Group Policy and Intune both apply: prove which channel won
A documentation-reviewed path for hybrid devices where a GPO and an Intune profile both target the same Windows setting. Prove the winner before anyone enables MDMWinsOverGP.
Troubleshooting
Systematic diagnosis guides for Intune, Windows, Group Policy, and Entra ID, with decision trees, log locations, validation steps, and practical fixes.
14 articles
Each troubleshooting page is written around observable state: logs, portal status, Graph output, event IDs, policy assignments, and device-side symptoms.
AdminSignal favours diagnosis before reset actions. Clear caches, delete registry keys, or re-enrol devices only when evidence points there and rollback impact is understood.
Validation matters as much as the fix. Use the follow-up checks to confirm policy state, reporting, user impact, and whether the same fault is likely to recur.
A documentation-reviewed path for hybrid devices where a GPO and an Intune profile both target the same Windows setting. Prove the winner before anyone enables MDMWinsOverGP.
Computer RSoP: one applied GPO and one denied by security filtering.
Before running gpupdate /force for the third time, follow this decision tree: scope filtering, link order, security filtering, loopback processing, and slow-link detection are all common culprits.