 08:00:00 +0000 Find the message, read why it was quarantined, release it, and report it through Submissions so a scoped, expiring allow entry replaces risky mail flow rule bypasses. https://www.oeltayeb.com/articles/autopilot-error-0x80180014-reenrollment.html https://www.oeltayeb.com/articles/autopilot-error-0x80180014-reenrollment.html Microsoft Intune Tue, 25 Aug 2026 08:00:00 +0000 A reused Autopilot device fails MDM enrollment with 0x80180014. Why it happens, and the documented fixes: unblock or remove the stale Intune record and check enrollment restrictions. https://www.oeltayeb.com/articles/ndr-550-5-4-1-recipient-address-rejected-access-denied.html https://www.oeltayeb.com/articles/ndr-550-5-4-1-recipient-address-rejected-access-denied.html Exchange Online Tue, 25 Aug 2026 08:00:00 +0000 Why Exchange Online rejects mail with 550 5.4.1 at the perimeter, how Directory-Based Edge Blocking and the accepted domain type cause it, and how to fix each common cause. https://www.oeltayeb.com/articles/defender-office-365-attack-simulation-training-campaign.html https://www.oeltayeb.com/articles/defender-office-365-attack-simulation-training-campaign.html Microsoft Defender Mon, 24 Aug 2026 08:00:00 +0000 Licences and roles, techniques, payloads, targeting, training and launch settings for a Microsoft phishing simulation, how to read the results, and where advanced delivery fits. https://www.oeltayeb.com/articles/exchange-server-certificates-san-auth-certificate-renewal.html https://www.oeltayeb.com/articles/exchange-server-certificates-san-auth-certificate-renewal.html Exchange Server (on-premises & hybrid) Mon, 24 Aug 2026 08:00:00 +0000 Renew the public SAN certificate on every Exchange server and rotate the Auth certificate before it expires, with the commands, the checks and the hybrid follow-up. https://www.oeltayeb.com/articles/intune-device-not-checking-in-sync-troubleshooting.html https://www.oeltayeb.com/articles/intune-device-not-checking-in-sync-troubleshooting.html Microsoft Intune Sun, 23 Aug 2026 08:00:00 +0000 A Windows device shows a stale last check-in in Intune and policies stop arriving. How check-in works, what to inspect on the device (service, tasks, certificate, network) and when to re-enroll. https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html https://www.oeltayeb.com/articles/ios-apps-not-installing-vpp-tokens-intune.html Microsoft Intune Sun, 23 Aug 2026 08:00:00 +0000 Apple Business Manager apps assigned in Intune stay pending or fail on iPhones and iPads. How location (VPP) tokens and licences work, what the 0x87D13B error codes mean, and what to check in order. https://www.oeltayeb.com/articles/intune-device-actions-wipe-retire-fresh-start-errors.html https://www.oeltayeb.com/articles/intune-device-actions-wipe-retire-fresh-start-errors.html Microsoft Intune Sun, 23 Aug 2026 08:00:00 +0000 Pick the right Intune remove-data action: what wipe, retire, Fresh Start and Autopilot Reset remove and keep, what they need to run, and why actions stay pending or fail. https://www.oeltayeb.com/articles/web-content-filtering-network-protection-defender-intune.html https://www.oeltayeb.com/articles/web-content-filtering-network-protection-defender-intune.html Microsoft Defender Sat, 22 Aug 2026 08:00:00 +0000 Enable network protection from Intune, turn on web content filtering, build category policies scoped to device groups, add allow indicators, and read blocks in reports, Event Viewer and advanced hunting. https://www.oeltayeb.com/articles/entra-connect-sync-upgrade-versions-auto-upgrade.html https://www.oeltayeb.com/articles/entra-connect-sync-upgrade-versions-auto-upgrade.html Microsoft Entra ID Sat, 22 Aug 2026 08:00:00 +0000 How Entra Connect Sync builds retire, the April 2027 application-based authentication deadline, what auto-upgrade won't do, and how to upgrade and verify safely. https://www.oeltayeb.com/articles/preset-security-policies-standard-strict-defender-office-365.html https://www.oeltayeb.com/articles/preset-security-policies-standard-strict-defender-office-365.html Microsoft Defender Thu, 20 Aug 2026 08:00:00 +0000 What Built-in protection, Standard and Strict presets enforce, how they outrank custom threat policies, what you still have to configure for impersonation protection, and how to verify which policy handled a message. https://www.oeltayeb.com/articles/defender-for-endpoint-live-response-collect-evidence.html https://www.oeltayeb.com/articles/defender-for-endpoint-live-response-collect-evidence.html Microsoft Defender Tue, 18 Aug 2026 08:00:00 +0000 Set up Defender for Endpoint live response with guardrails: advanced features, unified RBAC roles, a signed script library, evidence collection and the session command log. https://www.oeltayeb.com/articles/exchange-server-services-disabled-not-starting-after-update.html https://www.oeltayeb.com/articles/exchange-server-services-disabled-not-starting-after-update.html Exchange Server (on-premises & hybrid) Tue, 18 Aug 2026 08:00:00 +0000 A failed or interrupted Exchange CU or SU can leave services Disabled. Restore the original startup types, start the services and finish the update properly. https://www.oeltayeb.com/articles/intune-teamviewer-connector-remote-assistance.html https://www.oeltayeb.com/articles/intune-teamviewer-connector-remote-assistance.html Microsoft Intune Tue, 18 Aug 2026 08:00:00 +0000 Set up Intune's new TeamViewer connector, delegate sessions with RBAC, prepare TeamViewer (client, Device Sync, SSO), fix common launch problems and compare it with Remote Help. https://www.oeltayeb.com/articles/exchange-server-451-4-4-0-dns-query-failed-retry-queue.html https://www.oeltayeb.com/articles/exchange-server-451-4-4-0-dns-query-failed-retry-queue.html Exchange Server (on-premises & hybrid) Mon, 17 Aug 2026 08:00:00 +0000 Queues stuck in Retry with 451 4.4.0 DNS query failed? Find the DNS servers transport really uses, test lookups from the Exchange server, and fix the resolver or connector. https://www.oeltayeb.com/articles/entra-access-reviews-entitlement-management-basics.html https://www.oeltayeb.com/articles/entra-access-reviews-entitlement-management-basics.html Microsoft Entra ID Sun, 16 Aug 2026 08:00:00 +0000 How access reviews and entitlement management fit together in Microsoft Entra ID Governance: licensing, creating reviews, catalogs and access packages, and a starter plan you can run this quarter. https://www.oeltayeb.com/articles/spf-dkim-dmarc-microsoft-365-custom-domain.html https://www.oeltayeb.com/articles/spf-dkim-dmarc-microsoft-365-custom-domain.html Exchange Online Fri, 14 Aug 2026 08:00:00 +0000 Publish one correct SPF record, turn on DKIM signing in the Defender portal, then move DMARC from p=none to p=reject without blocking your own legitimate mail. https://www.oeltayeb.com/articles/training-path-sc-300-identity-access-administrator.html https://www.oeltayeb.com/articles/training-path-sc-300-identity-access-administrator.html Microsoft Entra ID Thu, 13 Aug 2026 08:00:00 +0000 A six-stage study plan for exam SC-300, mapped to the official Microsoft Learn learning paths, with hands-on labs for Conditional Access, authentication methods, PIM, access reviews, apps and Entra Connect. https://www.oeltayeb.com/articles/exchange-server-event-ids-quick-reference.html https://www.oeltayeb.com/articles/exchange-server-event-ids-quick-reference.html Exchange Server (on-premises & hybrid) Thu, 13 Aug 2026 08:00:00 +0000 Look up an Exchange Server event by ID and source: what 15004, 2142, 474, 1135, 4999 and 38 more events mean on Exchange SE and 2019, the usual cause and the first check. https://www.oeltayeb.com/articles/defender-for-cloud-apps-shadow-it-discovery-block-apps.html https://www.oeltayeb.com/articles/defender-for-cloud-apps-shadow-it-discovery-block-apps.html Microsoft Defender Wed, 12 Aug 2026 08:00:00 +0000 Use Defender for Endpoint as your Cloud Discovery source, judge apps by risk, then warn on Monitored apps or block Unsanctioned ones on devices through network protection. https://www.oeltayeb.com/articles/safe-links-safe-attachments-blocked-link-troubleshooting.html https://www.oeltayeb.com/articles/safe-links-safe-attachments-blocked-link-troubleshooting.html Microsoft Defender Tue, 11 Aug 2026 08:00:00 +0000 How Safe Links rewriting and time-of-click checks work, what the Safe Attachments actions do, how to find out why a click was blocked, and how to allow a legitimate URL without weakening protection. https://www.oeltayeb.com/articles/entra-connect-sync-errors-duplicate-attribute-invalidsoftmatch.html https://www.oeltayeb.com/articles/entra-connect-sync-errors-duplicate-attribute-invalidsoftmatch.html Microsoft Entra ID Mon, 10 Aug 2026 08:00:00 +0000 How to read Entra Connect export errors such as AttributeValueMustBeUnique, InvalidSoftMatch and LargeObject, fix matching problems with ms-DS-ConsistencyGuid, and find objects that filtering keeps out of Entra ID. https://www.oeltayeb.com/articles/exchange-server-migrate-2016-to-subscription-edition-coexistence.html https://www.oeltayeb.com/articles/exchange-server-migrate-2016-to-subscription-edition-coexistence.html Exchange Server (on-premises & hybrid) Sat, 08 Aug 2026 08:00:00 +0000 Exchange 2016 can't be upgraded in place to SE. The side-by-side route step by step: prepare AD, add SE servers, move namespaces, mail flow and mailboxes, then remove 2016. https://www.oeltayeb.com/articles/configmgr-application-deployment-failures-appenforce-detection.html https://www.oeltayeb.com/articles/configmgr-application-deployment-failures-appenforce-detection.html Configuration Manager (SCCM) Fri, 07 Aug 2026 08:00:00 +0000 Follow a failing Configuration Manager app through the client logs - evaluation, content, install and detection - and fix stuck installs, timeouts and 0x87D00324. https://www.oeltayeb.com/articles/app-protection-policy-not-applying-outlook-mobile.html https://www.oeltayeb.com/articles/app-protection-policy-not-applying-outlook-mobile.html Microsoft Intune Wed, 05 Aug 2026 08:00:00 +0000 Outlook on iOS or Android ignoring your Intune app protection policy? Check targeting, licensing, the signed-in account, broker apps, check-in timing, reports and Edge diagnostics. https://www.oeltayeb.com/articles/intune-endpoint-privilege-management-elevation-rules.html https://www.oeltayeb.com/articles/intune-endpoint-privilege-management-elevation-rules.html Microsoft Intune Wed, 05 Aug 2026 08:00:00 +0000 Deploy Intune Endpoint Privilege Management: the elevation settings policy, elevation rules by hash or certificate, the user experience, the elevation reports, and how to troubleshoot rules that don't match. https://www.oeltayeb.com/articles/intune-ios-configuration-profile-errors-supervised.html https://www.oeltayeb.com/articles/intune-ios-configuration-profile-errors-supervised.html Microsoft Intune Wed, 05 Aug 2026 08:00:00 +0000 Why iPhone and iPad profiles show Error, Conflict, Pending or Not applicable in Intune, why supervised-only restrictions don't take effect, and how to check the device and prove the fix. https://www.oeltayeb.com/articles/conditional-access-what-if-report-only.html https://www.oeltayeb.com/articles/conditional-access-what-if-report-only.html Microsoft Entra ID Mon, 03 Aug 2026 08:00:00 +0000 Use report-only mode, the sign-in logs, the insights workbook and the What If tool to prove a Conditional Access policy behaves as expected before you turn it on. https://www.oeltayeb.com/articles/co-management-workloads-switch-to-intune.html https://www.oeltayeb.com/articles/co-management-workloads-switch-to-intune.html Configuration Manager (SCCM) Tue, 28 Jul 2026 08:00:00 +0000 A staged way to switch co-management workloads to Intune: what each slider really controls, pilot collections, the client logs to watch, rollback caveats and a sensible order. https://www.oeltayeb.com/articles/configmgr-enhanced-http-https-pki-client-communication.html https://www.oeltayeb.com/articles/configmgr-enhanced-http-https-pki-client-communication.html Configuration Manager (SCCM) Tue, 28 Jul 2026 08:00:00 +0000 What enhanced HTTP and PKI-based HTTPS each protect in Configuration Manager, why HTTP-only sites are deprecated, and how to check, switch and verify without stranding clients. https://www.oeltayeb.com/articles/intune-win32-app-download-install-errors-0x87d30065.html https://www.oeltayeb.com/articles/intune-win32-app-download-install-errors-0x87d30065.html Microsoft Intune Mon, 27 Jul 2026 08:00:00 +0000 Win32 app stuck downloading or failing with 0x87D30065, 1603 or 1618? Find the failing stage in AppWorkload.log, fix content delivery and installer exit codes, then verify. https://www.oeltayeb.com/articles/exchange-server-security-updates-install-troubleshooting.html https://www.oeltayeb.com/articles/exchange-server-security-updates-install-troubleshooting.html Exchange Server (on-premises & hybrid) Sun, 26 Jul 2026 08:00:00 +0000 Why Exchange Server security updates fail or break OWA and ECP, the documented fixes for the common errors, and the checks that prove an update really installed on every server. https://www.oeltayeb.com/articles/exchange-server-auth-certificate-expired-owa-ecp-hybrid-symptoms.html https://www.oeltayeb.com/articles/exchange-server-auth-certificate-expired-owa-ecp-hybrid-symptoms.html Exchange Server (on-premises & hybrid) Sat, 25 Jul 2026 08:00:00 +0000 OWA and the EAC loop at sign-in, Event ID 1003 appears or hybrid OAuth fails? Prove the Exchange Auth certificate is expired or missing, then replace it safely. https://www.oeltayeb.com/articles/windows-11-feature-update-not-offered-intune.html https://www.oeltayeb.com/articles/windows-11-feature-update-not-offered-intune.html Microsoft Intune Wed, 22 Jul 2026 08:00:00 +0000 Feature update policy assigned but nothing offered? Check licensing, join type, telemetry, update ring deferrals, WSUS and Group Policy, hardware readiness and safeguard holds. https://www.oeltayeb.com/articles/microsoft-mvp-award-contributions-explained.html https://www.oeltayeb.com/articles/microsoft-mvp-award-contributions-explained.html Community & career Wed, 22 Jul 2026 08:00:00 +0000 What the Microsoft MVP Award recognises, how nominations and reviews work, which contributions count (and which don't), and a simple log template to track your community work. https://www.oeltayeb.com/articles/exchange-server-event-2937-homemta-deleted-objects.html https://www.oeltayeb.com/articles/exchange-server-event-2937-homemta-deleted-objects.html Exchange Server (on-premises & hybrid) Wed, 22 Jul 2026 08:00:00 +0000 Event 2937 means an Exchange object still points into AD's Deleted Objects container. Find every affected object, then fix HomeMTA, RecipientContainer and connector links safely. https://www.oeltayeb.com/articles/exchange-server-third-party-dlp-encryption-mta-routing-forcepoint-trellix.html https://www.oeltayeb.com/articles/exchange-server-third-party-dlp-encryption-mta-routing-forcepoint-trellix.html Exchange Server (on-premises & hybrid) Tue, 21 Jul 2026 08:00:00 +0000 A vendor-neutral design for sending Exchange Server mail through DLP and encryption gateways: forward vs return patterns, connectors, verdict headers, fail-open choices and tests. https://www.oeltayeb.com/articles/training-path-md-102-intune-endpoint-administrator.html https://www.oeltayeb.com/articles/training-path-md-102-intune-endpoint-administrator.html Microsoft Intune Mon, 20 Jul 2026 08:00:00 +0000 A five-stage plan for Exam MD-102 and the Endpoint Administrator Associate certification: the current skills-measured domains, the Microsoft Learn paths to follow, lab exercises and exam-day tips. https://www.oeltayeb.com/articles/distribution-groups-vs-microsoft-365-groups-vs-shared-mailboxes.html https://www.oeltayeb.com/articles/distribution-groups-vs-microsoft-365-groups-vs-shared-mailboxes.html Exchange Online Sun, 19 Jul 2026 08:00:00 +0000 A capability-by-capability comparison of distribution groups, dynamic groups, Microsoft 365 Groups and shared mailboxes, when to choose each, how to upgrade a DL and the PowerShell to answer the usual questions. https://www.oeltayeb.com/articles/conditional-access-token-protection-session-binding.html https://www.oeltayeb.com/articles/conditional-access-token-protection-session-binding.html Microsoft Entra ID Fri, 17 Jul 2026 08:00:00 +0000 What Conditional Access token protection binds, which platforms, apps and licences it needs, and how to roll it out in report-only mode using the sign-in log status codes. https://www.oeltayeb.com/articles/enrollment-status-page-timeout-troubleshooting.html https://www.oeltayeb.com/articles/enrollment-status-page-timeout-troubleshooting.html Microsoft Intune Thu, 16 Jul 2026 08:00:00 +0000 Find the app or policy holding up the Enrollment Status Page, collect the right logs from OOBE, and fix the profile settings behind most Autopilot ESP timeouts. https://www.oeltayeb.com/articles/windows-autopilot-known-issues-2026-roundup.html https://www.oeltayeb.com/articles/windows-autopilot-known-issues-2026-roundup.html Microsoft Intune Thu, 16 Jul 2026 08:00:00 +0000 A walkthrough of the Windows Autopilot known issues page as of October 2026: open and fixed items, deeper guidance on the January 2026 entries, and how to subscribe so new issues reach you first. https://www.oeltayeb.com/articles/exchange-server-ems-winrm-connecting-to-remote-server-failed.html https://www.oeltayeb.com/articles/exchange-server-ems-winrm-connecting-to-remote-server-failed.html Exchange Server (on-premises & hybrid) Thu, 16 Jul 2026 08:00:00 +0000 EMS fails with a WinRM error? Match the exact message to its cause - kerbauth and WSMan modules, Remote PowerShell access, the port 80 binding, Require SSL or a proxy - and fix it safely. https://www.oeltayeb.com/articles/exchange-server-outlook-keeps-prompting-for-password.html https://www.oeltayeb.com/articles/exchange-server-outlook-keeps-prompting-for-password.html Exchange Server (on-premises & hybrid) Thu, 16 Jul 2026 08:00:00 +0000 Outlook keeps asking for credentials against Exchange Server? Work through cached credentials, Autodiscover, virtual directory authentication, Kerberos, Extended Protection and modern auth. https://www.oeltayeb.com/articles/exchange-server-jet-error-1018-page-checksum-corruption.html https://www.oeltayeb.com/articles/exchange-server-jet-error-1018-page-checksum-corruption.html Exchange Server (on-premises & hybrid) Wed, 15 Jul 2026 08:00:00 +0000 ESE event 474 and error -1018 mean a database page failed its checksum. Why storage is the usual suspect, how DAG page patching helps, and when to reseed, restore or repair. https://www.oeltayeb.com/articles/configmgr-management-point-troubleshooting-mpcontrol-log.html https://www.oeltayeb.com/articles/configmgr-management-point-troubleshooting-mpcontrol-log.html Configuration Manager (SCCM) Tue, 14 Jul 2026 08:00:00 +0000 Diagnose an unhealthy Configuration Manager management point with mpcontrol.log, status message 5436, mplist and mpcert tests, IIS and SQL checks, and the client-side logs. https://www.oeltayeb.com/articles/exchange-server-fortimail-gateway-integration-errors.html https://www.oeltayeb.com/articles/exchange-server-fortimail-gateway-integration-errors.html Exchange Server (on-premises & hybrid) Tue, 14 Jul 2026 08:00:00 +0000 Fix the errors you hit when FortiMail filters mail for Exchange Server: 550 5.7.1 Relay access denied, 451 Try again later, failed recipient verification, plus connectors, TLS and SPF. https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html https://www.oeltayeb.com/articles/intune-configuration-profile-error-65000-remediation-failed.html Microsoft Intune Tue, 14 Jul 2026 08:00:00 +0000 Windows profile showing error 65000 or Remediation failed (0x87D1FDE8)? Decode the codes, read event 404 on the device, check edition, build and OMA-URI data, and fix the setting. https://www.oeltayeb.com/articles/microsoft-cloud-pki-intune-certificates-wifi-vpn.html https://www.oeltayeb.com/articles/microsoft-cloud-pki-intune-certificates-wifi-vpn.html Microsoft Intune Sun, 12 Jul 2026 08:00:00 +0000 Build a two-tier Microsoft Cloud PKI hierarchy in Intune, deploy the trusted certificate and SCEP profiles, bind the certificate to Wi-Fi or VPN profiles, monitor and revoke, and fix the common SCEP errors. https://www.oeltayeb.com/articles/exchange-server-modern-authentication-adfs-onprem-only.html https://www.oeltayeb.com/articles/exchange-server-modern-authentication-adfs-onprem-only.html Exchange Server (on-premises & hybrid) Sun, 12 Jul 2026 08:00:00 +0000 Pure on-premises Exchange can accept OAuth tokens from AD FS instead of passwords. Prerequisites, the AD FS application group, auth policies, Exchange and Outlook settings, and testing. https://www.oeltayeb.com/articles/exchange-server-veeam-backup-application-aware-errors.html https://www.oeltayeb.com/articles/exchange-server-veeam-backup-application-aware-errors.html Exchange Server (on-premises & hybrid) Sat, 11 Jul 2026 08:00:00 +0000 Veeam jobs failing on the Microsoft Exchange Writer, or logs not truncating after a green job? Check application-aware settings, guest credentials, freeze timeouts and DAG job design. https://www.oeltayeb.com/articles/exchange-server-known-issues-2026-roundup.html https://www.oeltayeb.com/articles/exchange-server-known-issues-2026-roundup.html Exchange Server (on-premises & hybrid) Fri, 10 Jul 2026 08:00:00 +0000 The known issues Microsoft lists for the latest Exchange Server SE security update, the hybrid issues it fixed, how to confirm each one on your servers and where to watch for changes. https://www.oeltayeb.com/articles/dynamic-device-groups-intune-rules.html https://www.oeltayeb.com/articles/dynamic-device-groups-intune-rules.html Microsoft Entra ID Thu, 09 Jul 2026 08:00:00 +0000 Working dynamic device rules for Autopilot, group tags, OS version, ownership and enrollment profiles, plus licensing, processing time, rule validation and when filters fit better. https://www.oeltayeb.com/articles/exchange-server-load-balancer-f5-kemp-netscaler-health-checks.html https://www.oeltayeb.com/articles/exchange-server-load-balancer-f5-kemp-netscaler-health-checks.html Exchange Server (on-premises & hybrid) Thu, 09 Jul 2026 08:00:00 +0000 Set up any load balancer for Exchange Server SE and 2019: per-protocol healthcheck.htm monitors, SSL bridging with Extended Protection, no affinity, SMTP and Kerberos, and bad-VIP symptoms. https://www.oeltayeb.com/articles/exchange-server-rms-connector-irm-test-irmconfiguration-errors.html https://www.oeltayeb.com/articles/exchange-server-rms-connector-irm-test-irmconfiguration-errors.html Exchange Server (on-premises & hybrid) Thu, 09 Jul 2026 08:00:00 +0000 Test-IRMConfiguration failing on Exchange Server with the Microsoft RMS connector? Find the failing step, then fix authorization, registry settings, IRM switches or the DRM cache. https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html https://www.oeltayeb.com/articles/bitlocker-silent-encryption-not-starting.html Microsoft Intune Wed, 08 Jul 2026 08:00:00 +0000 Silent BitLocker not starting? Check TPM, UEFI, Secure Boot and WinRE, the required policy settings, startup authentication conflicts and recovery key backup to Microsoft Entra ID. https://www.oeltayeb.com/articles/entra-device-registration-dual-state-pending-devices-troubleshooting.html https://www.oeltayeb.com/articles/entra-device-registration-dual-state-pending-devices-troubleshooting.html Microsoft Entra ID Wed, 08 Jul 2026 08:00:00 +0000 Why a hybrid joined PC also shows as Entra registered, what Pending really means, and how to clean up duplicates with dsregcmd, BlockAADWorkplaceJoin and Graph PowerShell. https://www.oeltayeb.com/articles/purview-dlp-policy-simulation-to-enforcement.html https://www.oeltayeb.com/articles/purview-dlp-policy-simulation-to-enforcement.html Microsoft 365 Wed, 08 Jul 2026 08:00:00 +0000 Take a Purview DLP policy from template to enforcement: simulate with policy tips, tune out false positives, onboard devices for endpoint DLP, then switch it on in stages. https://www.oeltayeb.com/articles/macos-devices-unenrolled-mdm-certificate-renewal-intune.html https://www.oeltayeb.com/articles/macos-devices-unenrolled-mdm-certificate-renewal-intune.html Microsoft Intune Mon, 06 Jul 2026 08:00:00 +0000 Why some Macs dropped out of Intune during MDM identity certificate renewal, Apple's fix in macOS 26.4, how to find and re-enroll affected devices, and how this differs from an expired Apple MDM push certificate. https://www.oeltayeb.com/articles/when-intune-is-the-problem-service-health-known-issues-checklist.html https://www.oeltayeb.com/articles/when-intune-is-the-problem-service-health-known-issues-checklist.html Microsoft Intune Mon, 06 Jul 2026 08:00:00 +0000 A 10-minute checklist to rule out a service incident, a documented known issue or a gradual service release before you troubleshoot your tenant, plus what to collect for a support case and how to subscribe. https://www.oeltayeb.com/articles/default-device-compliance-policy-noncompliant.html https://www.oeltayeb.com/articles/default-device-compliance-policy-noncompliant.html Microsoft Intune Sun, 05 Jul 2026 08:00:00 +0000 Why devices fail the built-in Is active, Enrolled user exists and Has a compliance policy assigned checks in Intune, and how to clear each one before Conditional Access blocks users. https://www.oeltayeb.com/articles/intune-noncompliant-machine-risk-score-defender-for-endpoint.html https://www.oeltayeb.com/articles/intune-noncompliant-machine-risk-score-defender-for-endpoint.html Microsoft Intune Sat, 04 Jul 2026 08:00:00 +0000 Why a Windows device fails "Require the device to be at or under the machine risk score", and how to check the connector, onboarding, device identity and active alerts in the right order. https://www.oeltayeb.com/articles/exchange-server-veeam-explorer-exchange-restore-errors.html https://www.oeltayeb.com/articles/exchange-server-veeam-explorer-exchange-restore-errors.html Exchange Server (on-premises & hybrid) Sat, 04 Jul 2026 08:00:00 +0000 Veeam Explorer can't open an Exchange database or restore items? Point it at the right ese.dll, replay logs on a Dirty Shutdown copy, grant restore rights, or fall back to a recovery database. https://www.oeltayeb.com/articles/entra-sign-in-logs-reading-like-an-engineer.html https://www.oeltayeb.com/articles/entra-sign-in-logs-reading-like-an-engineer.html Microsoft Entra ID Fri, 03 Jul 2026 08:00:00 +0000 The four sign-in log types, the fields that matter, how to trace one failed sign-in end to end, KQL against the SigninLogs table, export and retention by licence, and the misreads that waste hours. https://www.oeltayeb.com/articles/exchange-server-database-whitespace-new-database-vs-offline-defrag.html https://www.oeltayeb.com/articles/exchange-server-database-whitespace-new-database-vs-offline-defrag.html Exchange Server (on-premises & hybrid) Fri, 03 Jul 2026 08:00:00 +0000 Why Exchange databases never shrink, how to read AvailableNewMailboxSpace, and why moving mailboxes to a new database beats eseutil /d offline defragmentation. https://www.oeltayeb.com/articles/hybrid-configuration-wizard-errors-hcw-log.html https://www.oeltayeb.com/articles/hybrid-configuration-wizard-errors-hcw-log.html Exchange Server (on-premises & hybrid) Fri, 03 Jul 2026 08:00:00 +0000 Where the HCW log lives, how to find the line that really failed, and fixes for the usual causes: TLS, stale servers, Autodiscover, certificates, OAuth (HCW8064) and MRS. https://www.oeltayeb.com/articles/entra-id-protection-risk-policies-false-positives.html https://www.oeltayeb.com/articles/entra-id-protection-risk-policies-false-positives.html Microsoft Entra ID Thu, 02 Jul 2026 08:00:00 +0000 User risk vs sign-in risk, the detections behind them, risk-based Conditional Access that lets users fix their own risk, and how to investigate, dismiss or confirm the false positives. https://www.oeltayeb.com/articles/intune-policy-conflicts-mdm-diagnostics.html https://www.oeltayeb.com/articles/intune-policy-conflicts-mdm-diagnostics.html Microsoft Intune Wed, 01 Jul 2026 08:00:00 +0000 Settings stuck on Conflict in Intune? Find the competing policies, confirm what the device received with the MDM diagnostic report and event log, and rule out Group Policy. https://www.oeltayeb.com/articles/android-enterprise-dedicated-devices-managed-home-screen.html https://www.oeltayeb.com/articles/android-enterprise-dedicated-devices-managed-home-screen.html Microsoft Intune Wed, 01 Jul 2026 08:00:00 +0000 Build a locked-down Android kiosk with Intune: dedicated device enrollment tokens, multi-app kiosk mode with Managed Home Screen, Entra shared device mode sign-in, and fixes for missing apps. https://www.oeltayeb.com/articles/configmgr-client-health-ccmeval-inactive-clients.html https://www.oeltayeb.com/articles/configmgr-client-health-ccmeval-inactive-clients.html Configuration Manager (SCCM) Sun, 28 Jun 2026 08:00:00 +0000 Tell inactive clients from unhealthy ones, read CcmEval results on the device, repair WMI and broken clients safely, and clean up stale records with the right maintenance tasks. https://www.oeltayeb.com/articles/exchange-server-ese-jet-database-error-codes-quick-reference.html https://www.oeltayeb.com/articles/exchange-server-ese-jet-database-error-codes-quick-reference.html Exchange Server (on-premises & hybrid) Sun, 28 Jun 2026 08:00:00 +0000 Look up an ESE/JET error from eseutil, a failed mount or the event log: what -1018, -528, -550 and 36 more codes mean in Exchange Server, the usual cause and the first check. https://www.oeltayeb.com/articles/microsoft-tunnel-gateway-setup-troubleshooting.html https://www.oeltayeb.com/articles/microsoft-tunnel-gateway-setup-troubleshooting.html Microsoft Intune Sun, 28 Jun 2026 08:00:00 +0000 Fix Microsoft Tunnel Gateway problems: stalled installs, Unhealthy health checks, TLS certificate issues, /dev/net/tun and Podman log errors, and devices that won't connect. https://www.oeltayeb.com/articles/intune-connector-active-directory-gmsa-selogonasservice-error.html https://www.oeltayeb.com/articles/intune-connector-active-directory-gmsa-selogonasservice-error.html Microsoft Intune Sat, 27 Jun 2026 08:00:00 +0000 Configuring the Intune Connector for AD with your own gMSA can fail on the SeLogonAsServicePrivilege pre-check. The June 2026 known issue, the SkipByoMsaPrivilegeCheck fix and how to verify it. https://www.oeltayeb.com/articles/exchange-hybrid-mail-flow-connectors-tls-centralized-transport.html https://www.oeltayeb.com/articles/exchange-hybrid-mail-flow-connectors-tls-centralized-transport.html Exchange Server (on-premises & hybrid) Fri, 26 Jun 2026 08:00:00 +0000 How the HCW connectors, certificate name matching and header trust keep cross-premises mail internal, when centralized mail transport is worth it, and how to prove it all works. https://www.oeltayeb.com/articles/configmgr-cmpivot-run-scripts-real-time.html https://www.oeltayeb.com/articles/configmgr-cmpivot-run-scripts-real-time.html Configuration Manager (SCCM) Wed, 24 Jun 2026 08:00:00 +0000 Set up CMPivot and Run Scripts permissions, query online clients in real time, take a PowerShell fix through approval, then confirm it in Script Status and Scripts.log. https://www.oeltayeb.com/articles/exchange-server-cisco-secure-email-ironport-integration.html https://www.oeltayeb.com/articles/exchange-server-cisco-secure-email-ironport-integration.html Exchange Server (on-premises & hybrid) Wed, 24 Jun 2026 08:00:00 +0000 Cisco Secure Email Gateway (formerly IronPort) in front of Exchange: map listeners, HAT and RAT to Exchange connectors, fix relay, rate-limit and TLS errors, and trace mail in both logs. https://www.oeltayeb.com/articles/machine-identity-isolation-domain-trust-sign-in-failures-september-2026.html https://www.oeltayeb.com/articles/machine-identity-isolation-domain-trust-sign-in-failures-september-2026.html Microsoft Intune Tue, 23 Jun 2026 08:00:00 +0000 After the September 2026 Windows 11 updates some domain-joined devices lose their secure channel because Machine Identity Isolation is now honoured. How to find the policy, roll it back and verify. https://www.oeltayeb.com/articles/exchange-server-edge-transport-edgesync-subscription-errors.html https://www.oeltayeb.com/articles/exchange-server-edge-transport-edgesync-subscription-errors.html Exchange Server (on-premises & hybrid) Mon, 22 Jun 2026 08:00:00 +0000 Edge Transport server not synchronizing? Check DNS, port 50636, services and certificates, re-create the Edge Subscription the supported way and prove it with Test-EdgeSynchronization. https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html https://www.oeltayeb.com/articles/intune-microsoft-store-winget-app-install-errors.html Microsoft Intune Mon, 22 Jun 2026 08:00:00 +0000 Microsoft Store app (new) installs failing? Decode the WinGet 0x8A15 codes, check Store and App Installer policies, TLS inspection and install context, then test on the device. https://www.oeltayeb.com/articles/defender-security-settings-management-non-intune-devices.html https://www.oeltayeb.com/articles/defender-security-settings-management-non-intune-devices.html Microsoft Defender Sun, 21 Jun 2026 08:00:00 +0000 How Defender for Endpoint security settings management pushes Intune endpoint security policies to devices not enrolled in Intune: prerequisites, enforcement scope, synthetic registration and pitfalls. https://www.oeltayeb.com/articles/shared-mailbox-automapping-outlook.html https://www.oeltayeb.com/articles/shared-mailbox-automapping-outlook.html Exchange Online Sat, 20 Jun 2026 08:00:00 +0000 How automapping really works, why group-based Full Access never automaps, how to switch it off per user, and how to keep sent items in the shared mailbox. https://www.oeltayeb.com/articles/configmgr-endpoint-protection-defender-antivirus-policies.html https://www.oeltayeb.com/articles/configmgr-endpoint-protection-defender-antivirus-policies.html Configuration Manager (SCCM) Sat, 20 Jun 2026 08:00:00 +0000 Set up the Endpoint Protection point and client settings, build antimalware policies, choose security intelligence update sources and prove on the device that Defender got the settings. https://www.oeltayeb.com/articles/intune-custom-compliance-policy-json-script.html https://www.oeltayeb.com/articles/intune-custom-compliance-policy-json-script.html Microsoft Intune Fri, 19 Jun 2026 08:00:00 +0000 Extend Intune compliance with your own checks: write a discovery script that returns compressed JSON, define rules in the JSON schema, upload both, and troubleshoot error codes 65007 to 65010. https://www.oeltayeb.com/articles/exchange-server-activesync-devices-not-syncing-quarantine.html https://www.oeltayeb.com/articles/exchange-server-activesync-devices-not-syncing-quarantine.html Exchange Server (on-premises & hybrid) Fri, 19 Jun 2026 08:00:00 +0000 Phones stop syncing or never start. Check the device access state and rules, fix the AD permission problem behind Event ID 1053, and read ActiveSync status codes in the IIS log. https://www.oeltayeb.com/articles/intune-windows-driver-firmware-updates-policies.html https://www.oeltayeb.com/articles/intune-windows-driver-firmware-updates-policies.html Microsoft Intune Thu, 18 Jun 2026 08:00:00 +0000 Set up Windows driver update policies in Intune, choose automatic or manual approval, and fix the settings that leave the driver list empty or stop approved drivers installing. https://www.oeltayeb.com/articles/investigate-compromised-mailbox-exchange-online-inbox-rules-audit.html https://www.oeltayeb.com/articles/investigate-compromised-mailbox-exchange-online-inbox-rules-audit.html Exchange Online Wed, 17 Jun 2026 08:00:00 +0000 Microsoft's response order for a compromised mailbox, cmdlets that find malicious inbox rules and forwarding across every mailbox, what to read in sign-in and audit logs, and how to harden afterwards. https://www.oeltayeb.com/articles/jamf-pro-device-registration-company-portal-jamfaad-errors.html https://www.oeltayeb.com/articles/jamf-pro-device-registration-company-portal-jamfaad-errors.html Microsoft Intune Wed, 17 Jun 2026 08:00:00 +0000 Fix Jamf Device Compliance registration on Macs: Account not onboarded, Device is already enrolled, keychain prompts, duplicate Entra devices and registrations that never turn compliant. https://www.oeltayeb.com/articles/exchange-server-ews-errors-401-503-throttling-apps.html https://www.oeltayeb.com/articles/exchange-server-ews-errors-401-503-throttling-apps.html Exchange Server (on-premises & hybrid) Tue, 16 Jun 2026 08:00:00 +0000 Apps using EWS fail with 401, 503, ErrorServerBusy or ErrorImpersonateUserDenied. Check authentication, server health, throttling policies, impersonation rights and the EWS logs. https://www.oeltayeb.com/articles/exchange-server-event-12014-tls-certificate-connector-fqdn.html https://www.oeltayeb.com/articles/exchange-server-event-12014-tls-certificate-connector-fqdn.html Exchange Server (on-premises & hybrid) Sun, 14 Jun 2026 08:00:00 +0000 Event 12014 means a connector has no usable certificate, so STARTTLS disappears. Line up the FQDN, certificate and TlsCertificateName, then prove TLS works again. https://www.oeltayeb.com/articles/exchange-server-se-windows-server-2025-supported-platforms.html https://www.oeltayeb.com/articles/exchange-server-se-windows-server-2025-supported-platforms.html Exchange Server (on-premises & hybrid) Sun, 14 Jun 2026 08:00:00 +0000 What Exchange Server SE supports: Windows Server 2019-2025, domain controllers, forest levels, .NET, Outlook clients and coexistence rules, plus a plan for moving to Windows Server 2025. https://www.oeltayeb.com/articles/jamf-pro-device-compliance-entra-id-setup.html https://www.oeltayeb.com/articles/jamf-pro-device-compliance-entra-id-setup.html Microsoft Intune Sun, 14 Jun 2026 08:00:00 +0000 Build the Applicable and Compliance smart groups, run the Jamf Pro Device Compliance wizard, add the Intune compliance partner and require compliant Macs without blocking registration. https://www.oeltayeb.com/articles/intune-known-issues-company-portal-apps-remediation-message-2026.html https://www.oeltayeb.com/articles/intune-known-issues-company-portal-apps-remediation-message-2026.html Microsoft Intune Sat, 13 Jun 2026 08:00:00 +0000 Five items Microsoft currently lists as Active on the Intune known issues page, what each looks like, what to tell users, how to work around it, and how to track the page and escalate properly. https://www.oeltayeb.com/articles/intune-graph-api-powershell-errors-403-429.html https://www.oeltayeb.com/articles/intune-graph-api-powershell-errors-403-429.html Microsoft Intune Sat, 13 Jun 2026 08:00:00 +0000 Why Intune scripts on Microsoft Graph fail with 401, 403 Forbidden or 429 Too Many Requests: permission types, admin consent, Intune roles, the 2025 scripts permission change, paging and retries. https://www.oeltayeb.com/articles/exchange-server-email-signature-exclaimer-codetwo-routing.html https://www.oeltayeb.com/articles/exchange-server-email-signature-exclaimer-codetwo-routing.html Exchange Server (on-premises & hybrid) Fri, 12 Jun 2026 08:00:00 +0000 Signatures missing on some messages, added twice or causing loop NDRs? Find which agent, rule or service stamps your Exchange Server mail, fix it and prove it with message tracking. https://www.oeltayeb.com/articles/training-path-exchange-server-administrator.html https://www.oeltayeb.com/articles/training-path-exchange-server-administrator.html Exchange Server (on-premises & hybrid) Thu, 11 Jun 2026 08:00:00 +0000 A 12-week, lab-based study plan for on-premises Exchange Server SE: deployment, mail flow, DAGs, client access, security, servicing and hybrid, with break-fix drills at every stage. https://www.oeltayeb.com/articles/settings-catalog-vs-templates-vs-baselines.html https://www.oeltayeb.com/articles/settings-catalog-vs-templates-vs-baselines.html Microsoft Intune Wed, 10 Jun 2026 08:00:00 +0000 What each Intune policy type is for, how conflicts between them are resolved and reported, a recommended layering for a new tenant, and naming and assignment hygiene with filters. https://www.oeltayeb.com/articles/apple-business-manager-federated-authentication-entra-managed-apple-accounts.html https://www.oeltayeb.com/articles/apple-business-manager-federated-authentication-entra-managed-apple-accounts.html Microsoft Intune Wed, 10 Jun 2026 08:00:00 +0000 Link Apple Business (formerly Apple Business Manager) to Microsoft Entra ID: approve, test and turn on federation, sync users, handle account conflicts and fix sign-in failures. https://www.oeltayeb.com/articles/jamf-pro-macos-intune-integration-migration-device-compliance.html https://www.oeltayeb.com/articles/jamf-pro-macos-intune-integration-migration-device-compliance.html Microsoft Intune Wed, 10 Jun 2026 08:00:00 +0000 Move Macs off Jamf Pro's retired macOS Conditional Access integration: what changes, an order of steps that avoids lockouts, Jamf's migration script, verification and a realistic rollback plan. https://www.oeltayeb.com/articles/self-service-password-reset-password-writeback-troubleshooting.html https://www.oeltayeb.com/articles/self-service-password-reset-password-writeback-troubleshooting.html Microsoft Entra ID Tue, 09 Jun 2026 08:00:00 +0000 SSPR prerequisites, password writeback through Connect Sync or Cloud Sync, the documented SSPR_00xx portal errors, the Windows sign-in screen Reset password link, and the event IDs behind writeback failures. https://www.oeltayeb.com/articles/exchange-hybrid-free-busy-calendar-sharing-not-working.html https://www.oeltayeb.com/articles/exchange-hybrid-free-busy-calendar-sharing-not-working.html Exchange Server (on-premises & hybrid) Mon, 08 Jun 2026 08:00:00 +0000 A methodical way to troubleshoot hybrid free/busy and calendar sharing: direction, Autodiscover, the OAuth trust and dedicated hybrid app, connectors and relationships, with cmdlets for each hop. https://www.oeltayeb.com/articles/exchange-server-management-shell-ad-errors-quick-reference.html https://www.oeltayeb.com/articles/exchange-server-management-shell-ad-errors-quick-reference.html Exchange Server (on-premises & hybrid) Mon, 08 Jun 2026 08:00:00 +0000 Match an Exchange Management Shell or Active Directory error to its cause: object not found, matches multiple entries, proxy address in use, INSUFF_ACCESS_RIGHTS, WinRM failures and more. https://www.oeltayeb.com/articles/hybrid-join-troubleshooting-dsregcmd.html https://www.oeltayeb.com/articles/hybrid-join-troubleshooting-dsregcmd.html Microsoft Entra ID Fri, 05 Jun 2026 08:00:00 +0000 Read dsregcmd /status for hybrid join failures, check the SCP and Entra Connect sync, use the User Device Registration log and clear devices stuck in Pending. https://www.oeltayeb.com/articles/defender-antivirus-policy-not-applying.html https://www.oeltayeb.com/articles/defender-antivirus-policy-not-applying.html Microsoft Defender Fri, 05 Jun 2026 08:00:00 +0000 Intune says the antivirus policy succeeded but the device disagrees. Check the management channel, conflicts, passive mode, tamper protection and exclusion behaviour to find out why. https://www.oeltayeb.com/articles/exchange-server-pop3-imap4-services-connection-errors.html https://www.oeltayeb.com/articles/exchange-server-pop3-imap4-services-connection-errors.html Exchange Server (on-premises & hybrid) Fri, 05 Jun 2026 08:00:00 +0000 POP3 or IMAP4 clients can't connect or sign in? Start the right services, check PopProxy/ImapProxy, LoginType and the certificate, then prove the fix with a test login and protocol logs. https://www.oeltayeb.com/articles/exchange-hybrid-removing-last-exchange-server-management-tools.html https://www.oeltayeb.com/articles/exchange-hybrid-removing-last-exchange-server-management-tools.html Exchange Server (on-premises & hybrid) Thu, 04 Jun 2026 08:00:00 +0000 All mailboxes are in Exchange Online but a server still runs just for recipient management? The supported ways to retire it, what you give up and the exact steps. https://www.oeltayeb.com/articles/exchange-server-barracuda-email-gateway-integration-errors.html https://www.oeltayeb.com/articles/exchange-server-barracuda-email-gateway-integration-errors.html Exchange Server (on-premises & hybrid) Thu, 04 Jun 2026 08:00:00 +0000 Connect Barracuda Email Gateway Defense or the Email Security Gateway to Exchange Server, and use message tracking plus Barracuda's Message Log to tell a Barracuda block from an Exchange fault. https://www.oeltayeb.com/articles/smtp-auth-relay-printers-apps-error-5-7-57.html https://www.oeltayeb.com/articles/smtp-auth-relay-printers-apps-error-5-7-57.html Exchange Online Tue, 02 Jun 2026 08:00:00 +0000 What error 5.7.57 means, how SMTP AUTH client submission, SMTP relay and Direct Send differ, how to fix each cause, and where Basic authentication for SMTP AUTH stands. https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html https://www.oeltayeb.com/articles/intune-apple-enrollment-mdm-error-codes-quick-reference.html Microsoft Intune Mon, 01 Jun 2026 08:00:00 +0000 Look up an Apple enrollment error in Intune: NoEnrollmentPolicy, DeviceCapReached, APNs and ADE token sync errors, Profile Installation Failed and Mac messages, with the first check. https://www.oeltayeb.com/articles/microsoft-365-copilot-readiness-sharepoint-oversharing.html https://www.oeltayeb.com/articles/microsoft-365-copilot-readiness-sharepoint-oversharing.html Microsoft 365 Mon, 01 Jun 2026 08:00:00 +0000 Copilot uses only what people can already open, so oversharing surfaces fast. Find it with data access governance reports, contain it, and fix it with site owners and labels. https://www.oeltayeb.com/articles/defender-for-identity-sensor-installation-health-issues.html https://www.oeltayeb.com/articles/defender-for-identity-sensor-installation-health-issues.html Microsoft Defender Thu, 28 May 2026 08:00:00 +0000 Classic v2.x or new v3.x sensor? Prerequisites, the Directory Service account and gMSA, the Health issues page and the fixes for the sensor health alerts you'll actually see. https://www.oeltayeb.com/articles/configmgr-collections-query-rules-incremental-evaluation.html https://www.oeltayeb.com/articles/configmgr-collections-query-rules-incremental-evaluation.html Configuration Manager (SCCM) Wed, 27 May 2026 08:00:00 +0000 How Configuration Manager evaluates collections, and how to design limiting collections, query rules and update schedules that keep membership fresh without overloading the site. https://www.oeltayeb.com/articles/exchange-server-certificate-name-mismatch-outlook-security-alert.html https://www.oeltayeb.com/articles/exchange-server-certificate-name-mismatch-outlook-security-alert.html Exchange Server (on-premises & hybrid) Wed, 27 May 2026 08:00:00 +0000 Outlook keeps showing a certificate name Security Alert? Find the host name Exchange or DNS hands out, then fix the Autodiscover SCP, virtual directory URLs, split DNS or SAN list. https://www.oeltayeb.com/articles/exchange-server-outlook-connection-error-codes-quick-reference.html https://www.oeltayeb.com/articles/exchange-server-outlook-connection-error-codes-quick-reference.html Exchange Server (on-premises & hybrid) Wed, 27 May 2026 08:00:00 +0000 Look up an Outlook, Autodiscover or OAB error against Exchange Server: what 0x8004010F, 0x80190194, GetLastError=12007 and 42 more codes mean, the usual cause and the first check. https://www.oeltayeb.com/articles/defender-antivirus-platform-engine-updates-gradual-rollout-rollback.html https://www.oeltayeb.com/articles/defender-antivirus-platform-engine-updates-gradual-rollout-rollback.html Microsoft Defender Mon, 25 May 2026 08:00:00 +0000 What the monthly KB4052623 platform and engine updates are, how to assign Intune update channels in rings, how to read versions with Get-MpComputerStatus, and how to roll back with MpCmdRun. https://www.oeltayeb.com/articles/exchange-server-health-checker-findings.html https://www.oeltayeb.com/articles/exchange-server-health-checker-findings.html Exchange Server (on-premises & hybrid) Mon, 25 May 2026 08:00:00 +0000 Run Microsoft's Exchange Server Health Checker on every server, build the HTML report and fix the findings that come up most: missing updates, page file, TLS, KeepAlive and more. https://www.oeltayeb.com/articles/entra-privileged-identity-management-just-in-time-roles.html https://www.oeltayeb.com/articles/entra-privileged-identity-management-just-in-time-roles.html Microsoft Entra ID Sun, 24 May 2026 08:00:00 +0000 Set up PIM for Microsoft Entra roles: role settings, eligible assignments, activation and approvals, PIM for Groups, alerts, access reviews, and the activation problems you'll hit. https://www.oeltayeb.com/articles/exchange-server-550-5-7-54-unable-to-relay-anonymous-relay-connector.html https://www.oeltayeb.com/articles/exchange-server-550-5-7-54-unable-to-relay-anonymous-relay-connector.html Exchange Server (on-premises & hybrid) Sun, 24 May 2026 08:00:00 +0000 Apps get 550 5.7.54 when relaying to external recipients. Build a dedicated Frontend receive connector, allow only specific IPs to relay, and test it without creating an open relay. https://www.oeltayeb.com/articles/android-fully-managed-cope-enrollment-errors-intune.html https://www.oeltayeb.com/articles/android-fully-managed-cope-enrollment-errors-intune.html Microsoft Intune Thu, 21 May 2026 08:00:00 +0000 Fix Android fully managed and corporate-owned work profile enrollments that fail during setup: device and token checks, QR code and afw#setup, Google downloads, Conditional Access and registration. https://www.oeltayeb.com/articles/exchange-server-mailbox-move-request-stalled-failed.html https://www.oeltayeb.com/articles/exchange-server-mailbox-move-request-stalled-failed.html Exchange Server (on-premises & hybrid) Wed, 20 May 2026 08:00:00 +0000 Read StatusDetail and the MRS report to tell throttling by design from real problems, then fix stalled or failed on-premises mailbox moves and resume them safely. https://www.oeltayeb.com/articles/seamless-sso-troubleshooting-azureadssoacc-kerberos.html https://www.oeltayeb.com/articles/seamless-sso-troubleshooting-azureadssoacc-kerberos.html Microsoft Entra ID Wed, 20 May 2026 08:00:00 +0000 Domain-joined users getting password prompts again? Decode the 8100x sign-in errors, then check the intranet zone, klist and the AZUREADSSOACC account and key. https://www.oeltayeb.com/articles/exchange-server-third-party-gateway-receive-connector-spf-header-firewall.html https://www.oeltayeb.com/articles/exchange-server-third-party-gateway-receive-connector-spf-header-firewall.html Exchange Server (on-premises & hybrid) Tue, 19 May 2026 08:00:00 +0000 A vendor-neutral checklist for any gateway in front of Exchange: a scoped receive connector, InternalSMTPServers, the header firewall, TLS, a smart host connector and no mail loops. https://www.oeltayeb.com/articles/exchange-server-transaction-logs-filling-disk-circular-logging.html https://www.oeltayeb.com/articles/exchange-server-transaction-logs-filling-disk-circular-logging.html Exchange Server (on-premises & hybrid) Tue, 19 May 2026 08:00:00 +0000 Log volume filling up or databases dismounting? Find out why Exchange isn't truncating logs, free space safely with a backup or circular logging, and never delete logs by hand. https://www.oeltayeb.com/articles/exchange-server-backend-website-certificate-binding-444-owa-errors.html https://www.oeltayeb.com/articles/exchange-server-backend-website-certificate-binding-444-owa-errors.html Exchange Server (on-premises & hybrid) Mon, 18 May 2026 08:00:00 +0000 Blank OWA and ECP pages, EMS WinRM errors or Event 15021 after certificate work? Restore the self-signed Microsoft Exchange certificate on the Exchange Back End site's port 444 binding. https://www.oeltayeb.com/articles/autopilot-hybrid-join-timeout-0x80004005-2026.html https://www.oeltayeb.com/articles/autopilot-hybrid-join-timeout-0x80004005-2026.html Microsoft Intune Sun, 17 May 2026 08:00:00 +0000 Microsoft Entra hybrid join Autopilot deployments can time out with 0x80004005 on older Windows 11 builds. How to confirm the known issue, which KBs fix it and how to get devices onto a fixed build. https://www.oeltayeb.com/articles/exchange-server-452-4-3-1-back-pressure-insufficient-system-resources.html https://www.oeltayeb.com/articles/exchange-server-452-4-3-1-back-pressure-insufficient-system-resources.html Exchange Server (on-premises & hybrid) Sun, 17 May 2026 08:00:00 +0000 Exchange answers 452 4.3.1 when back pressure kicks in. Find the resource under pressure, fix the cause or move the queue database, and confirm transport is back to normal. https://www.oeltayeb.com/articles/exchange-server-rbac-roles-scopes-access-denied.html https://www.oeltayeb.com/articles/exchange-server-rbac-roles-scopes-access-denied.html Exchange Server (on-premises & hybrid) Sun, 17 May 2026 08:00:00 +0000 How Exchange Server RBAC decides what an admin can do: roles, role groups, assignments and scopes, how to grant least privilege, and the usual causes of access-denied errors. https://www.oeltayeb.com/articles/exchange-hybrid-modern-authentication-hma-outlook.html https://www.oeltayeb.com/articles/exchange-hybrid-modern-authentication-hma-outlook.html Exchange Server (on-premises & hybrid) Fri, 15 May 2026 08:00:00 +0000 Prerequisites, SPN registration with Microsoft Graph PowerShell, EvoSTS and OAuth2ClientProfileEnabled, then proof that Outlook uses Bearer tokens for on-premises mailboxes. https://www.oeltayeb.com/articles/exchange-server-dag-database-activation-preference-redistribute.html https://www.oeltayeb.com/articles/exchange-server-dag-database-activation-preference-redistribute.html Exchange Server (on-premises & hybrid) Fri, 15 May 2026 08:00:00 +0000 Why DAG databases stay active on the wrong member after failovers or patching, what blocks automatic rebalancing, and how to move them back with RedistributeActiveDatabases.ps1. https://www.oeltayeb.com/articles/intune-health-attestation-azure-attestation-migration-compliance.html https://www.oeltayeb.com/articles/intune-health-attestation-azure-attestation-migration-compliance.html Microsoft Intune Wed, 13 May 2026 08:00:00 +0000 Intune will evaluate BitLocker, Secure Boot and code integrity compliance through Microsoft Azure Attestation. Which endpoints to allow, how to test from a device, and how to find affected policies. https://www.oeltayeb.com/articles/ndr-550-5-7-520-external-forwarding-blocked.html https://www.oeltayeb.com/articles/ndr-550-5-7-520-external-forwarding-blocked.html Exchange Online Wed, 13 May 2026 08:00:00 +0000 Why Exchange Online blocks automatic forwarding to external addresses with 5.7.520, and how to allow it only for the mailboxes that need it instead of for everyone. https://www.oeltayeb.com/articles/exchange-server-database-wont-mount-dirty-shutdown-eseutil.html https://www.oeltayeb.com/articles/exchange-server-database-wont-mount-dirty-shutdown-eseutil.html Exchange Server (on-premises & hybrid) Wed, 13 May 2026 08:00:00 +0000 Mount-Database fails with ec=1108 and eseutil /mh says Dirty Shutdown? Find the logs Exchange needs, run soft recovery safely, and know when to restore or reach for eseutil /p. https://www.oeltayeb.com/articles/windows-hello-for-business-cloud-kerberos-trust-intune.html https://www.oeltayeb.com/articles/windows-hello-for-business-cloud-kerberos-trust-intune.html Microsoft Entra ID Mon, 11 May 2026 08:00:00 +0000 Why cloud Kerberos trust is the recommended Windows Hello for Business model for hybrid tenants, how to create the Entra Kerberos server object, configure the Intune policy, and verify with dsregcmd and klist. https://www.oeltayeb.com/articles/exchange-server-530-5-7-1-client-was-not-authenticated.html https://www.oeltayeb.com/articles/exchange-server-530-5-7-1-client-was-not-authenticated.html Exchange Server (on-premises & hybrid) Mon, 11 May 2026 08:00:00 +0000 Why Exchange answers MAIL FROM with 530 5.7.1 Client was not authenticated, how to find the receive connector that answered, and how to fix scanners, apps and gateways safely. https://www.oeltayeb.com/articles/exchange-server-setup-prerequisite-errors-ucma-vcredist-url-rewrite.html https://www.oeltayeb.com/articles/exchange-server-setup-prerequisite-errors-ucma-vcredist-url-rewrite.html Exchange Server (on-premises & hybrid) Sun, 10 May 2026 08:00:00 +0000 Exchange setup stopped at Prerequisite Analysis? Match each readiness error to the missing piece (UCMA 4.0, Visual C++, .NET, URL Rewrite, Windows features, pending restart) and fix it. https://www.oeltayeb.com/articles/exchange-server-vss-backup-error-codes-quick-reference.html https://www.oeltayeb.com/articles/exchange-server-vss-backup-error-codes-quick-reference.html Exchange Server (on-premises & hybrid) Sat, 09 May 2026 08:00:00 +0000 Look up a VSS error from an Exchange backup: 0x800423F3, 0x800423F4, 0x800423F2, 0x8004230F and other VSS_E codes, vssadmin writer states and related events, with first checks. https://www.oeltayeb.com/articles/conditional-access-baseline-policies-every-tenant.html https://www.oeltayeb.com/articles/conditional-access-baseline-policies-every-tenant.html Microsoft Entra ID Wed, 06 May 2026 08:00:00 +0000 The core Conditional Access policies to deploy first, how they map to Microsoft's templates and Microsoft-managed policies, and how to roll them out in report-only mode without locking anyone out. https://www.oeltayeb.com/articles/configmgr-boundaries-boundary-groups-site-assignment-content.html https://www.oeltayeb.com/articles/configmgr-boundaries-boundary-groups-site-assignment-content.html Configuration Manager (SCCM) Wed, 06 May 2026 08:00:00 +0000 How Configuration Manager clients use boundaries and boundary groups to pick a site, management point and content source, how fallback works, and how to verify it. https://www.oeltayeb.com/articles/exchange-hybrid-agent-modern-hybrid-topology.html https://www.oeltayeb.com/articles/exchange-hybrid-agent-modern-hybrid-topology.html Exchange Server (on-premises & hybrid) Wed, 06 May 2026 08:00:00 +0000 What the Exchange Hybrid Agent replaces, what still needs inbound access or classic hybrid, and how to check agent health, redundancy and the msappproxy.net endpoint. https://www.oeltayeb.com/articles/exchange-hybrid-remote-mailbox-management.html https://www.oeltayeb.com/articles/exchange-hybrid-remote-mailbox-management.html Exchange Server (on-premises & hybrid) Wed, 06 May 2026 08:00:00 +0000 Create and manage Exchange Online mailboxes from on-premises the supported way: New- and Enable-RemoteMailbox, the attributes that matter, ExchangeGuid fixes and common mistakes. https://www.oeltayeb.com/articles/primary-refresh-token-sso-troubleshooting.html https://www.oeltayeb.com/articles/primary-refresh-token-sso-troubleshooting.html Microsoft Entra ID Tue, 05 May 2026 08:00:00 +0000 How the Primary Refresh Token powers single sign-on on Windows, how to check it with dsregcmd and the AAD event logs, and how to fix a missing or stale PRT. https://www.oeltayeb.com/articles/microsoft-security-exposure-management-attack-paths.html https://www.oeltayeb.com/articles/microsoft-security-exposure-management-attack-paths.html Microsoft Defender Tue, 05 May 2026 08:00:00 +0000 How Microsoft Security Exposure Management works: licensing and permissions, critical assets, initiative scores and targets, attack paths and choke points, and how it relates to Secure Score. https://www.oeltayeb.com/articles/jamf-pro-deploy-defender-for-endpoint-macos.html https://www.oeltayeb.com/articles/jamf-pro-deploy-defender-for-endpoint-macos.html Microsoft Intune Mon, 04 May 2026 08:00:00 +0000 Deploy Defender for Endpoint to Macs with Jamf Pro in the right order: onboarding plist, settings, permission profiles, a smart group gate and the package. Then read mdatp health and fix its errors. https://www.oeltayeb.com/articles/intune-mobile-threat-defense-connectors-lookout-zimperium-checkpoint.html https://www.oeltayeb.com/articles/intune-mobile-threat-defense-connectors-lookout-zimperium-checkpoint.html Microsoft Intune Sun, 03 May 2026 08:00:00 +0000 Lookout, Zimperium or Check Point connected to Intune, yet devices are blocked, wrongly compliant or never report? Check the connector state, toggles, partner app and threat-level rules. https://www.oeltayeb.com/articles/exchange-online-powershell-v3-connect-automate-reports.html https://www.oeltayeb.com/articles/exchange-online-powershell-v3-connect-automate-reports.html Exchange Online Sat, 02 May 2026 08:00:00 +0000 Install the ExchangeOnlineManagement module, connect interactively or with app-only certificate authentication, and run five quick reports with the fast Get-EXO cmdlets. https://www.oeltayeb.com/articles/exchange-server-vss-writer-failed-backup-log-truncation.html https://www.oeltayeb.com/articles/exchange-server-vss-writer-failed-backup-log-truncation.html Exchange Server (on-premises & hybrid) Sat, 02 May 2026 08:00:00 +0000 vssadmin shows the Microsoft Exchange Writer Failed or Retryable, or logs pile up after a 'successful' backup? Reset the writer, fix DAG conflicts and prove it with Windows Server Backup. https://www.oeltayeb.com/articles/intune-device-cleanup-rules.html https://www.oeltayeb.com/articles/intune-device-cleanup-rules.html Microsoft Intune Tue, 28 Apr 2026 08:00:00 +0000 How Intune device cleanup rules work per platform, what they hide and what they leave behind, and how to pair them with a safe Entra ID stale-device routine that spares Autopilot. https://www.oeltayeb.com/articles/defender-device-control-usb-removable-storage-intune.html https://www.oeltayeb.com/articles/defender-device-control-usb-removable-storage-intune.html Microsoft Defender Mon, 27 Apr 2026 08:00:00 +0000 Device control concepts (groups, rules, entries, access masks), the Intune Device Control profile with reusable settings, audit before block, printers, hunting queries and fixes when a USB stick stays writable. https://www.oeltayeb.com/articles/exchange-server-550-5-1-1-imceaex-x500-ndr-after-migration.html https://www.oeltayeb.com/articles/exchange-server-550-5-1-1-imceaex-x500-ndr-after-migration.html Exchange Server (on-premises & hybrid) Mon, 27 Apr 2026 08:00:00 +0000 Internal mail bouncing to an IMCEAEX address with RESOLVER.ADR.ExRecipNotFound? Decode the old LegacyExchangeDN, add it back as an X500 proxy address and stop it happening again. https://www.oeltayeb.com/articles/defender-device-inactive-no-sensor-data.html https://www.oeltayeb.com/articles/defender-device-inactive-no-sensor-data.html Microsoft Defender Sun, 26 Apr 2026 08:00:00 +0000 What Inactive, Impaired communications and No sensor data mean in the Defender device inventory, and how to check the sensor, onboarding state, proxy and duplicate device records. https://www.oeltayeb.com/articles/exchange-server-ndr-status-codes-quick-reference.html https://www.oeltayeb.com/articles/exchange-server-ndr-status-codes-quick-reference.html Exchange Server (on-premises & hybrid) Sat, 25 Apr 2026 08:00:00 +0000 Look up an Exchange Server NDR or queue status code: what each 4.x.x and 5.x.x code means, the usual on-premises or hybrid cause and the first cmdlet or setting to check. https://www.oeltayeb.com/articles/intune-third-party-ca-scep-digicert-entrust-scepman.html https://www.oeltayeb.com/articles/intune-third-party-ca-scep-digicert-entrust-scepman.html Microsoft Intune Sat, 25 Apr 2026 08:00:00 +0000 Issue Intune SCEP certificates from DigiCert, Entrust, GlobalSign, Sectigo, SCEPman or another partner CA: the Entra app, profiles, challenge validation, Wi-Fi/VPN linkage and errors. https://www.oeltayeb.com/articles/intune-win32-app-supersedence-dependencies.html https://www.oeltayeb.com/articles/intune-win32-app-supersedence-dependencies.html Microsoft Intune Sat, 25 Apr 2026 08:00:00 +0000 Use supersedence to update or replace Win32 apps and dependencies to install prerequisites first: update vs replace, targeting, auto-update, limits, conflicts and IME logs. https://www.oeltayeb.com/articles/passkeys-microsoft-authenticator-rollout-troubleshooting.html https://www.oeltayeb.com/articles/passkeys-microsoft-authenticator-rollout-troubleshooting.html Microsoft Entra ID Thu, 23 Apr 2026 08:00:00 +0000 Configure the Passkey (FIDO2) policy and a passkey profile for Authenticator, pick the right registration flow, roll out in rings and fix the registration and sign-in failures users report. https://www.oeltayeb.com/articles/training-path-configmgr-co-management-modern-management.html https://www.oeltayeb.com/articles/training-path-configmgr-co-management-modern-management.html Configuration Manager (SCCM) Wed, 22 Apr 2026 08:00:00 +0000 A 12-week plan for Configuration Manager admins: cloud attach, co-management, moving workloads to Intune and cloud-native Windows with Autopilot, with labs and Microsoft Learn resources. https://www.oeltayeb.com/articles/jamf-pro-intune-partner-connector-status-errors.html https://www.oeltayeb.com/articles/jamf-pro-intune-partner-connector-status-errors.html Microsoft Intune Tue, 21 Apr 2026 08:00:00 +0000 Jamf devices not reporting compliance to Entra ID? Check the Intune partner status, scoping, licences, the Entra apps Jamf's wizard creates, Jamf Pro smart groups and legacy leftovers. https://www.oeltayeb.com/articles/intune-rbac-scope-tags-delegated-administration.html https://www.oeltayeb.com/articles/intune-rbac-scope-tags-delegated-administration.html Microsoft Intune Fri, 17 Apr 2026 08:00:00 +0000 How Intune roles, role assignments and scope tags fit together, three delegation designs that work, the pitfalls that leak visibility, and how to audit and test what an admin can really do. https://www.oeltayeb.com/articles/exchange-server-554-5-4-14-hop-count-exceeded-mail-loop.html https://www.oeltayeb.com/articles/exchange-server-554-5-4-14-hop-count-exceeded-mail-loop.html Exchange Server (on-premises & hybrid) Thu, 16 Apr 2026 08:00:00 +0000 A hop count NDR means a message looped until a server gave up. Read the NDR, trace the loop with message tracking, and fix the accepted domain, connector or recipient behind it. https://www.oeltayeb.com/articles/exchange-server-netbackup-commvault-dag-backup-errors.html https://www.oeltayeb.com/articles/exchange-server-netbackup-commvault-dag-backup-errors.html Exchange Server (on-premises & hybrid) Tue, 14 Apr 2026 08:00:00 +0000 DAG backups failing in NetBackup (status 156) or Commvault? Check the preferred server list, the passive copy and the Exchange writer, then prove which side is at fault. https://www.oeltayeb.com/articles/exchange-server-uninstall-old-server-removal-errors.html https://www.oeltayeb.com/articles/exchange-server-uninstall-old-server-removal-errors.html Exchange Server (on-premises & hybrid) Fri, 10 Apr 2026 08:00:00 +0000 Exchange setup won't remove a server that still hosts hidden system mailboxes or DAG copies. Find them, move them, fix connectors and uninstall cleanly. https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html https://www.oeltayeb.com/articles/intune-app-install-error-codes-quick-reference.html Microsoft Intune Fri, 10 Apr 2026 08:00:00 +0000 Look up a failed Intune app install: what 0x87D1041C, 0x87D300C9, 0x80070643, 0x8A15001B, 0x87D13B7E, 0xC7D14FB5 and 50 more codes mean, the usual cause and the first check. https://www.oeltayeb.com/articles/mail-flow-rules-best-practices-external-tag-exceptions.html https://www.oeltayeb.com/articles/mail-flow-rules-best-practices-external-tag-exceptions.html Exchange Online Thu, 09 Apr 2026 08:00:00 +0000 How Exchange Online evaluates mail flow rules, why the native External tag beats a subject-prefix rule, and how to test, order and audit rules without punching holes in EOP. https://www.oeltayeb.com/articles/exchange-server-purview-dlp-sensitivity-labels-on-premises-hybrid.html https://www.oeltayeb.com/articles/exchange-server-purview-dlp-sensitivity-labels-on-premises-hybrid.html Exchange Server (on-premises & hybrid) Thu, 09 Apr 2026 08:00:00 +0000 Purview DLP covers Exchange Online mail; Exchange Server has its own DLP and needs IRM for encrypted mail. What each engine sees on-premises and in hybrid, and how to prove it. https://www.oeltayeb.com/articles/outlook-autodiscover-connectivity-exchange-online-troubleshooting.html https://www.oeltayeb.com/articles/outlook-autodiscover-connectivity-exchange-online-troubleshooting.html Exchange Online Wed, 08 Apr 2026 08:00:00 +0000 How classic Outlook finds Exchange Online, how to read Test E-mail AutoConfiguration and the Remote Connectivity Analyzer, and the usual culprits: DNS, stale on-premises Autodiscover, old clients and broken profiles. https://www.oeltayeb.com/articles/jamf-mobile-threat-defense-intune-connector.html https://www.oeltayeb.com/articles/jamf-mobile-threat-defense-intune-connector.html Microsoft Intune Wed, 08 Apr 2026 08:00:00 +0000 Connect Jamf's mobile threat defense to Intune: UEM Connect consent, the MTD connector, Jamf Trust activation, device threat level in compliance and app protection, and fixes when it fails. https://www.oeltayeb.com/articles/exchange-server-se-subscription-edition-explained-upgrade-planning.html https://www.oeltayeb.com/articles/exchange-server-se-subscription-edition-explained-upgrade-planning.html Exchange Server (on-premises & hybrid) Mon, 06 Apr 2026 08:00:00 +0000 What Exchange Server SE changes for on-premises Exchange: the Modern Lifecycle, entitlement-based licensing, how updates ship, and a practical checklist for planning your move. https://www.oeltayeb.com/articles/teams-external-access-vs-guest-access-federation.html https://www.oeltayeb.com/articles/teams-external-access-vs-guest-access-federation.html Microsoft 365 Mon, 06 Apr 2026 08:00:00 +0000 How Teams external access (federation) differs from guest access, which Teams, Entra ID, Groups and SharePoint settings control each, and a safe baseline to apply. https://www.oeltayeb.com/articles/android-work-profile-enrollment-failures.html https://www.oeltayeb.com/articles/android-work-profile-enrollment-failures.html Microsoft Intune Sat, 04 Apr 2026 08:00:00 +0000 A practical checklist for failed Android personally owned work profile enrollments: Managed Google Play, restrictions, licences, device requirements, existing profiles and logs. https://www.oeltayeb.com/articles/intune-enterprise-app-catalog-deploy-update-apps.html https://www.oeltayeb.com/articles/intune-enterprise-app-catalog-deploy-update-apps.html Microsoft Intune Sat, 04 Apr 2026 08:00:00 +0000 Add a prepackaged Win32 app from the Enterprise App Catalog, understand the prefilled install and detection settings, choose between auto-update and guided supersedence, and troubleshoot failed installs. https://www.oeltayeb.com/articles/room-resource-mailboxes-booking-policies-exchange-online.html https://www.oeltayeb.com/articles/room-resource-mailboxes-booking-policies-exchange-online.html Exchange Online Sat, 04 Apr 2026 08:00:00 +0000 Create room and equipment mailboxes, tune Set-CalendarProcessing (auto-accept, conflicts, booking window, delegates), build room lists and Set-Place metadata for Room Finder, and fix the usual booking complaints. https://www.oeltayeb.com/articles/exchange-server-send-as-send-on-behalf-permission-errors.html https://www.oeltayeb.com/articles/exchange-server-send-as-send-on-behalf-permission-errors.html Exchange Server (on-premises & hybrid) Fri, 03 Apr 2026 08:00:00 +0000 Delegates get a SendAsDenied NDR when sending from a shared mailbox? Grant the right permission, allow for replication and caching, and fix stale Outlook addresses. https://www.oeltayeb.com/articles/onboard-defender-for-endpoint-with-intune.html https://www.oeltayeb.com/articles/onboard-defender-for-endpoint-with-intune.html Microsoft Defender Thu, 02 Apr 2026 08:00:00 +0000 Connect Intune to Microsoft Defender for Endpoint, onboard Windows devices with an EDR policy, then prove it worked on the device, in the Defender portal and with a detection test. https://www.oeltayeb.com/articles/exchange-server-smtp-protocol-logging-send-receive-connectors.html https://www.oeltayeb.com/articles/exchange-server-smtp-protocol-logging-send-receive-connectors.html Exchange Server (on-premises & hybrid) Wed, 01 Apr 2026 08:00:00 +0000 Turn on SMTP protocol logging on the right connector, find the log files and read a session line by line to spot TLS, authentication and relay failures. https://www.oeltayeb.com/articles/microsoft-365-group-based-licensing-errors.html https://www.oeltayeb.com/articles/microsoft-365-group-based-licensing-errors.html Microsoft 365 Wed, 01 Apr 2026 08:00:00 +0000 Why group-based licence assignments fail for some members, where to see the errors, how to list affected users with Microsoft Graph PowerShell, and how to fix and reprocess them. https://www.oeltayeb.com/articles/purview-audit-log-search-who-did-what.html https://www.oeltayeb.com/articles/purview-audit-log-search-who-did-what.html Microsoft 365 Wed, 01 Apr 2026 08:00:00 +0000 Answer who did what in Microsoft 365: audit retention by licence, Purview audit search jobs, Search-UnifiedAuditLog for large result sets, and the operation names worth knowing. https://www.oeltayeb.com/articles/windows-update-rings-expedite-intune.html https://www.oeltayeb.com/articles/windows-update-rings-expedite-intune.html Microsoft Intune Sat, 28 Mar 2026 08:00:00 +0000 Prerequisites, the update ring settings and their ranges, a pilot/broad ring design, expedite and driver update policies, the Intune and Windows Update for Business reports, and how to check a device locally. https://www.oeltayeb.com/articles/aadsts53000-aadsts53003-conditional-access-blocks.html https://www.oeltayeb.com/articles/aadsts53000-aadsts53003-conditional-access-blocks.html Microsoft Entra ID Sat, 28 Mar 2026 08:00:00 +0000 What AADSTS53000, 53001 and 53003 actually mean, how to find the blocking policy in the sign-in logs, and how to fix compliance and browser device-identity gaps. https://www.oeltayeb.com/articles/exchange-server-new-mailboxrepairrequest-logical-corruption.html https://www.oeltayeb.com/articles/exchange-server-new-mailboxrepairrequest-logical-corruption.html Exchange Server (on-premises & hybrid) Fri, 27 Mar 2026 08:00:00 +0000 Detect and repair folder view, folder count, search folder and other logical mailbox corruption online with New-MailboxRepairRequest, then track it with Get-MailboxRepairRequest. https://www.oeltayeb.com/articles/entra-connect-sync-filtering-ou-group-attribute.html https://www.oeltayeb.com/articles/entra-connect-sync-filtering-ou-group-attribute.html Microsoft Entra ID Wed, 25 Mar 2026 08:00:00 +0000 Choose between OU, group and attribute filtering in Entra Connect Sync, preview every pending delete with csexport, and get past the accidental-delete threshold safely. https://www.oeltayeb.com/articles/exchange-emergency-mitigation-service-amsi-protection.html https://www.oeltayeb.com/articles/exchange-emergency-mitigation-service-amsi-protection.html Exchange Server (on-premises & hybrid) Wed, 25 Mar 2026 08:00:00 +0000 How the Exchange Emergency Mitigation service and AMSI integration protect Exchange Server SE between updates, what they need to work, and the checks that prove they're doing their job. https://www.oeltayeb.com/articles/intune-import-custom-admx-templates-errors.html https://www.oeltayeb.com/articles/intune-import-custom-admx-templates-errors.html Microsoft Intune Tue, 24 Mar 2026 08:00:00 +0000 Why custom ADMX and ADML uploads fail in Intune (missing namespaces, combo boxes, language and size limits), how to fix each one and how to prove the settings reached the device. https://www.oeltayeb.com/articles/windows-backup-for-organizations-intune-restore.html https://www.oeltayeb.com/articles/windows-backup-for-organizations-intune-restore.html Microsoft Intune Tue, 24 Mar 2026 08:00:00 +0000 Turn on Windows Backup for Organizations and the tenant-wide restore page in Intune so users get their Windows settings back during setup: requirements, steps and fixes. https://www.oeltayeb.com/articles/company-portal-sync-errors-device-not-enrolled-troubleshooting.html https://www.oeltayeb.com/articles/company-portal-sync-errors-device-not-enrolled-troubleshooting.html Microsoft Intune Mon, 23 Mar 2026 08:00:00 +0000 What the Company Portal Sync button really does, why the app says a device isn't set up or belongs to another user, how the primary user drives it, and where the logs are. https://www.oeltayeb.com/articles/exchange-server-migration-move-request-errors-quick-reference.html https://www.oeltayeb.com/articles/exchange-server-migration-move-request-errors-quick-reference.html Exchange Server (on-premises & hybrid) Mon, 23 Mar 2026 08:00:00 +0000 Look up a move request status, StatusDetail or MRS exception: what Queued, StalledDueToTarget_*, TooManyBadItems and 30-plus more mean in Exchange Server and hybrid, and what to check first. https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html https://www.oeltayeb.com/articles/windows-enrollment-error-0x80180018-not-authorized.html Microsoft Intune Sun, 22 Mar 2026 08:00:00 +0000 Windows MDM enrollment fails with 0x80180018 or a nearby 0x8018 code. What Microsoft documents for each code, which tenant setting is behind it, and how to confirm the fix in the enrollment event log. https://www.oeltayeb.com/articles/exchange-server-message-size-limits-550-5-3-4.html https://www.oeltayeb.com/articles/exchange-server-message-size-limits-550-5-3-4.html Exchange Server (on-premises & hybrid) Sun, 22 Mar 2026 08:00:00 +0000 Large messages bouncing with 5.3.4 ROUTING.SizeLimit or 5.2.3 RecipSizeLimit? Every Exchange size limit with its default, how they interact and how to raise them safely. https://www.oeltayeb.com/articles/jamf-pro-intune-integration-overview-2026.html https://www.oeltayeb.com/articles/jamf-pro-intune-integration-overview-2026.html Microsoft Intune Sun, 22 Mar 2026 08:00:00 +0000 A map of the Jamf and Microsoft integrations in 2026: Device Compliance, the retired macOS integration, Platform SSO, Jamf Connect, Entra ID in Jamf Pro, threat defense and Defender. https://www.oeltayeb.com/articles/intune-device-compliance-partners-workspace-one-ivanti-citrix.html https://www.oeltayeb.com/articles/intune-device-compliance-partners-workspace-one-ivanti-citrix.html Microsoft Intune Sat, 21 Mar 2026 08:00:00 +0000 How Workspace ONE, Ivanti, Citrix and other MDMs report compliance to Entra ID through Intune: partner setup, device registration, Conditional Access, migration and why devices stay N/A. https://www.oeltayeb.com/articles/purview-sensitivity-labels-rollout-auto-labeling.html https://www.oeltayeb.com/articles/purview-sensitivity-labels-rollout-auto-labeling.html Microsoft 365 Sat, 21 Mar 2026 08:00:00 +0000 A phased sensitivity label rollout: design a small taxonomy, publish with default labels, enable SharePoint and OneDrive support, then auto-label safely using simulation. https://www.oeltayeb.com/articles/windows-autopilot-setup-hardware-hash-deployment-profile.html https://www.oeltayeb.com/articles/windows-autopilot-setup-hardware-hash-deployment-profile.html Microsoft Intune Fri, 20 Mar 2026 08:00:00 +0000 Set up Windows Autopilot end to end: tenant prerequisites, collecting and importing hardware hashes, group tags and dynamic groups, a user-driven Entra join profile, an Enrollment Status Page and the first test device. https://www.oeltayeb.com/articles/onedrive-known-folder-move-intune-deployment-troubleshooting.html https://www.oeltayeb.com/articles/onedrive-known-folder-move-intune-deployment-troubleshooting.html Microsoft Intune Fri, 20 Mar 2026 08:00:00 +0000 Deploy OneDrive Known Folder Move through the Intune settings catalog, roll it out at a safe pace, read the sync health dashboard, and fix the documented reasons a folder refuses to move. https://www.oeltayeb.com/articles/intune-macos-platform-sso-setup-troubleshooting.html https://www.oeltayeb.com/articles/intune-macos-platform-sso-setup-troubleshooting.html Microsoft Intune Thu, 19 Mar 2026 08:00:00 +0000 Build the Intune settings catalog policy for macOS Platform SSO, pick Secure Enclave, smart card or password, get Macs registered and fix the failures you will actually meet. https://www.oeltayeb.com/articles/entra-authentication-methods-policy-migration-legacy-mfa-sspr.html https://www.oeltayeb.com/articles/entra-authentication-methods-policy-migration-legacy-mfa-sspr.html Microsoft Entra ID Wed, 18 Mar 2026 08:00:00 +0000 Move legacy MFA and SSPR method settings into the authentication methods policy: the three migration states, how each setting maps, and how to prove nobody gets locked out. https://www.oeltayeb.com/articles/co-management-troubleshooting-comanagementhandler-log.html https://www.oeltayeb.com/articles/co-management-troubleshooting-comanagementhandler-log.html Configuration Manager (SCCM) Tue, 17 Mar 2026 08:00:00 +0000 Why Configuration Manager clients don't become co-managed: read CoManagementHandler.log and the MDM enrollment events, fix scope, licence and MFA causes, and check who owns each workload. https://www.oeltayeb.com/articles/exchange-server-veritas-backup-exec-grt-errors.html https://www.oeltayeb.com/articles/exchange-server-veritas-backup-exec-grt-errors.html Exchange Server (on-premises & hybrid) Tue, 17 Mar 2026 08:00:00 +0000 Backup Exec failing with 0xE000FED1, skipping DAG databases or leaving logs untruncated? Fix the Exchange writer, passive-copy settings, backup method and GRT requirements. https://www.oeltayeb.com/articles/configmgr-tenant-attach-intune-admin-center.html https://www.oeltayeb.com/articles/configmgr-tenant-attach-intune-admin-center.html Configuration Manager (SCCM) Mon, 16 Mar 2026 08:00:00 +0000 Upload Configuration Manager devices to the Intune admin center with tenant attach: prerequisites, enabling the upload, what admins can do there, RBAC, and fixing missing devices or failed actions. https://www.oeltayeb.com/articles/exchange-server-components-inactive-serverwideoffline-after-update.html https://www.oeltayeb.com/articles/exchange-server-components-inactive-serverwideoffline-after-update.html Exchange Server (on-premises & hybrid) Sun, 15 Mar 2026 08:00:00 +0000 Mail flow or OWA down after an Exchange CU or SU? Check Get-ServerComponentState, find which requester holds ServerWideOffline Inactive, finish the update and reactivate safely. https://www.oeltayeb.com/articles/windows-autopilot-device-association-tpm-tenant-affinity.html https://www.oeltayeb.com/articles/windows-autopilot-device-association-tpm-tenant-affinity.html Microsoft Intune Thu, 12 Mar 2026 08:00:00 +0000 What device association writes to UEFI, the Windows 11 and TPM 2.0 requirements, exporting the DeviceLink CSV and pre-associating in Intune, lifecycle and removal, and how it coexists with classic Autopilot. https://www.oeltayeb.com/articles/exchange-online-mailbox-full-quota-recoverable-items-ndr-5-2-2.html https://www.oeltayeb.com/articles/exchange-online-mailbox-full-quota-recoverable-items-ndr-5-2-2.html Exchange Online Thu, 12 Mar 2026 08:00:00 +0000 Why senders get 554 5.2.2 mailbox full, how to measure a mailbox and its hidden Recoverable Items folder, and the fix for each cause: user data, holds, calendar logging or the wrong licence. https://www.oeltayeb.com/articles/configmgr-pxe-boot-failures-smspxe-log.html https://www.oeltayeb.com/articles/configmgr-pxe-boot-failures-smspxe-log.html Configuration Manager (SCCM) Thu, 12 Mar 2026 08:00:00 +0000 Work through a failing PXE boot in order: network and IP helpers, the PXE-enabled distribution point, boot images, deployments and unknown computers, reading SMSPXE.log at each step. https://www.oeltayeb.com/articles/exchange-server-compromise-check-css-exchange-scripts.html https://www.oeltayeb.com/articles/exchange-server-compromise-check-css-exchange-scripts.html Exchange Server (on-premises & hybrid) Thu, 12 Mar 2026 08:00:00 +0000 A structured compromise check for Exchange Server: Health Checker, Test-ProxyLogon, where web shells hide, the logs and Exchange settings attackers abuse, and what to do if you find something. https://www.oeltayeb.com/articles/jamf-pro-conditional-access-noncompliant-mac-blocked-53000.html https://www.oeltayeb.com/articles/jamf-pro-conditional-access-noncompliant-mac-blocked-53000.html Microsoft Intune Thu, 12 Mar 2026 08:00:00 +0000 A Mac is compliant in Jamf Pro, yet Conditional Access returns AADSTS53000. Read the sign-in log, find the broken link (registration, compliance sync, browser or device ID) and fix it. https://www.oeltayeb.com/articles/windows-autopilot-device-preparation-known-issues-troubleshooting.html https://www.oeltayeb.com/articles/windows-autopilot-device-preparation-known-issues-troubleshooting.html Microsoft Intune Wed, 11 Mar 2026 08:00:00 +0000 What trips admins up in Autopilot device preparation, the known issues and their status as of October 2026, how to read the deployment status report, and the documented steps for a failed deployment. https://www.oeltayeb.com/articles/defender-vulnerability-management-remediate-with-intune.html https://www.oeltayeb.com/articles/defender-vulnerability-management-remediate-with-intune.html Microsoft Defender Wed, 11 Mar 2026 08:00:00 +0000 How exposure score, recommendations, software inventory and weaknesses fit together, and how a Request remediation in the Defender portal becomes a security task an Intune admin can close. https://www.oeltayeb.com/articles/exchange-server-enterprise-vault-archiving-errors.html https://www.oeltayeb.com/articles/exchange-server-enterprise-vault-archiving-errors.html Exchange Server (on-premises & hybrid) Wed, 11 Mar 2026 08:00:00 +0000 Enterprise Vault archiving tasks failing to log on, stalling or leaving shortcuts that won't open? Check the Vault Service account, system mailboxes, throttling policy and add-ins. https://www.oeltayeb.com/articles/defender-security-settings-management-sensecm-enrollment-errors.html https://www.oeltayeb.com/articles/defender-security-settings-management-sensecm-enrollment-errors.html Microsoft Defender Tue, 10 Mar 2026 08:00:00 +0000 A device is onboarded to Defender but never shows up as MDE-managed in Intune. Read HKLM\SOFTWARE\Microsoft\SenseCM\EnrollmentStatus, map the code to its cause and fix it. https://www.oeltayeb.com/articles/defender-xdr-automatic-attack-disruption.html https://www.oeltayeb.com/articles/defender-xdr-automatic-attack-disruption.html Microsoft Defender Sat, 07 Mar 2026 08:00:00 +0000 What automatic attack disruption contains and why, the Defender settings it depends on, and how to exclude critical assets, review its actions and undo them safely. https://www.oeltayeb.com/articles/exchange-server-kerberos-alternate-service-account-load-balancer.html https://www.oeltayeb.com/articles/exchange-server-kerberos-alternate-service-account-load-balancer.html Exchange Server (on-premises & hybrid) Sat, 07 Mar 2026 08:00:00 +0000 Why Outlook falls back to NTLM behind a load-balanced namespace, and the fix: create the ASA account, deploy it with RollAlternateServiceAccountPassword.ps1, register SPNs, verify with klist. https://www.oeltayeb.com/articles/exchange-server-outlook-cannot-connect-mapi-http.html https://www.oeltayeb.com/articles/exchange-server-outlook-cannot-connect-mapi-http.html Exchange Server (on-premises & hybrid) Sat, 07 Mar 2026 08:00:00 +0000 Outlook shows Disconnected or can't create a profile against Exchange Server. Check the user's MAPI settings, Autodiscover, the MAPI virtual directory, healthcheck.htm and load balancer probes. https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html https://www.oeltayeb.com/articles/intune-policy-compliance-error-codes-quick-reference.html Microsoft Intune Sat, 07 Mar 2026 08:00:00 +0000 Look up an Intune profile or compliance result: what 65000, 0x87D1FDE8, SyncML 404/500, iOS payload codes, compliance states and BitLocker status details mean, and the first check. https://www.oeltayeb.com/articles/exchange-server-virtual-directories-urls-reset-broken-vdir.html https://www.oeltayeb.com/articles/exchange-server-virtual-directories-urls-reset-broken-vdir.html Exchange Server (on-premises & hybrid) Fri, 06 Mar 2026 08:00:00 +0000 Set consistent internal and external URLs on every Exchange virtual directory, then back up, reset or recreate a broken OWA, ECP, EWS or OAB directory safely. https://www.oeltayeb.com/articles/intune-multi-admin-approval-protect-critical-actions.html https://www.oeltayeb.com/articles/intune-multi-admin-approval-protect-critical-actions.html Microsoft Intune Fri, 06 Mar 2026 08:00:00 +0000 Configure Intune Multi Admin Approval so wipes, scripts, app deployments and role changes need a second admin: approver groups, access policies, the request flow and audit. https://www.oeltayeb.com/articles/password-hash-sync-pass-through-authentication-federation-choose.html https://www.oeltayeb.com/articles/password-hash-sync-pass-through-authentication-federation-choose.html Microsoft Entra ID Wed, 04 Mar 2026 08:00:00 +0000 How PHS, pass-through authentication and AD FS federation work, what each depends on, how each fails, and a decision table for choosing and backing up your hybrid sign-in method. https://www.oeltayeb.com/articles/configmgr-compliance-settings-configuration-baselines.html https://www.oeltayeb.com/articles/configmgr-compliance-settings-configuration-baselines.html Configuration Manager (SCCM) Tue, 03 Mar 2026 08:00:00 +0000 Build configuration items from registry, WQL and script settings, bundle them into a baseline, deploy it with remediation and prove on the client and in reports that drift gets fixed. https://www.oeltayeb.com/articles/intune-macos-ddm-software-updates-not-installing.html https://www.oeltayeb.com/articles/intune-macos-ddm-software-updates-not-installing.html Microsoft Intune Tue, 03 Mar 2026 08:00:00 +0000 Why Macs, iPhones and iPads don't update on time with Intune: legacy update policies that stopped working, DDM deadline settings, deferrals, the Apple updates reports and on-device checks. https://www.oeltayeb.com/articles/temporary-access-pass-passwordless-onboarding.html https://www.oeltayeb.com/articles/temporary-access-pass-passwordless-onboarding.html Microsoft Entra ID Mon, 23 Feb 2026 08:00:00 +0000 Enable the Temporary Access Pass policy, issue passes in the portal or with Graph PowerShell, and use them to register passkeys, Authenticator and Windows Hello for Business. https://www.oeltayeb.com/articles/package-win32-app-intunewin-content-prep-tool.html https://www.oeltayeb.com/articles/package-win32-app-intunewin-content-prep-tool.html Microsoft Intune Fri, 20 Feb 2026 08:00:00 +0000 How to wrap an installer with the Win32 Content Prep Tool, choose silent install and uninstall commands, set install behaviour, return codes, requirement and detection rules, and pilot the app. https://www.oeltayeb.com/articles/migrate-macs-iphones-from-jamf-pro-to-intune.html https://www.oeltayeb.com/articles/migrate-macs-iphones-from-jamf-pro-to-intune.html Microsoft Intune Fri, 20 Feb 2026 08:00:00 +0000 Plan a Jamf Pro to Intune move: map profiles and scripts, reassign ADE devices, choose OS 26 migration or a wipe, handle FileVault, Activation Lock and app licences, and fix enrollment errors. https://www.oeltayeb.com/articles/exchange-server-cumulative-update-preflight-checklist.html https://www.oeltayeb.com/articles/exchange-server-cumulative-update-preflight-checklist.html Exchange Server (on-premises & hybrid) Thu, 19 Feb 2026 08:00:00 +0000 A practical checklist for Exchange Server SE and 2019 cumulative updates: backups, Health Checker, AD preparation, maintenance mode, elevated setup and the checks that prove it worked. https://www.oeltayeb.com/articles/exchange-hybrid-mailbox-migration-batches-errors.html https://www.oeltayeb.com/articles/exchange-hybrid-mailbox-migration-batches-errors.html Exchange Server (on-premises & hybrid) Wed, 18 Feb 2026 08:00:00 +0000 How a remote move batch works, what Syncing, Synced and Completing really mean, the documented errors (SMTP proxy, MRS Proxy 401, skipped items) and how to finish the cutover cleanly. https://www.oeltayeb.com/articles/bitlocker-recovery-key-not-escrowed-entra-intune.html https://www.oeltayeb.com/articles/bitlocker-recovery-key-not-escrowed-entra-intune.html Microsoft Intune Wed, 18 Feb 2026 08:00:00 +0000 Encrypted device but no recovery key in Intune? Read BitLocker events 845 and 846, fix the join state and policy, re-escrow with BackupToAAD-BitLockerKeyProtector and prove it worked. https://www.oeltayeb.com/articles/exchange-server-dag-database-copy-failedandsuspended-reseed.html https://www.oeltayeb.com/articles/exchange-server-dag-database-copy-failedandsuspended-reseed.html Exchange Server (on-premises & hybrid) Wed, 18 Feb 2026 08:00:00 +0000 A passive DAG copy in FailedAndSuspended won't heal itself. Read the real error, fix the disk or log problem behind it, reseed with Update-MailboxDatabaseCopy and prove the copy is healthy. https://www.oeltayeb.com/articles/configmgr-bitlocker-management-replacing-mbam.html https://www.oeltayeb.com/articles/configmgr-bitlocker-management-replacing-mbam.html Configuration Manager (SCCM) Tue, 17 Feb 2026 08:00:00 +0000 Set up BitLocker management in Configuration Manager: recovery service, policy, portals and a clean move off stand-alone MBAM, plus the logs that prove recovery keys are escrowed. https://www.oeltayeb.com/articles/intune-phased-deployments-preview-rings.html https://www.oeltayeb.com/articles/intune-phased-deployments-preview-rings.html Microsoft Intune Mon, 16 Feb 2026 08:00:00 +0000 Intune's new Deployments experience (preview): staging Win32 and Enterprise App Catalog apps, settings catalog and endpoint security policies across rings, permissions, how rings advance, and a ring design. https://www.oeltayeb.com/articles/exchange-server-adaccess-topology-event-2080-2142-domain-controllers.html https://www.oeltayeb.com/articles/exchange-server-adaccess-topology-event-2080-2142-domain-controllers.html Exchange Server (on-premises & hybrid) Mon, 16 Feb 2026 08:00:00 +0000 Exchange services failing with event 2142? Read event 2080's columns, fix site, DNS, firewall and SACL right (event 2112) causes, and keep static domain controllers as a last resort. https://www.oeltayeb.com/articles/exchange-server-hybrid-migration-endpoint-mrsproxy-errors.html https://www.oeltayeb.com/articles/exchange-server-hybrid-migration-endpoint-mrsproxy-errors.html Exchange Server (on-premises & hybrid) Mon, 16 Feb 2026 08:00:00 +0000 Test-MigrationServerAvailability or a new hybrid migration batch fails against your on-premises endpoint? Check MRSProxy, credentials, publishing and certificates, then prove the fix. https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html https://www.oeltayeb.com/articles/entra-sign-in-errors-intune-devices-aadsts-quick-reference.html Microsoft Intune Sun, 15 Feb 2026 08:00:00 +0000 Look up an AADSTS code from a managed device: what 53000, 50155, 135011, 50076, 7000218 and 39 more mean for Intune and Jamf admins, the usual cause and the first check. https://www.oeltayeb.com/articles/jamf-pro-entra-id-cloud-identity-provider-setup-errors.html https://www.oeltayeb.com/articles/jamf-pro-entra-id-cloud-identity-provider-setup-errors.html Microsoft Intune Sun, 15 Feb 2026 08:00:00 +0000 Connect Jamf Pro to Microsoft Entra ID as a cloud identity provider and fix what breaks: admin consent, Graph permissions, attribute mappings, nested groups and LDAP migration. https://www.oeltayeb.com/articles/exchange-server-tls-1-2-tls-1-3-hardening.html https://www.oeltayeb.com/articles/exchange-server-tls-1-2-tls-1-3-hardening.html Exchange Server (on-premises & hybrid) Sat, 14 Feb 2026 08:00:00 +0000 What Exchange Server SE and 2019 support for TLS 1.2 and TLS 1.3, the Schannel and .NET settings Microsoft documents, and how to find partners still on TLS 1.0 before you switch it off. https://www.oeltayeb.com/articles/intune-zebra-lifeguard-ota-oemconfig.html https://www.oeltayeb.com/articles/intune-zebra-lifeguard-ota-oemconfig.html Microsoft Intune Sat, 14 Feb 2026 08:00:00 +0000 Manage Zebra Android devices in Intune: dedicated enrollment, Zebra OEMConfig profiles, LifeGuard OTA firmware deployments, and what Conflict, NOTAPPLICABLE and Failed to create mean. https://www.oeltayeb.com/articles/intune-management-extension-logs-guide.html https://www.oeltayeb.com/articles/intune-management-extension-logs-guide.html Microsoft Intune Fri, 13 Feb 2026 08:00:00 +0000 What each Intune Management Extension log records, how to read them with CMTrace, what to search for, how to force a check-in, and how to collect the logs remotely. https://www.oeltayeb.com/articles/apple-ade-devices-not-syncing-intune.html https://www.oeltayeb.com/articles/apple-ade-devices-not-syncing-intune.html Microsoft Intune Wed, 11 Feb 2026 08:00:00 +0000 Why Apple ADE devices don't appear in Intune or enroll without the right policy: device assignment, token sync limits and renewal, default policies, and why a reset is needed. https://www.oeltayeb.com/articles/exchange-server-dag-maintenance-mode-patching.html https://www.oeltayeb.com/articles/exchange-server-dag-maintenance-mode-patching.html Exchange Server (on-premises & hybrid) Wed, 11 Feb 2026 08:00:00 +0000 Put an Exchange Server DAG member into maintenance mode the supported way: drain transport, move databases, pause the cluster node, patch, then bring it back and prove it's healthy. https://www.oeltayeb.com/articles/co-management-enable-existing-configmgr-clients.html https://www.oeltayeb.com/articles/co-management-enable-existing-configmgr-clients.html Configuration Manager (SCCM) Tue, 10 Feb 2026 08:00:00 +0000 Prepare hybrid join and automatic MDM enrollment, run the Cloud Attach wizard against a pilot collection, then prove on the device and in the Intune admin center that it is co-managed. https://www.oeltayeb.com/articles/exchange-server-owa-ecp-http-500-errors-causes.html https://www.oeltayeb.com/articles/exchange-server-owa-ecp-http-500-errors-causes.html Exchange Server (on-premises & hybrid) Tue, 10 Feb 2026 08:00:00 +0000 HTTP 500 or Server Error in '/ecp' on Exchange? Use the error text, IIS and HttpProxy logs to find the cause: a non-elevated update, a missing config file, certificates or app pools. https://www.oeltayeb.com/articles/jamf-connect-microsoft-entra-id-setup-aadsts-errors.html https://www.oeltayeb.com/articles/jamf-connect-microsoft-entra-id-setup-aadsts-errors.html Microsoft Intune Tue, 10 Feb 2026 08:00:00 +0000 Fix Jamf Connect sign-in with Microsoft Entra ID: the app registration, ROPG password checks, Conditional Access after the June 2026 change, and the AADSTS errors at the Mac login window. https://www.oeltayeb.com/articles/auto-expanding-archiving-exchange-online.html https://www.oeltayeb.com/articles/auto-expanding-archiving-exchange-online.html Exchange Online Mon, 09 Feb 2026 08:00:00 +0000 Check licensing and the one-way switch, enable auto-expanding archiving org-wide or per user, make sure items actually move, and confirm extra storage was provisioned. https://www.oeltayeb.com/articles/secure-boot-certificate-expiration-intune-rollout.html https://www.oeltayeb.com/articles/secure-boot-certificate-expiration-intune-rollout.html Microsoft Intune Sun, 08 Feb 2026 08:00:00 +0000 Which 2011 Secure Boot certificates expire and when, the Settings catalog Secure Boot settings, model-based filters for a staged rollout, and the Intune report and remediation that track progress. https://www.oeltayeb.com/articles/jamf-pro-ios-device-compliance-intune-app-protection.html https://www.oeltayeb.com/articles/jamf-pro-ios-device-compliance-intune-app-protection.html Microsoft Intune Sat, 07 Feb 2026 08:00:00 +0000 Combine Jamf Pro device compliance for iPhone and iPad with Intune app protection: the partner connector, smart groups, IntuneMAMUPN keys, Conditional Access and how to verify each piece. https://www.oeltayeb.com/articles/intune-powershell-scripts-not-running.html https://www.oeltayeb.com/articles/intune-powershell-scripts-not-running.html Microsoft Intune Wed, 28 Jan 2026 08:00:00 +0000 An Intune platform script reports Failed or never runs. How the Intune Management Extension executes scripts, what the three script settings change, how retries and re-runs work, and where to look. https://www.oeltayeb.com/articles/remote-help-intune-setup-troubleshooting.html https://www.oeltayeb.com/articles/remote-help-intune-setup-troubleshooting.html Microsoft Intune Wed, 28 Jan 2026 08:00:00 +0000 Set up Remote Help end to end: check licensing, enable the tenant settings, grant least-privilege helper roles, deploy the Windows app, handle Conditional Access, and fix sessions that won't connect. https://www.oeltayeb.com/articles/windows-365-cloud-pc-provisioning-failed-troubleshooting.html https://www.oeltayeb.com/articles/windows-365-cloud-pc-provisioning-failed-troubleshooting.html Microsoft Intune Tue, 27 Jan 2026 08:00:00 +0000 A Cloud PC shows Provisioning failed in the Intune admin center. How provisioning works, what the Azure network connection health checks test, the documented failure reasons, and when to retry or reprovision. https://www.oeltayeb.com/articles/defender-for-endpoint-macos-onboarding-intune.html https://www.oeltayeb.com/articles/defender-for-endpoint-macos-onboarding-intune.html Microsoft Defender Mon, 26 Jan 2026 08:00:00 +0000 The Intune deployment for Defender for Endpoint on Mac in the documented order: system extensions, Full Disk Access, network filter, background services, the app, the onboarding package, mdatp checks and fixes. https://www.oeltayeb.com/articles/configmgr-task-sequence-failures-smsts-log.html https://www.oeltayeb.com/articles/configmgr-task-sequence-failures-smsts-log.html Configuration Manager (SCCM) Mon, 26 Jan 2026 08:00:00 +0000 Find smsts.log in every phase, keep the device on the error with F8, read the log from the failure upwards and fix driver, network, content and domain join failures. https://www.oeltayeb.com/articles/defender-for-endpoint-streamlined-connectivity-migration-proxy.html https://www.oeltayeb.com/articles/defender-for-endpoint-streamlined-connectivity-migration-proxy.html Microsoft Defender Sun, 25 Jan 2026 08:00:00 +0000 What *.endpoint.security.microsoft.com replaces and what it doesn't, the sensor prerequisites, how to migrate onboarded devices, EDR and antivirus proxy settings, and how to prove it worked. https://www.oeltayeb.com/articles/win32-app-0x87d1041c-not-detected.html https://www.oeltayeb.com/articles/win32-app-0x87d1041c-not-detected.html Microsoft Intune Thu, 22 Jan 2026 08:00:00 +0000 0x87D1041C means the installer finished but the detection rule found nothing. The usual causes (bitness, install context, version drift) and how to test detection on the device. https://www.oeltayeb.com/articles/exchange-server-extended-protection-enable-troubleshoot.html https://www.oeltayeb.com/articles/exchange-server-extended-protection-enable-troubleshoot.html Exchange Server (on-premises & hybrid) Thu, 22 Jan 2026 08:00:00 +0000 What Extended Protection does, the TLS, NTLM and load balancer prerequisites, enabling it with Microsoft's script, and fixing the clients and hybrid features that break. https://www.oeltayeb.com/articles/intune-servicenow-integration-connector.html https://www.oeltayeb.com/articles/intune-servicenow-integration-connector.html Microsoft Intune Thu, 22 Jan 2026 08:00:00 +0000 Show ServiceNow incidents in Intune's Troubleshooting pane: licences, roles, the ServiceNow OAuth app and CORS rule, the connector, what the help desk sees and the setup errors. https://www.oeltayeb.com/articles/intune-macos-filevault-recovery-key-escrow.html https://www.oeltayeb.com/articles/intune-macos-filevault-recovery-key-escrow.html Microsoft Intune Wed, 21 Jan 2026 08:00:00 +0000 Why Macs don't encrypt or don't escrow a FileVault recovery key to Intune, what the encryption report's status details mean, and how to take over user-encrypted Macs and prove the key works. https://www.oeltayeb.com/articles/windows-11-24h2-defender-for-endpoint-sense-client-missing-intune.html https://www.oeltayeb.com/articles/windows-11-24h2-defender-for-endpoint-sense-client-missing-intune.html Microsoft Intune Tue, 20 Jan 2026 08:00:00 +0000 Some Windows 11 24H2 devices ship without the Sense client, so Intune's EDR policy errors and the device never reaches Defender. How to detect it at scale with Remediations and add the capability. https://www.oeltayeb.com/articles/exchange-server-disk-space-iis-etl-log-cleanup.html https://www.oeltayeb.com/articles/exchange-server-disk-space-iis-etl-log-cleanup.html Exchange Server (on-premises & hybrid) Tue, 20 Jan 2026 08:00:00 +0000 Free space on Exchange Server SE and 2019 safely: which IIS, diagnostic and search ETL logs you can delete, which files you must never touch, and how to schedule the cleanup. https://www.oeltayeb.com/articles/exchange-server-public-folder-migration-exchange-online-errors.html https://www.oeltayeb.com/articles/exchange-server-public-folder-migration-exchange-online-errors.html Exchange Server (on-premises & hybrid) Tue, 20 Jan 2026 08:00:00 +0000 Move public folders from Exchange Server SE or 2019 to Exchange Online with Microsoft's batch scripts: prerequisites, lock-down, cutover and the errors that stall the batch. https://www.oeltayeb.com/articles/training-path-sc-200-security-operations-analyst.html https://www.oeltayeb.com/articles/training-path-sc-200-security-operations-analyst.html Microsoft Defender Sun, 18 Jan 2026 08:00:00 +0000 A stage-by-stage study plan for exam SC-200 (Security Operations Analyst Associate): the current skills-measured domains, the Microsoft Learn paths to follow, hands-on labs and exam-day tips. https://www.oeltayeb.com/articles/exchange-server-arbitration-system-mailboxes-missing-recreate.html https://www.oeltayeb.com/articles/exchange-server-arbitration-system-mailboxes-missing-recreate.html Exchange Server (on-premises & hybrid) Sun, 18 Jan 2026 08:00:00 +0000 Migration batches, moderation, OAB generation or a CU upgrade failing? Check Exchange's seven arbitration mailboxes, then re-home or recreate broken and missing ones the supported way. https://www.oeltayeb.com/articles/intune-diagnostic-settings-siem-splunk-sentinel-event-hub.html https://www.oeltayeb.com/articles/intune-diagnostic-settings-siem-splunk-sentinel-event-hub.html Microsoft Intune Sat, 17 Jan 2026 08:00:00 +0000 Route Intune audit, operational, compliance and device logs to Log Analytics, Event Hubs or storage, then on to Microsoft Sentinel or Splunk, with sample KQL and checks. https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html https://www.oeltayeb.com/articles/windows-autopilot-error-codes-quick-reference.html Microsoft Intune Sat, 17 Jan 2026 08:00:00 +0000 Look up a Windows Autopilot failure: what 0x800705B4, 0x801C03EA, 0x80070774, 0x81039001, event 807, import error 808 and more mean, the usual cause and the first check. https://www.oeltayeb.com/articles/exchange-server-setup-previously-failed-buildtobuildupgrade-watermark.html https://www.oeltayeb.com/articles/exchange-server-setup-previously-failed-buildtobuildupgrade-watermark.html Exchange Server (on-premises & hybrid) Fri, 16 Jan 2026 08:00:00 +0000 Exchange setup says it previously failed during Install or BuildToBuildUpgrade? Find the real error, resume with the same build and media, and treat Watermark cleanup as a last resort. https://www.oeltayeb.com/articles/intune-vpn-profiles-cisco-paloalto-zscaler-f5-errors.html https://www.oeltayeb.com/articles/intune-vpn-profiles-cisco-paloalto-zscaler-f5-errors.html Microsoft Intune Thu, 15 Jan 2026 08:00:00 +0000 Third-party VPN profile failing in Intune? Pick profile vs app configuration per platform, fix the certificate chain, decode 2016281112 Remediation Failed and Conflict, and read client-side logs. https://www.oeltayeb.com/articles/migrate-ad-fs-to-cloud-authentication-staged-rollout.html https://www.oeltayeb.com/articles/migrate-ad-fs-to-cloud-authentication-staged-rollout.html Microsoft Entra ID Thu, 15 Jan 2026 08:00:00 +0000 A low-risk path off AD FS: inventory relying parties and claim rules, enable password hash sync, pilot with staged rollout, convert the domain with Graph PowerShell, then decommission. https://www.oeltayeb.com/articles/configmgr-to-intune-cloud-native-migration-plan.html https://www.oeltayeb.com/articles/configmgr-to-intune-cloud-native-migration-plan.html Configuration Manager (SCCM) Wed, 14 Jan 2026 08:00:00 +0000 A phased plan from Configuration Manager to Entra joined, Intune-managed Windows devices: assess, co-manage, move workloads, provision with Autopilot and retire on-premises dependencies. https://www.oeltayeb.com/articles/exchange-server-dag-cluster-witness-quorum-event-1135.html https://www.oeltayeb.com/articles/exchange-server-dag-cluster-witness-quorum-event-1135.html Exchange Server (on-premises & hybrid) Wed, 14 Jan 2026 08:00:00 +0000 Event ID 1135 or 1177 on DAG members, databases dismounting or witness errors from Set-DatabaseAvailabilityGroup? See how DAG quorum works and fix the cluster, witness and network. https://www.oeltayeb.com/articles/cloud-management-gateway-setup-client-connectivity.html https://www.oeltayeb.com/articles/cloud-management-gateway-setup-client-connectivity.html Configuration Manager (SCCM) Tue, 13 Jan 2026 08:00:00 +0000 Deploy a Configuration Manager cloud management gateway on an Azure scale set, connect it to your site, bring internet clients onto it, and read the right logs when clients can't connect. https://www.oeltayeb.com/articles/advanced-hunting-kql-queries-for-intune-admins.html https://www.oeltayeb.com/articles/advanced-hunting-kql-queries-for-intune-admins.html Microsoft Defender Mon, 12 Jan 2026 08:00:00 +0000 Eight short KQL queries for the Defender portal using documented tables: OS builds, sensor health, app versions, CVE exposure, antivirus posture, who ran a tool, ASR audit hits and network destinations. https://www.oeltayeb.com/articles/configmgr-content-distribution-failures-distmgr-pkgxfermgr.html https://www.oeltayeb.com/articles/configmgr-content-distribution-failures-distmgr-pkgxfermgr.html Configuration Manager (SCCM) Mon, 12 Jan 2026 08:00:00 +0000 Follow content from the site server to a distribution point through distmgr.log, PkgXferMgr.log and smsdpprov.log, and know when to update, redistribute or validate. https://www.oeltayeb.com/articles/exchange-server-prepareschema-preparead-errors-permissions.html https://www.oeltayeb.com/articles/exchange-server-prepareschema-preparead-errors-permissions.html Exchange Server (on-premises & hybrid) Sun, 11 Jan 2026 08:00:00 +0000 Fix Exchange /PrepareSchema and /PrepareAD failures: missing Schema Admins or Enterprise Admins rights, wrong site or domain, unfinished replication and stale AD entries. Then verify AD versions. https://www.oeltayeb.com/articles/jamf-pro-platform-sso-enterprise-sso-plugin.html https://www.oeltayeb.com/articles/jamf-pro-platform-sso-enterprise-sso-plugin.html Microsoft Intune Sun, 11 Jan 2026 08:00:00 +0000 Configure the Microsoft Enterprise SSO plug-in and Platform SSO from Jamf Pro: payload values, Company Portal first, Device Compliance registration, verification and the errors to expect. https://www.oeltayeb.com/articles/attack-surface-reduction-rules-audit-mode.html https://www.oeltayeb.com/articles/attack-surface-reduction-rules-audit-mode.html Microsoft Defender Fri, 09 Jan 2026 08:00:00 +0000 A phased plan for attack surface reduction rules in Intune: standard rules straight to Block, the rest in Audit, measured with advanced hunting, narrow exclusions, then enforce. https://www.oeltayeb.com/articles/secure-boot-certificate-update-not-applying-troubleshooting.html https://www.oeltayeb.com/articles/secure-boot-certificate-update-not-applying-troubleshooting.html Microsoft Intune Thu, 08 Jan 2026 08:00:00 +0000 Read UEFICA2023Status, the AvailableUpdates bitmask and TPM-WMI events 1795 to 1808 to see where a Secure Boot certificate update is stuck, interpret the Intune report, and clear the common blockers. https://www.oeltayeb.com/articles/defender-tamper-protection-troubleshooting-intune.html https://www.oeltayeb.com/articles/defender-tamper-protection-troubleshooting-intune.html Microsoft Defender Thu, 08 Jan 2026 08:00:00 +0000 What tamper protection locks, the four places it can be managed and their precedence, how to see which one controls a device, and how to fix settings that won't apply or exclusions that aren't protected. https://www.oeltayeb.com/articles/configmgr-client-installation-failures-ccmsetup-log.html https://www.oeltayeb.com/articles/configmgr-client-installation-failures-ccmsetup-log.html Configuration Manager (SCCM) Tue, 06 Jan 2026 08:00:00 +0000 Trace a failed Configuration Manager client install from client push to site assignment: ccm.log, ccmsetup.log, client.msi.log, return codes, MP lookup and boundaries. https://www.oeltayeb.com/articles/jamf-pro-entra-id-sso-saml-admin-self-service.html https://www.oeltayeb.com/articles/jamf-pro-entra-id-sso-saml-admin-self-service.html Microsoft Intune Tue, 06 Jan 2026 08:00:00 +0000 Set up SAML single sign-on from Microsoft Entra ID to Jamf Pro and Self Service, keep a working failover login, and fix the AADSTS50105, AADSTS50011 and AADSTS700016 sign-in errors. https://www.oeltayeb.com/articles/intune-remediations-fix-issues-at-scale.html https://www.oeltayeb.com/articles/intune-remediations-fix-issues-at-scale.html Microsoft Intune Mon, 05 Jan 2026 08:00:00 +0000 Set up Intune Remediations end to end: licensing and tenant attestation, the exit-code contract, run context, schedules, on-demand runs and reading the results. https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html https://www.oeltayeb.com/articles/intune-windows-enrollment-error-codes-quick-reference.html Microsoft Intune Mon, 05 Jan 2026 08:00:00 +0000 Look up a Windows enrollment or Entra join failure: what 0x80180018, 0x8018002b, 0x801c03f2 and dozens more codes mean, the usual cause in an Intune tenant and the first check. https://www.oeltayeb.com/articles/entra-connect-health-agents-sync-alerts.html https://www.oeltayeb.com/articles/entra-connect-health-agents-sync-alerts.html Microsoft Entra ID Sun, 04 Jan 2026 08:00:00 +0000 Licensing, prerequisites and registration for the Connect Health agents, sending alerts to people who act on them, and a playbook for the sync alerts you'll see most. https://www.oeltayeb.com/articles/exchange-2016-2019-end-of-support-options.html https://www.oeltayeb.com/articles/exchange-2016-2019-end-of-support-options.html Exchange Server (on-premises & hybrid) Sun, 04 Jan 2026 08:00:00 +0000 Exchange 2016 and 2019 left support on 14 October 2025 and paid ESUs end with October 2026. The real risks, a decision table and the order of work to move to SE or Exchange Online. https://www.oeltayeb.com/articles/exchange-server-journaling-third-party-archive-mimecast-barracuda.html https://www.oeltayeb.com/articles/exchange-server-journaling-third-party-archive-mimecast-barracuda.html Exchange Server (on-premises & hybrid) Sun, 04 Jan 2026 08:00:00 +0000 Send Exchange Server journal reports to a hosted archive: standard vs premium journaling, a hidden contact, a dedicated TLS send connector, JournalingReportNdrTo and proof of delivery. https://www.oeltayeb.com/articles/defender-xdr-automated-investigation-remediation-levels-device-groups.html https://www.oeltayeb.com/articles/defender-xdr-automated-investigation-remediation-levels-device-groups.html Microsoft Defender Sat, 03 Jan 2026 08:00:00 +0000 How automated investigation and response decides what to remediate, how device groups and automation levels control it, and how to approve, reject or undo an action in the Action center. https://www.oeltayeb.com/articles/exchange-server-symantec-dlp-network-prevent-email-integration.html https://www.oeltayeb.com/articles/exchange-server-symantec-dlp-network-prevent-email-integration.html Exchange Server (on-premises & hybrid) Sat, 03 Jan 2026 08:00:00 +0000 Network Prevent for Email behind Exchange Server: why reflecting mode loops with 5.4.6, how to set forwarding mode, ports and relay, and what the queues show when it's down. https://www.oeltayeb.com/articles/windows-autopatch-approvals-pausing-recovery-updates-intune.html https://www.oeltayeb.com/articles/windows-autopatch-approvals-pausing-recovery-updates-intune.html Microsoft Intune Fri, 02 Jan 2026 08:00:00 +0000 Autopatch groups and quality update policies, per-update-type approvals, deferrals and pausing for Windows and .NET Framework updates, quick machine recovery approvals, the reports and migration tips. https://www.oeltayeb.com/articles/mandatory-mfa-admin-portals-automation-service-accounts.html https://www.oeltayeb.com/articles/mandatory-mfa-admin-portals-automation-service-accounts.html Microsoft Entra ID Fri, 02 Jan 2026 08:00:00 +0000 What mandatory MFA enforcement covers, the failures it causes for user-based automation and admin sign-ins, how to verify who is ready, moving scripts to workload identities, and MFA-capable break-glass accounts. https://www.oeltayeb.com/articles/configmgr-software-update-point-wsus-maintenance.html https://www.oeltayeb.com/articles/configmgr-software-update-point-wsus-maintenance.html Configuration Manager (SCCM) Fri, 02 Jan 2026 08:00:00 +0000 Keep your software update point healthy: enable the WSUS maintenance options, set supersedence rules, back up and reindex SUSDB on a schedule, and confirm it all in wsyncmgr.log. https://www.oeltayeb.com/articles/configmgr-software-updates-not-installing-wuahandler-updatesdeployment.html https://www.oeltayeb.com/articles/configmgr-software-updates-not-installing-wuahandler-updatesdeployment.html Configuration Manager (SCCM) Fri, 02 Jan 2026 08:00:00 +0000 Follow a Configuration Manager update from scan to install: WSUS location, WUAHandler.log scan errors, Group Policy conflicts, content download and maintenance windows. https://www.oeltayeb.com/articles/entra-connect-staging-mode-swing-migration-disaster-recovery.html https://www.oeltayeb.com/articles/entra-connect-staging-mode-swing-migration-disaster-recovery.html Microsoft Entra ID Fri, 02 Jan 2026 08:00:00 +0000 Build an Entra Connect staging server from an exported configuration, prove what it would export with csexport, and switch the active server without surprises.