Troubleshooting
Systematic diagnosis guides for Intune, Windows, Group Policy, and Entra ID. Decision trees and tested fixes — not generic advice.
5 articles
The ESP hanging at 0% is one of the most common Autopilot failures. This guide walks through the diagnostic sequence: Event Viewer locations, MDM logs, and the six most frequent root causes.
Before running gpupdate /force for the third time, follow this decision tree: scope filtering, link order, security filtering, loopback processing, and slow-link detection are all common culprits.
When Intune reports a device as "Not evaluated" or stuck in a compliance state that does not reflect reality, the issue is usually one of four things — and this checklist covers all of them.
BitLocker keys failing to escrow to Entra ID is a silent failure — no error on the device, no alert in Intune. Here is how to detect it, force escrow, and prevent it from recurring.
Devices ignoring WUfB deferral settings is almost always a policy conflict — consumer update policies from the Microsoft account, WSUS redirection, or a stale ring assignment.