Intune Extensions will not install

It’s a common issue, but still worth mentioning. Being a Full Administrator is NOT the same as having full control of all features in the ConfigMgr console. An example is enabling new Intune Extensions like the one released in late December.

As usual you are prompted when new Extensions are available. In this example I’m logged in as Full Administrator and trying to enable the extension in the Administration workspace.

image

All looks good, right until the point where I accept the License Terms,

image

And boom! I do not have the required permissions even though I’m a Full Administrator!

image

Rule #7 when installing a ConfigMgr site is to create a new ConfigMgr administrator group right after the installation of the site and make sure you clone all the permissions from the installation account. This was easily done in previous versions of ConfigMgr/SMS, in ConfigMgr 2012 it has changed a little. Right click the security group you have added, in Properties select Security Scopes. Click Add and Select “All Security Scope”.

image

With all security scopes assigned your account will be able to install the latest extensions.


Leave a Reply