Microsoft Test Device Registration Connectivity and ENS 10.7

[vvadim]

Hi All,

I have strange situation with the ENS 10.7 (and, maybe, 10.6): we has some problems with Azure Conditional Access on some PCs.

To check the connection to Azure, Microsoft Support had recommend for us run this Powershell script  on affected machines.

On some of them - script runs with positive results:

Test-DeviceRegConnectivity

Checking Internet Connectivity...
Connection to login.microsoftonline.com .............. Succeeded.
Connection to device.login.microsoftonline.com ......  Succeeded.
Connection to enterpriseregistration.windows.net ..... Succeeded.

But on the some of them, results are negative (even if the access protection and exploit prevention in reporting mode):

Test-DeviceRegConnectivity

Checking Internet Connectivity...
Connection to login.microsoftonline.com ................. failed.
Connection to device.login.microsoftonline.com .......... failed.
Connection to enterpriseregistration.windows.net ........ failed.

When the ENS was removed from this machines, script runs with successful results.

I'm totally in the dead-end, won't see any block or something like that.

Only differences with this PCs - different windows versions: failed runs Windows 10 1803 and 1809, and with success result runs on Win 10 1903

[vvadim]

Anybody?

[chealey · Accepted solution]

Hi @vvadim 

Many thanks for posting on the Community. Which exact version of ENS 10.7 are you testing on? 

If it is the February Update (10.7.0.1564), I am wondering if https://kc.mcafee.com/corporate/index?page=content&id=KB92453 is causing the reported issue.

[vvadim]

Hi @chealey.
Yes, it is the  February Update (10.7.0.1564)

[chealey]

@vvadim thanks for confirming. Can you check if the issue persists after following one of the workarounds mentioned in that KB article?

[vvadim]

I'm not sure, but I has another issue, which I resolve with this article

https://community.mcafee.com/t5/Endpoint-Security-ENS/Cisco-AnyConnect-Secure-Mobility-Client-and-EN...

[chealey]

@vvadim indeed, the same KB article is being referenced here. This issue is being addressed in the next release. I would advise to subscribe to the article so that you receive automatic email notifications when it's updated.

[vvadim]

Thanks for answer. I'm already have subscribe to receive automatic email notification. I created this post, because link between this issues isn't obvious