Guide for System Center Configuration Manager Hybrid DiagnosticsMicrosoft Corporation

Published: July 2016

We are always interested in hearing your feedback. Please provide feedback and suggestions using ConfigMgr uservoice website or use the comments section to let the team know about your experience – and tell us what we can do better!

CopyrightThis document is provided "as-is". Information and views expressed in this document, including URL and other Internet Web site references, may change without notice. You bear the risk of using it.

Some examples depicted herein are provided for illustration only and are fictitious. No real association or connection is intended or should be inferred.

This document does not provide you with any legal rights to any intellectual property in any Microsoft product. You may copy and use this document for your internal, reference purposes. You may modify this document for your internal, reference purposes.

© 2016 Microsoft Corporation. All rights reserved.

Microsoft, Active Directory, Windows, and Windows Server are trademarks of the Microsoft group of companies.

All other trademarks are property of their respective owners.

ContentsGuide for System Center Configuration Manager Hybrid Diagnostics............................................4

Guide History...............................................................................................................................4Pre-Requisites.............................................................................................................................4Files in this release......................................................................................................................4

Purpose for Hybrid Diagnostics......................................................................................................5

Setup..............................................................................................................................................5

Executing Hybrid Diagnostics..........................................................................................................8

Monitoring Scenarios....................................................................................................................13

Appendix.......................................................................................................................................14

Guide for System Center Configuration Manager Hybrid Diagnostics

Guide History

Release Date Changes

July 2016 Release of this guide

PrerequisitesThe following are Prerequisites for Hybrid Diagnostics:

System Center 2012 Configuration Manager SP2 or Later System Center 2012 R2 Configuration Manager SP1 or Later System Center Configuration Manager (1511) or later Windows PowerShell 3.0 or Later Azure Active Directory PowerShell module .NET Framework 4.5.2 or Later System Center Configuration Manager service connection point site system role. The

Hybrid Diagnostics is intended install and run on the computer that hosts the service connection point or Microsoft Intune connector role in the Configuration Manager hierarchy.

To use this tool, your account must be a member of the SMS Admin group – This is used to get access to the SMS Provider and for basic hierarchy discovery.

(Recommended) Microsoft Online Service Azure Active Directory (AAD) Tenant Admin Credentials – This is the account is used to check if the specified user account is synchronized with AAD.

Files in this releaseThe release package includes the following files:

License Agreement

User Guide (This Document)

HybridDiag.MSI

Purpose for Hybrid Diagnostics The Hybrid Diagnostics assists in diagnosis of Hybrid scenarios helps you troubleshoot common issues and provides guidance on how to fix the identified issues related to your environment.

In this section:

Setup

Monitoring Scenarios

For details on the checks the tool performs, see Appendix.

Setup1. Run the HybridDiag.msi, and then click Next

2. Accept EULA, and then click Next

3. Tool will perform the prerequisite check. Please install any missing prerequisites. Click Next

4. Select the Install Location, and then Click Next

5. Click Install

6. Click Finish. You have completed installation successfully.

Running Hybrid Diagnostics1. Run HybridDiag.exe, and then click Next

2. The prerequisites checks run

3. Optional: Click on the Third Party Notices to read more information

4. After the prerequisite checks pass, you see the Gathering configuration information screen

5. Provide the user principle name (UPN) for a user and the device type of the device for which they are experiencing enrollment issues, then click Next.

6. If you do not have the Azure Active Directory (AAD) Tenant credentials, you can skip the the ADD checks by clicking next.

7. When you select “Run AAD checks” and provide AD Tenant credentials, you can then click Validate to check that the specified user account is synchronized with AAD. After the account is validated, click Next to continue

8. Hybrid Diagnostics checks for problems

9. After checks are completed the “Completed” screen dsiplays the results

10. If a check fails, you can click on the “More” link to see details and how to possibly fix it

Monitoring ScenariosThe following table describes the key scenarios that the Hybrid Diagnostics checks.

Monitoring scenario

Description Associated rules and monitors

Enrollment Scenario

This scenario checks your hierarchy against known environmental issues which could cause enrollment failures.

Checks that the SMS Executive service is running

Checks for the Microsoft Intune connector certificate

Checks for potential conflicts between Intune connector certificates

Checks for DNS CName entry for the specified UPN

Checks for device type enablement in Configuration Manager

Checks for known errors in Status Messages

Checks for UPN synchronization in AAD

Checks for Duplicate UPN

Checks that the specified user is a member of the cloud user collection

Checks that the AAD ID and cloud user ID match

Checks for user exceeding device cap

Check for multiple valid certificates present on Service Connection Point

AppendixPeriodically, new checks are added to the tool. Please check the Microsoft download page for updates.