A.1 Intune App Management

Microsoft Graph API Configuration fails

Explanation: Microsoft Graph API configuration in ZENworks fails.
Possible Cause: Some of the reasons for failure are:

  • ZENworks Server using which Microsoft Graph API is configured does not have outbound connectivity to contact the Azure portal.

  • Pop-up blocker is not disabled on the browser using which Microsoft Graph API is configured. Disable the pop-up blocker and try again.

iOS Intune App Protection Policy creation fails in ZENworks.

Explanation: iOS Intune App Protection policy creation fails in ZENworks.
Possible Cause: Some of the reasons for failure are:

  • ZENworks Server using which Microsoft Graph API is configured does not have outbound connectivity to contact the Azure portal.

  • The access token is either invalid or has expired. You need to renew the token, in ZCC, by navigating to Configuration > Management Zone Settings > Intune App Management > Renew Token. After renewing the token, you need to start creating the policy again.

  • The Microsoft Graph API is either not configured or is deleted from ZENworks. To configure it, navigate to Configuration > Management Zone Settings > Intune App Management. After configuring the account, you need to start creating the policy again.

The creation or modification of iOS App Protection policy succeeds in ZENworks but fails in Azure

Explanation: iOS Intune App Protection Policy is created or modified (such as copying or renaming the policy) successfully in ZENworks but the creation or modification of the same policy fails in the Azure portal.
Possible Cause: Some of the reasons for failure are:

  • ZENworks Server is facing some network connectivity issues.

  • The access token is either invalid or has expired. You need to renew the token, in ZCC, navigate to Configuration > Management Zone Settings > Intune App Management > Renew Token.

  • The Microsoft Graph API is either not configured or is deleted from ZENworks. To configure it, navigate to Configuration > Management Zone Settings > Intune App Management.

Action: After resolving the issue, you need to undo the operation in ZCC and retry. For example: If copying of the policy succeeds in ZENworks but not in Azure, you need to resolve the issue, delete the copy of the policy created in ZENworks and then copy the policy again.

The deletion of iOS App Protection policy succeeds in ZENworks but fails in Azure

Explanation: iOS Intune App Protection Policy is deleted (such as copying or renaming the policy) successfully in ZENworks but the deletion of the same policy fails in the Azure portal.
Possible Cause: Some of the reasons for failure are:

  • ZENworks Server using which is facing some network connectivity issues.

  • The access token is either invalid or has expired.

  • Microsoft Graph API account was already removed from ZENworks.

Action: Visit the Azure portal to manually delete the iOS Intune App Protection Policy.

Token renewal fails if the process is initiated from another ZENworks Server

Explanation: When there are multiple Primary Servers in the zone and the redirect (callback) URL of a particular ZENworks server is specified in the Microsoft portal while configuring Microsoft Graph API, then token renewal fails if the process is initiated using a different ZENworks server and not the server whose callback URL is specified in the Microsoft App Registration portal.
Action: Modify the redirect URL in the Microsoft App Registration portal to the redirect URL of the ZENworks server using which you want to renew the token.