mirror of
https://github.com/fleetdm/fleet
synced 2026-05-24 09:28:54 +00:00
f2f1f66d11
Closes #38916 Related: #34993, #33985, fleetdm/confidential#13228 ## Changes **Article update** (`articles/windows-mdm-setup.md`) - Adds "Migrating from another MDM solution" subsection under **Manual enrollment** with overview of common migration issues and links to remediation scripts **New scripts** (`docs/solutions/windows/scripts/`) - `reset-mdm-enrollment-flag.ps1` — Resets MmpcEnrollmentFlag blocking MDM status after migration - `remove-stale-mdm-enrollment-records.ps1` — Clears orphaned enrollment GUIDs, AAD discovery cache, and MS DM Server cache - `fix-workplace-join-configuration.ps1` — Re-enables Automatic-Device-Join task and configures Workplace Join policies - `remove-unreachable-wsus-configuration.ps1` — Removes unreachable WSUS server config that breaks Windows Update ## Context Customers migrating Windows hosts from Intune to Fleet have been hitting recurring enrollment issues, MDM status stuck on "Off," enrollment errors (`0x80190190`, `0x8018000a`), and Windows Update breakage from leftover RMM agents. These scripts consolidate the workarounds from multiple customer engagements into self-serve remediation that can be deployed via **Controls > Scripts**. --------- Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
13 lines
853 B
PowerShell
13 lines
853 B
PowerShell
# Please don't delete. This script is referenced in the guide here: https://fleetdm.com/guides/windows-mdm-setup#migrating-from-another-mdm-solution
|
|
# Resets the MmpcEnrollmentFlag registry value that can prevent Fleet from reporting
|
|
# MDM status correctly after migrating from another MDM solution (e.g., Intune).
|
|
# Reboot the device after running this script.
|
|
|
|
$enrollmentsPath = "HKLM:\SOFTWARE\Microsoft\Enrollments"
|
|
$enrollmentFlag = (Get-ItemProperty -Path $enrollmentsPath -Name "MmpcEnrollmentFlag" -ErrorAction SilentlyContinue).MmpcEnrollmentFlag
|
|
if ($null -ne $enrollmentFlag -and 0 -ne $enrollmentFlag) {
|
|
Write-Host "Enrollment flag current value $enrollmentFlag - setting to 0"
|
|
Set-ItemProperty -Path $enrollmentsPath -Name "MmpcEnrollmentFlag" -Value 0 -Type DWord
|
|
} else {
|
|
Write-Host "Enrollment flag already 0 or does not exist"
|
|
}
|