Security

Intune Extension log in Aruba ClearPass when ClearPass attempts a sync:

'The device "DESKTOP-9T9P8D0" (27f2f00a-9a83-43ed-0000-111111111111}​​​​​​​​ does not have a MAC Address. Unable to process it.'

Intune Extension log in Aruba ClearPass when user tries to authenticate:

'Intune - The endpoint with the MAC Address 00-19-0e-16-3a-80 does not have an "Intune ID".'

• Screenshot of device hardware showing the device name, Intune Device ID and Ethernet MAC.  Again, this works with wireless clients.
  
  To be clear, we have tested a laptop with both wired and wireless NICs.  On the same machine, wireless works associated to an Aruba network.  Wired does not work, when performing dot1x against a Cisco switch.

I think I've narrowed down the issue. 

It looks like the Microsoft Graph REST API v1.0 only has the wiFiMacAddress defined, while the beta API has an ethernetMacAddress.  I suspect this is likely the issue. 

v1.0 API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-1.0
Beta API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-beta

I've attempted to add the ethernetMacAddress to the intuneAttributes section of the Intune extension configuration in CPPM but that just returns the following error: 

[2021-01-10T21:42:36.481] [ERROR] Intune - {"error":{"code":"BadRequest","message":"Parsing OData Select and Expand failed: Could not find a property named 'ethernetMacAddress' on type 'microsoft.graph.managedDevice'.","innerError":{"date":"2021-01-11T02:42:48","request-id

Another change I made was to have the extension pull all items, not just updated ones, as a result I'm seeing my wired-only devices being pulled down, but not added to the endpoint database as a result of no MAC address being available:

[2021-01-10T22:00:01.204] [WARN] Intune - The device "DESKTOP-D80VMRE" (4c40059c-9afa-43b5-831d-c39b8a4b7170} does not have a MAC Address. Unable to process it.

[2021-01-10T22:00:01.204] [DEBUG] Intune - {"id":"xxxx-9afa-xxxx","wiFiMacAddress":"","deviceName":"DESKTOP-D80VMRE","model":"OptiPlex 9020","osVersion":"10.0.18363.1237","operatingSystem":"Windows","userId":"xxxx-d040-4694-9xxxx","managedDeviceOwnerType":"personal","enrolledDateTime":"2021-01-10T21:19:27Z","lastSyncDateTime":"2021-01-11T01:25:23Z","complianceState":"compliant","jailBroken":"Unknown","managementAgent":"mdm","easActivated":true,"easDeviceId":"fffffBC30","easActivationDateTime":"0001-01-01T00:00:00Z","azureADRegistered":true,"deviceEnrollmentType":"windowsAutoEnrollment","activationLockBypassCode":null,"emailAddress":"castrov@xyz.com","azureADDeviceId":"-444c-bfd1-x","deviceRegistrationState":"registered","deviceCategoryDisplayName":"Unknown","isSupervised":false,"exchangeLastSuccessfulSyncDateTime":"0001-01-01T00:00:00Z","exchangeAccessState":"none","exchangeAccessStateReason":"none","remoteAssistanceSessionUrl":null,"remoteAssistanceSessionErrorDetails":null,"isEncrypted":true,"userPrincipalName":"castrov@","manufacturer":"Dell Inc.","imei":"","complianceGracePeriodExpirationDateTime":"9999-12-31T23:59:59Z","serialNumber":"3kk2","phoneNumber":"","androidSecurityPatchLevel":"","userDisplayName":"Victor Castro","configurationManagerClientEnabledFeatures":null,"deviceHealthAttestationState":null,"subscriberCarrier":"","meid":"","totalStorageSpaceInBytes":500106788864,"freeStorageSpaceInBytes":432788209664,"managedDeviceName":"castro_Windows_1/10/2021_9:19 PM","partnerReportedThreatState":"unknown"}


Clearly the device is enrolled and CPPM +MS Intune are talking, it's just that Intune isn't returning the ethernet MAC with the v1.0 Graph API.

Any idea if we change change to the beta Graph API?

Thanks,
Victor

Intune Extension log in Aruba ClearPass when ClearPass attempts a sync:

'The device "DESKTOP-9T9P8D0" (27f2f00a-9a83-43ed-0000-111111111111}​​​​​​​​ does not have a MAC Address. Unable to process it.'

Intune Extension log in Aruba ClearPass when user tries to authenticate:

'Intune - The endpoint with the MAC Address 00-19-0e-16-3a-80 does not have an "Intune ID".'

• Screenshot of device hardware showing the device name, Intune Device ID and Ethernet MAC.  Again, this works with wireless clients.
  
  To be clear, we have tested a laptop with both wired and wireless NICs.  On the same machine, wireless works associated to an Aruba network.  Wired does not work, when performing dot1x against a Cisco switch.

I think I've narrowed down the issue. 

It looks like the Microsoft Graph REST API v1.0 only has the wiFiMacAddress defined, while the beta API has an ethernetMacAddress.  I suspect this is likely the issue. 

v1.0 API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-1.0
Beta API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-beta

I've attempted to add the ethernetMacAddress to the intuneAttributes section of the Intune extension configuration in CPPM but that just returns the following error: 

[2021-01-10T21:42:36.481] [ERROR] Intune - {"error":{"code":"BadRequest","message":"Parsing OData Select and Expand failed: Could not find a property named 'ethernetMacAddress' on type 'microsoft.graph.managedDevice'.","innerError":{"date":"2021-01-11T02:42:48","request-id

Another change I made was to have the extension pull all items, not just updated ones, as a result I'm seeing my wired-only devices being pulled down, but not added to the endpoint database as a result of no MAC address being available:

[2021-01-10T22:00:01.204] [WARN] Intune - The device "DESKTOP-D80VMRE" (4c40059c-9afa-43b5-831d-c39b8a4b7170} does not have a MAC Address. Unable to process it.

[2021-01-10T22:00:01.204] [DEBUG] Intune - {"id":"xxxx-9afa-xxxx","wiFiMacAddress":"","deviceName":"DESKTOP-D80VMRE","model":"OptiPlex 9020","osVersion":"10.0.18363.1237","operatingSystem":"Windows","userId":"xxxx-d040-4694-9xxxx","managedDeviceOwnerType":"personal","enrolledDateTime":"2021-01-10T21:19:27Z","lastSyncDateTime":"2021-01-11T01:25:23Z","complianceState":"compliant","jailBroken":"Unknown","managementAgent":"mdm","easActivated":true,"easDeviceId":"fffffBC30","easActivationDateTime":"0001-01-01T00:00:00Z","azureADRegistered":true,"deviceEnrollmentType":"windowsAutoEnrollment","activationLockBypassCode":null,"emailAddress":"castrov@xyz.com","azureADDeviceId":"-444c-bfd1-x","deviceRegistrationState":"registered","deviceCategoryDisplayName":"Unknown","isSupervised":false,"exchangeLastSuccessfulSyncDateTime":"0001-01-01T00:00:00Z","exchangeAccessState":"none","exchangeAccessStateReason":"none","remoteAssistanceSessionUrl":null,"remoteAssistanceSessionErrorDetails":null,"isEncrypted":true,"userPrincipalName":"castrov@","manufacturer":"Dell Inc.","imei":"","complianceGracePeriodExpirationDateTime":"9999-12-31T23:59:59Z","serialNumber":"3kk2","phoneNumber":"","androidSecurityPatchLevel":"","userDisplayName":"Victor Castro","configurationManagerClientEnabledFeatures":null,"deviceHealthAttestationState":null,"subscriberCarrier":"","meid":"","totalStorageSpaceInBytes":500106788864,"freeStorageSpaceInBytes":432788209664,"managedDeviceName":"castro_Windows_1/10/2021_9:19 PM","partnerReportedThreatState":"unknown"}


Clearly the device is enrolled and CPPM +MS Intune are talking, it's just that Intune isn't returning the ethernet MAC with the v1.0 Graph API.

Any idea if we change change to the beta Graph API?

Thanks,
Victor

Intune Extension log in Aruba ClearPass when ClearPass attempts a sync:

'The device "DESKTOP-9T9P8D0" (27f2f00a-9a83-43ed-0000-111111111111}​​​​​​​​ does not have a MAC Address. Unable to process it.'

Intune Extension log in Aruba ClearPass when user tries to authenticate:

'Intune - The endpoint with the MAC Address 00-19-0e-16-3a-80 does not have an "Intune ID".'

• Screenshot of device hardware showing the device name, Intune Device ID and Ethernet MAC.  Again, this works with wireless clients.
  
  To be clear, we have tested a laptop with both wired and wireless NICs.  On the same machine, wireless works associated to an Aruba network.  Wired does not work, when performing dot1x against a Cisco switch.

I think I've narrowed down the issue. 

It looks like the Microsoft Graph REST API v1.0 only has the wiFiMacAddress defined, while the beta API has an ethernetMacAddress.  I suspect this is likely the issue. 

v1.0 API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-1.0
Beta API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-beta

I've attempted to add the ethernetMacAddress to the intuneAttributes section of the Intune extension configuration in CPPM but that just returns the following error: 

[2021-01-10T21:42:36.481] [ERROR] Intune - {"error":{"code":"BadRequest","message":"Parsing OData Select and Expand failed: Could not find a property named 'ethernetMacAddress' on type 'microsoft.graph.managedDevice'.","innerError":{"date":"2021-01-11T02:42:48","request-id

Another change I made was to have the extension pull all items, not just updated ones, as a result I'm seeing my wired-only devices being pulled down, but not added to the endpoint database as a result of no MAC address being available:

[2021-01-10T22:00:01.204] [WARN] Intune - The device "DESKTOP-D80VMRE" (4c40059c-9afa-43b5-831d-c39b8a4b7170} does not have a MAC Address. Unable to process it.

[2021-01-10T22:00:01.204] [DEBUG] Intune - {"id":"xxxx-9afa-xxxx","wiFiMacAddress":"","deviceName":"DESKTOP-D80VMRE","model":"OptiPlex 9020","osVersion":"10.0.18363.1237","operatingSystem":"Windows","userId":"xxxx-d040-4694-9xxxx","managedDeviceOwnerType":"personal","enrolledDateTime":"2021-01-10T21:19:27Z","lastSyncDateTime":"2021-01-11T01:25:23Z","complianceState":"compliant","jailBroken":"Unknown","managementAgent":"mdm","easActivated":true,"easDeviceId":"fffffBC30","easActivationDateTime":"0001-01-01T00:00:00Z","azureADRegistered":true,"deviceEnrollmentType":"windowsAutoEnrollment","activationLockBypassCode":null,"emailAddress":"castrov@xyz.com","azureADDeviceId":"-444c-bfd1-x","deviceRegistrationState":"registered","deviceCategoryDisplayName":"Unknown","isSupervised":false,"exchangeLastSuccessfulSyncDateTime":"0001-01-01T00:00:00Z","exchangeAccessState":"none","exchangeAccessStateReason":"none","remoteAssistanceSessionUrl":null,"remoteAssistanceSessionErrorDetails":null,"isEncrypted":true,"userPrincipalName":"castrov@","manufacturer":"Dell Inc.","imei":"","complianceGracePeriodExpirationDateTime":"9999-12-31T23:59:59Z","serialNumber":"3kk2","phoneNumber":"","androidSecurityPatchLevel":"","userDisplayName":"Victor Castro","configurationManagerClientEnabledFeatures":null,"deviceHealthAttestationState":null,"subscriberCarrier":"","meid":"","totalStorageSpaceInBytes":500106788864,"freeStorageSpaceInBytes":432788209664,"managedDeviceName":"castro_Windows_1/10/2021_9:19 PM","partnerReportedThreatState":"unknown"}


Clearly the device is enrolled and CPPM +MS Intune are talking, it's just that Intune isn't returning the ethernet MAC with the v1.0 Graph API.

Any idea if we change change to the beta Graph API?

Thanks,
Victor

Intune Extension log in Aruba ClearPass when ClearPass attempts a sync:

'The device "DESKTOP-9T9P8D0" (27f2f00a-9a83-43ed-0000-111111111111}​​​​​​​​ does not have a MAC Address. Unable to process it.'

Intune Extension log in Aruba ClearPass when user tries to authenticate:

'Intune - The endpoint with the MAC Address 00-19-0e-16-3a-80 does not have an "Intune ID".'

• Screenshot of device hardware showing the device name, Intune Device ID and Ethernet MAC.  Again, this works with wireless clients.
  
  To be clear, we have tested a laptop with both wired and wireless NICs.  On the same machine, wireless works associated to an Aruba network.  Wired does not work, when performing dot1x against a Cisco switch.

I think I've narrowed down the issue. 

It looks like the Microsoft Graph REST API v1.0 only has the wiFiMacAddress defined, while the beta API has an ethernetMacAddress.  I suspect this is likely the issue. 

v1.0 API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-1.0
Beta API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-beta

I've attempted to add the ethernetMacAddress to the intuneAttributes section of the Intune extension configuration in CPPM but that just returns the following error: 

[2021-01-10T21:42:36.481] [ERROR] Intune - {"error":{"code":"BadRequest","message":"Parsing OData Select and Expand failed: Could not find a property named 'ethernetMacAddress' on type 'microsoft.graph.managedDevice'.","innerError":{"date":"2021-01-11T02:42:48","request-id

Another change I made was to have the extension pull all items, not just updated ones, as a result I'm seeing my wired-only devices being pulled down, but not added to the endpoint database as a result of no MAC address being available:

[2021-01-10T22:00:01.204] [WARN] Intune - The device "DESKTOP-D80VMRE" (4c40059c-9afa-43b5-831d-c39b8a4b7170} does not have a MAC Address. Unable to process it.

[2021-01-10T22:00:01.204] [DEBUG] Intune - {"id":"xxxx-9afa-xxxx","wiFiMacAddress":"","deviceName":"DESKTOP-D80VMRE","model":"OptiPlex 9020","osVersion":"10.0.18363.1237","operatingSystem":"Windows","userId":"xxxx-d040-4694-9xxxx","managedDeviceOwnerType":"personal","enrolledDateTime":"2021-01-10T21:19:27Z","lastSyncDateTime":"2021-01-11T01:25:23Z","complianceState":"compliant","jailBroken":"Unknown","managementAgent":"mdm","easActivated":true,"easDeviceId":"fffffBC30","easActivationDateTime":"0001-01-01T00:00:00Z","azureADRegistered":true,"deviceEnrollmentType":"windowsAutoEnrollment","activationLockBypassCode":null,"emailAddress":"castrov@xyz.com","azureADDeviceId":"-444c-bfd1-x","deviceRegistrationState":"registered","deviceCategoryDisplayName":"Unknown","isSupervised":false,"exchangeLastSuccessfulSyncDateTime":"0001-01-01T00:00:00Z","exchangeAccessState":"none","exchangeAccessStateReason":"none","remoteAssistanceSessionUrl":null,"remoteAssistanceSessionErrorDetails":null,"isEncrypted":true,"userPrincipalName":"castrov@","manufacturer":"Dell Inc.","imei":"","complianceGracePeriodExpirationDateTime":"9999-12-31T23:59:59Z","serialNumber":"3kk2","phoneNumber":"","androidSecurityPatchLevel":"","userDisplayName":"Victor Castro","configurationManagerClientEnabledFeatures":null,"deviceHealthAttestationState":null,"subscriberCarrier":"","meid":"","totalStorageSpaceInBytes":500106788864,"freeStorageSpaceInBytes":432788209664,"managedDeviceName":"castro_Windows_1/10/2021_9:19 PM","partnerReportedThreatState":"unknown"}


Clearly the device is enrolled and CPPM +MS Intune are talking, it's just that Intune isn't returning the ethernet MAC with the v1.0 Graph API.

Any idea if we change change to the beta Graph API?

Thanks,
Victor

Intune Extension log in Aruba ClearPass when ClearPass attempts a sync:

'The device "DESKTOP-9T9P8D0" (27f2f00a-9a83-43ed-0000-111111111111}​​​​​​​​ does not have a MAC Address. Unable to process it.'

Intune Extension log in Aruba ClearPass when user tries to authenticate:

'Intune - The endpoint with the MAC Address 00-19-0e-16-3a-80 does not have an "Intune ID".'

• Screenshot of device hardware showing the device name, Intune Device ID and Ethernet MAC.  Again, this works with wireless clients.
  
  To be clear, we have tested a laptop with both wired and wireless NICs.  On the same machine, wireless works associated to an Aruba network.  Wired does not work, when performing dot1x against a Cisco switch.

I think I've narrowed down the issue. 

It looks like the Microsoft Graph REST API v1.0 only has the wiFiMacAddress defined, while the beta API has an ethernetMacAddress.  I suspect this is likely the issue. 

v1.0 API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-1.0
Beta API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-beta

I've attempted to add the ethernetMacAddress to the intuneAttributes section of the Intune extension configuration in CPPM but that just returns the following error: 

[2021-01-10T21:42:36.481] [ERROR] Intune - {"error":{"code":"BadRequest","message":"Parsing OData Select and Expand failed: Could not find a property named 'ethernetMacAddress' on type 'microsoft.graph.managedDevice'.","innerError":{"date":"2021-01-11T02:42:48","request-id

Another change I made was to have the extension pull all items, not just updated ones, as a result I'm seeing my wired-only devices being pulled down, but not added to the endpoint database as a result of no MAC address being available:

[2021-01-10T22:00:01.204] [WARN] Intune - The device "DESKTOP-D80VMRE" (4c40059c-9afa-43b5-831d-c39b8a4b7170} does not have a MAC Address. Unable to process it.

[2021-01-10T22:00:01.204] [DEBUG] Intune - {"id":"xxxx-9afa-xxxx","wiFiMacAddress":"","deviceName":"DESKTOP-D80VMRE","model":"OptiPlex 9020","osVersion":"10.0.18363.1237","operatingSystem":"Windows","userId":"xxxx-d040-4694-9xxxx","managedDeviceOwnerType":"personal","enrolledDateTime":"2021-01-10T21:19:27Z","lastSyncDateTime":"2021-01-11T01:25:23Z","complianceState":"compliant","jailBroken":"Unknown","managementAgent":"mdm","easActivated":true,"easDeviceId":"fffffBC30","easActivationDateTime":"0001-01-01T00:00:00Z","azureADRegistered":true,"deviceEnrollmentType":"windowsAutoEnrollment","activationLockBypassCode":null,"emailAddress":"castrov@xyz.com","azureADDeviceId":"-444c-bfd1-x","deviceRegistrationState":"registered","deviceCategoryDisplayName":"Unknown","isSupervised":false,"exchangeLastSuccessfulSyncDateTime":"0001-01-01T00:00:00Z","exchangeAccessState":"none","exchangeAccessStateReason":"none","remoteAssistanceSessionUrl":null,"remoteAssistanceSessionErrorDetails":null,"isEncrypted":true,"userPrincipalName":"castrov@","manufacturer":"Dell Inc.","imei":"","complianceGracePeriodExpirationDateTime":"9999-12-31T23:59:59Z","serialNumber":"3kk2","phoneNumber":"","androidSecurityPatchLevel":"","userDisplayName":"Victor Castro","configurationManagerClientEnabledFeatures":null,"deviceHealthAttestationState":null,"subscriberCarrier":"","meid":"","totalStorageSpaceInBytes":500106788864,"freeStorageSpaceInBytes":432788209664,"managedDeviceName":"castro_Windows_1/10/2021_9:19 PM","partnerReportedThreatState":"unknown"}


Clearly the device is enrolled and CPPM +MS Intune are talking, it's just that Intune isn't returning the ethernet MAC with the v1.0 Graph API.

Any idea if we change change to the beta Graph API?

Thanks,
Victor

Intune Extension log in Aruba ClearPass when ClearPass attempts a sync:

'The device "DESKTOP-9T9P8D0" (27f2f00a-9a83-43ed-0000-111111111111}​​​​​​​​ does not have a MAC Address. Unable to process it.'

Intune Extension log in Aruba ClearPass when user tries to authenticate:

'Intune - The endpoint with the MAC Address 00-19-0e-16-3a-80 does not have an "Intune ID".'

• Screenshot of device hardware showing the device name, Intune Device ID and Ethernet MAC.  Again, this works with wireless clients.
  
  To be clear, we have tested a laptop with both wired and wireless NICs.  On the same machine, wireless works associated to an Aruba network.  Wired does not work, when performing dot1x against a Cisco switch.

I think I've narrowed down the issue. 

It looks like the Microsoft Graph REST API v1.0 only has the wiFiMacAddress defined, while the beta API has an ethernetMacAddress.  I suspect this is likely the issue. 

v1.0 API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-1.0
Beta API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-beta

I've attempted to add the ethernetMacAddress to the intuneAttributes section of the Intune extension configuration in CPPM but that just returns the following error: 

[2021-01-10T21:42:36.481] [ERROR] Intune - {"error":{"code":"BadRequest","message":"Parsing OData Select and Expand failed: Could not find a property named 'ethernetMacAddress' on type 'microsoft.graph.managedDevice'.","innerError":{"date":"2021-01-11T02:42:48","request-id

Another change I made was to have the extension pull all items, not just updated ones, as a result I'm seeing my wired-only devices being pulled down, but not added to the endpoint database as a result of no MAC address being available:

[2021-01-10T22:00:01.204] [WARN] Intune - The device "DESKTOP-D80VMRE" (4c40059c-9afa-43b5-831d-c39b8a4b7170} does not have a MAC Address. Unable to process it.

[2021-01-10T22:00:01.204] [DEBUG] Intune - {"id":"xxxx-9afa-xxxx","wiFiMacAddress":"","deviceName":"DESKTOP-D80VMRE","model":"OptiPlex 9020","osVersion":"10.0.18363.1237","operatingSystem":"Windows","userId":"xxxx-d040-4694-9xxxx","managedDeviceOwnerType":"personal","enrolledDateTime":"2021-01-10T21:19:27Z","lastSyncDateTime":"2021-01-11T01:25:23Z","complianceState":"compliant","jailBroken":"Unknown","managementAgent":"mdm","easActivated":true,"easDeviceId":"fffffBC30","easActivationDateTime":"0001-01-01T00:00:00Z","azureADRegistered":true,"deviceEnrollmentType":"windowsAutoEnrollment","activationLockBypassCode":null,"emailAddress":"castrov@xyz.com","azureADDeviceId":"-444c-bfd1-x","deviceRegistrationState":"registered","deviceCategoryDisplayName":"Unknown","isSupervised":false,"exchangeLastSuccessfulSyncDateTime":"0001-01-01T00:00:00Z","exchangeAccessState":"none","exchangeAccessStateReason":"none","remoteAssistanceSessionUrl":null,"remoteAssistanceSessionErrorDetails":null,"isEncrypted":true,"userPrincipalName":"castrov@","manufacturer":"Dell Inc.","imei":"","complianceGracePeriodExpirationDateTime":"9999-12-31T23:59:59Z","serialNumber":"3kk2","phoneNumber":"","androidSecurityPatchLevel":"","userDisplayName":"Victor Castro","configurationManagerClientEnabledFeatures":null,"deviceHealthAttestationState":null,"subscriberCarrier":"","meid":"","totalStorageSpaceInBytes":500106788864,"freeStorageSpaceInBytes":432788209664,"managedDeviceName":"castro_Windows_1/10/2021_9:19 PM","partnerReportedThreatState":"unknown"}


Clearly the device is enrolled and CPPM +MS Intune are talking, it's just that Intune isn't returning the ethernet MAC with the v1.0 Graph API.

Any idea if we change change to the beta Graph API?

Thanks,
Victor

Intune Extension log in Aruba ClearPass when ClearPass attempts a sync:

'The device "DESKTOP-9T9P8D0" (27f2f00a-9a83-43ed-0000-111111111111}​​​​​​​​ does not have a MAC Address. Unable to process it.'

Intune Extension log in Aruba ClearPass when user tries to authenticate:

'Intune - The endpoint with the MAC Address 00-19-0e-16-3a-80 does not have an "Intune ID".'

• Screenshot of device hardware showing the device name, Intune Device ID and Ethernet MAC.  Again, this works with wireless clients.
  
  To be clear, we have tested a laptop with both wired and wireless NICs.  On the same machine, wireless works associated to an Aruba network.  Wired does not work, when performing dot1x against a Cisco switch.

I think I've narrowed down the issue. 

It looks like the Microsoft Graph REST API v1.0 only has the wiFiMacAddress defined, while the beta API has an ethernetMacAddress.  I suspect this is likely the issue. 

v1.0 API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-1.0
Beta API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-beta

I've attempted to add the ethernetMacAddress to the intuneAttributes section of the Intune extension configuration in CPPM but that just returns the following error: 

[2021-01-10T21:42:36.481] [ERROR] Intune - {"error":{"code":"BadRequest","message":"Parsing OData Select and Expand failed: Could not find a property named 'ethernetMacAddress' on type 'microsoft.graph.managedDevice'.","innerError":{"date":"2021-01-11T02:42:48","request-id

Another change I made was to have the extension pull all items, not just updated ones, as a result I'm seeing my wired-only devices being pulled down, but not added to the endpoint database as a result of no MAC address being available:

[2021-01-10T22:00:01.204] [WARN] Intune - The device "DESKTOP-D80VMRE" (4c40059c-9afa-43b5-831d-c39b8a4b7170} does not have a MAC Address. Unable to process it.

[2021-01-10T22:00:01.204] [DEBUG] Intune - {"id":"xxxx-9afa-xxxx","wiFiMacAddress":"","deviceName":"DESKTOP-D80VMRE","model":"OptiPlex 9020","osVersion":"10.0.18363.1237","operatingSystem":"Windows","userId":"xxxx-d040-4694-9xxxx","managedDeviceOwnerType":"personal","enrolledDateTime":"2021-01-10T21:19:27Z","lastSyncDateTime":"2021-01-11T01:25:23Z","complianceState":"compliant","jailBroken":"Unknown","managementAgent":"mdm","easActivated":true,"easDeviceId":"fffffBC30","easActivationDateTime":"0001-01-01T00:00:00Z","azureADRegistered":true,"deviceEnrollmentType":"windowsAutoEnrollment","activationLockBypassCode":null,"emailAddress":"castrov@xyz.com","azureADDeviceId":"-444c-bfd1-x","deviceRegistrationState":"registered","deviceCategoryDisplayName":"Unknown","isSupervised":false,"exchangeLastSuccessfulSyncDateTime":"0001-01-01T00:00:00Z","exchangeAccessState":"none","exchangeAccessStateReason":"none","remoteAssistanceSessionUrl":null,"remoteAssistanceSessionErrorDetails":null,"isEncrypted":true,"userPrincipalName":"castrov@","manufacturer":"Dell Inc.","imei":"","complianceGracePeriodExpirationDateTime":"9999-12-31T23:59:59Z","serialNumber":"3kk2","phoneNumber":"","androidSecurityPatchLevel":"","userDisplayName":"Victor Castro","configurationManagerClientEnabledFeatures":null,"deviceHealthAttestationState":null,"subscriberCarrier":"","meid":"","totalStorageSpaceInBytes":500106788864,"freeStorageSpaceInBytes":432788209664,"managedDeviceName":"castro_Windows_1/10/2021_9:19 PM","partnerReportedThreatState":"unknown"}


Clearly the device is enrolled and CPPM +MS Intune are talking, it's just that Intune isn't returning the ethernet MAC with the v1.0 Graph API.

Any idea if we change change to the beta Graph API?

Thanks,
Victor

Intune Extension log in Aruba ClearPass when ClearPass attempts a sync:

'The device "DESKTOP-9T9P8D0" (27f2f00a-9a83-43ed-0000-111111111111}​​​​​​​​ does not have a MAC Address. Unable to process it.'

Intune Extension log in Aruba ClearPass when user tries to authenticate:

'Intune - The endpoint with the MAC Address 00-19-0e-16-3a-80 does not have an "Intune ID".'

• Screenshot of device hardware showing the device name, Intune Device ID and Ethernet MAC.  Again, this works with wireless clients.
  
  To be clear, we have tested a laptop with both wired and wireless NICs.  On the same machine, wireless works associated to an Aruba network.  Wired does not work, when performing dot1x against a Cisco switch.

Has this been fixed in the 6.1.7 version of the Extension? I can get wireless to work but can't get Wired 802.1x to work as the Intune Values are not populated in the Auth Request.

I think I've narrowed down the issue. 

It looks like the Microsoft Graph REST API v1.0 only has the wiFiMacAddress defined, while the beta API has an ethernetMacAddress.  I suspect this is likely the issue. 

v1.0 API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-1.0
Beta API: https://docs.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice?view=graph-rest-beta

I've attempted to add the ethernetMacAddress to the intuneAttributes section of the Intune extension configuration in CPPM but that just returns the following error: 

[2021-01-10T21:42:36.481] [ERROR] Intune - {"error":{"code":"BadRequest","message":"Parsing OData Select and Expand failed: Could not find a property named 'ethernetMacAddress' on type 'microsoft.graph.managedDevice'.","innerError":{"date":"2021-01-11T02:42:48","request-id

Another change I made was to have the extension pull all items, not just updated ones, as a result I'm seeing my wired-only devices being pulled down, but not added to the endpoint database as a result of no MAC address being available:

[2021-01-10T22:00:01.204] [WARN] Intune - The device "DESKTOP-D80VMRE" (4c40059c-9afa-43b5-831d-c39b8a4b7170} does not have a MAC Address. Unable to process it.

[2021-01-10T22:00:01.204] [DEBUG] Intune - {"id":"xxxx-9afa-xxxx","wiFiMacAddress":"","deviceName":"DESKTOP-D80VMRE","model":"OptiPlex 9020","osVersion":"10.0.18363.1237","operatingSystem":"Windows","userId":"xxxx-d040-4694-9xxxx","managedDeviceOwnerType":"personal","enrolledDateTime":"2021-01-10T21:19:27Z","lastSyncDateTime":"2021-01-11T01:25:23Z","complianceState":"compliant","jailBroken":"Unknown","managementAgent":"mdm","easActivated":true,"easDeviceId":"fffffBC30","easActivationDateTime":"0001-01-01T00:00:00Z","azureADRegistered":true,"deviceEnrollmentType":"windowsAutoEnrollment","activationLockBypassCode":null,"emailAddress":"castrov@xyz.com","azureADDeviceId":"-444c-bfd1-x","deviceRegistrationState":"registered","deviceCategoryDisplayName":"Unknown","isSupervised":false,"exchangeLastSuccessfulSyncDateTime":"0001-01-01T00:00:00Z","exchangeAccessState":"none","exchangeAccessStateReason":"none","remoteAssistanceSessionUrl":null,"remoteAssistanceSessionErrorDetails":null,"isEncrypted":true,"userPrincipalName":"castrov@","manufacturer":"Dell Inc.","imei":"","complianceGracePeriodExpirationDateTime":"9999-12-31T23:59:59Z","serialNumber":"3kk2","phoneNumber":"","androidSecurityPatchLevel":"","userDisplayName":"Victor Castro","configurationManagerClientEnabledFeatures":null,"deviceHealthAttestationState":null,"subscriberCarrier":"","meid":"","totalStorageSpaceInBytes":500106788864,"freeStorageSpaceInBytes":432788209664,"managedDeviceName":"castro_Windows_1/10/2021_9:19 PM","partnerReportedThreatState":"unknown"}


Clearly the device is enrolled and CPPM +MS Intune are talking, it's just that Intune isn't returning the ethernet MAC with the v1.0 Graph API.

Any idea if we change change to the beta Graph API?

Thanks,
Victor

Intune Extension log in Aruba ClearPass when ClearPass attempts a sync:

'The device "DESKTOP-9T9P8D0" (27f2f00a-9a83-43ed-0000-111111111111}​​​​​​​​ does not have a MAC Address. Unable to process it.'

Intune Extension log in Aruba ClearPass when user tries to authenticate:

'Intune - The endpoint with the MAC Address 00-19-0e-16-3a-80 does not have an "Intune ID".'

• Screenshot of device hardware showing the device name, Intune Device ID and Ethernet MAC.  Again, this works with wireless clients.
  
  To be clear, we have tested a laptop with both wired and wireless NICs.  On the same machine, wireless works associated to an Aruba network.  Wired does not work, when performing dot1x against a Cisco switch.