About CCullhaj

Thank you very much for the tip Mathew!  Your solution worked like a charm!  As soon as I enabled HTTP partial response, the intune autopilot process went through in no time. I do have to also mention that I had to also use the whitelist that I have posted above, due to the URL filtering restrictions.  Before I enabled the HTTP partial response, it didn't matter how many URL's I whitelisted or how much I tweaked the actual policies, nothing was working.  But now everything is good. Cheers!  ... View more

Ok so I too your suggestion and enabled the HTTP partial response, and I got to say that in my first Intune try I did see instant positive results!   Worth saying that the Intune process still failed, but just by enabled HTTP partial response I got to install 8/9 of apps and then the process failed at the last app and eventually intune timed out.   This was only through the partial response option, I had disabled all the aforementioned IP/FQDN whitelisting.  Maybe by combining the IP/FQDN whitelisting and HTTP Partial response I should get it to work.  That's going to be my next try!   I'll keep you posted on my results.   ... View more

Very interesting, I've never heard about this previously.  I will give this a try and let you know how it goes. Thanks for your reply. ... View more

Not really, I am still testing different security policies.  When I disabled file blocking, and wild fire the intune process went through.  But then after I enabled them again I got mixed results.   What I did was a packet capture during the intune process.  I noticed that host was making DNS queries to hosts that are not listed in the Microsoft's documentation to be whitelisted.  However, since I know those DNS queries were done during the intune process I extracted them from the packet capture and added them to the whitelist.   End result, still having problems.  I in the middle of confirming now if the list of FQDNS and IP whitelisting are not enough and there are additional or if the security profiles are messing up the traffic.  I am sharing with you the list of FQDNs that I got from the packet capture, Microsoft documentation and different blogs.  I don't know if it's going to be handy to you but worth trying: login.microsoftonline.com *.officeconfig.msocdn.com config.office.com graph.windows.net enterpriseregistration.windows.net portal.manage.microsoft.com m.manage.microsoft.com sts.manage.microsoft.com portal.fei.msua01.manage.microsoft.com m.fei.msua01.manage.microsoft.com portal.fei.amsua0102.manage.microsoft.com m.fei.amsua0102.manage.microsoft.com portal.fei.msua02.manage.microsoft.com m.fei.msua02.manage.microsoft.com portal.fei.msua04.manage.microsoft.com m.fei.msua04.manage.microsoft.com portal.fei.msua05.manage.microsoft.com m.fei.msua05.manage.microsoft.com portal.fei.amsua0502.manage.microsoft.com m.fei.amsua0502.manage.microsoft.com portal.fei.msua06.manage.microsoft.com m.fei.msua06.manage.microsoft.com portal.fei.amsua0602.manage.microsoft.com m.fei.amsua0602.manage.microsoft.com fei.amsua0202.manage.microsoft.com portal.fei.amsua0202.manage.microsoft.com m.fei.amsua0202.manage.microsoft.com portal.fei.amsua0402.manage.microsoft.com m.fei.amsua0402.manage.microsoft.com portal.fei.msua07.manage.microsoft.com portal.fei.amsua0702.manage.microsoft.com portal.fei.amsua0801.manage.microsoft.com portal.fei.msua08.manage.microsoft.com m.fei.msua07.manage.microsoft.com m.fei.amsua0702.manage.microsoft.com m.fei.msua08.manage.microsoft.com m.fei.amsua0801.manage.microsoft.com portal.fei.msub01.manage.microsoft.com m.fei.msub01.manage.microsoft.com portal.fei.amsub0102.manage.microsoft.com m.fei.amsub0102.manage.microsoft.com portal.fei.msub02.manage.microsoft.com m.fei.msub02.manage.microsoft.com portal.fei.msub03.manage.microsoft.com m.fei.msub03.manage.microsoft.com portal.fei.msub05.manage.microsoft.com m.fei.msub05.manage.microsoft.com portal.fei.amsub0202.manage.microsoft.com m.fei.amsub0202.manage.microsoft.com portal.fei.amsub0302.manage.microsoft.com m.fei.amsub0302.manage.microsoft.com portal.fei.amsub0502.manage.microsoft.com m.fei.amsub0502.manage.microsoft.com portal.fei.amsub0601.manage.microsoft.com m.fei.amsub0601.manage.microsoft.com portal.fei.msuc01.manage.microsoft.com m.fei.msuc01.manage.microsoft.com portal.fei.msuc02.manage.microsoft.com m.fei.msuc02.manage.microsoft.com portal.fei.msuc03.manage.microsoft.com m.fei.msuc03.manage.microsoft.com portal.fei.msuc05.manage.microsoft.com m.fei.msuc05.manage.microsoft.com portal.fei.amsud0101.manage.microsoft.com m.fei.amsud0101.manage.microsoft.com fef.msuc03.manage.microsoft.com Admin.manage.microsoft.com wip.mam.manage.microsoft.com mam.manage.microsoft.com *.manage.microsoft.com *.do.dsp.mp.microsoft.com *.dl.delivery.mp.microsoft.com *.emdl.ws.microsoft.com *.download.windowsupdate.com *.delivery.mp.microsoft.com *.notify.windows.com *.wns.windows.com *.notify.live.net login.live.com *.microsoftaik.azure.net *.c-msedge.net *.akamai.net *.azure.com *.microsoft.com *.harvest.int *.onehs.us *.sfd.local *.windows.com *.windowsupdate.com *.cloudfront.net *.deepinstinctweb.com *.hpanalytics.net *.hpdaas.com *.akamaiedge.net *.intel.com *.live.com *.azure.net *.edgesuite.net *.cloudapp.net *.akadns.net *.kappacdn.net *.fb-t-msedge.net *.trafficmanager.net *.msftconnecttest.com *.msedge.net *.prod.do.dsp.mp.microsoft.com cs9.wac.phicdn.net emdl.ws.microsoft.com .windowsupdate.com *.update.microsoft.com tsfe.trafficshaping.dsp.mp.microsoft.com cy2.settings.data.microsoft.com.akadns.net settings.data.microsoft.com settings-win.data.microsoft.com *.e-msedge.net *.s-msedge.net nexusrules.officeapps.live.com ocos-office365-s2s.msedge.net officeclient.microsoft.com outlook.office365.com client-office365-tas.msedge.net www.office.com onecollector.cloudapp.aria v10.events.data.microsoft.com self.events.data.microsoft.com to-do.microsoft.com wdcp.microsoft.com definitionupdates.microsoft.com go.microsoft.com *.smartscreen.microsoft.com smartscreen-sn3p.smartscreen.microsoft.com unitedstates.smartscreen-prod.microsoft.com storecatalogrevocation.storequality.microsoft.com store-images.microsoft.com md.mp.microsoft.com *.displaycatalog.mp.microsoft.com displaycatalog.mp.microsoft.com pti.store.microsoft.com storeedgefd.dsx.mp.microsoft.com markets.books.microsoft.com share.microsoft.com dmd.metaservices.microsoft.com v10.vortex-win.data.microsoft.com www.microsoft.com co4.telecommand.telemetry.microsoft.com cs11.wpc.v0cdn.net cs1137.wpc.gammacdn.net modern.watson.data.microsoft.com watson.telemetry.microsoft.com licensing.mp.microsoft.com wd-prod-fe.cloudapp.azure.com ris-prod-atm.trafficmanager.net validation-v2.sls.trafficmanager.net ctldl.windowsupdate.com inference.location.live.net location-inference-westus.cloudapp.net login.msa.akadns6.net us.configsvc1.live.com.akadns.net *.search.msn.com arc.msn.com g.msn.com query.prod.cms.rt.microsoft.com ris.api.iris.microsoft.com browser.pipe.aria.microsoft.com config.edge.skype.com s2s.config.skype.com skypeecs-prod-usw-0-b.cloudapp.net blob.weather.microsoft.com tile-service.weather.microsoft.com cdn.onenote.net twimg.com candycrushsoda.king.com evoke-windowsservices-tas.msedge.net wallet.microsoft.com mediaredirect.microsoft.com int.whiteboard.microsoft.com wbd.ms whiteboard.microsoft.com whiteboard.ms www.bing.com exo-ring.msedge.net fp.msedge.net fp-vp.azureedge.net odinvzc.azureedge.net spo-ring.msedge.net *.g.akamaiedge.net maps.windows.com g.akamaiedge.net iecvlist.microsoft.com www.msftconnecttest.com   ... View more

Thanks for your reply.  That's correct, I do not see any drops or denies.   I will have to check the global counters thought.  My thinking is that all these CDNs and Proxy requests that could be going during the download process the firewall is blocking them somehow.    If the global counters show that requests are being blocked, what is the next step that you would recommend? ... View more