Intune Extensions will not install

It’s a common issue, but still worth mentioning. Being a Full Administrator is NOT the same as having full control of all features in the ConfigMgr console. An example is enabling new Intune Extensions like the one released in late December.

As usual you are prompted when new Extensions are available. In this example I’m logged in as Full Administrator and trying to enable the extension in the Administration workspace.


All looks good, right until the point where I accept the License Terms,


And boom! I do not have the required permissions even though I’m a Full Administrator!


Rule #7 when installing a ConfigMgr site is to create a new ConfigMgr administrator group right after the installation of the site and make sure you clone all the permissions from the installation account. This was easily done in previous versions of ConfigMgr/SMS, in ConfigMgr 2012 it has changed a little. Right click the security group you have added, in Properties select Security Scopes. Click Add and Select “All Security Scope”.


With all security scopes assigned your account will be able to install the latest extensions.

By | 2015-01-02T10:36:21+00:00 January 2nd, 2015|Configuration Manager (SCCM)|0 Comments

About the Author:

Kent Agerlund
Microsoft Regional Director, Enterprise Mobility MVP. Microsoft Certified Trainer and Principal consultant. I have been working with Enterprise client management since 1992. Co-founder of System Center User Group Denmark in 2009. Certified MCITP: Enterprise Administrator, MCSA+Messaing, and much more. Member of: Microsoft Denmark System Center Partner Expert Team The Danish Technet Influencers program System Center Influencers Program.

Leave A Comment