This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Win10 cloud-only Intune managed, 1909 and 2004 devices. I get:
"Firewall Error -2016345612"
ERROR CODE
0x87d101f4
ERROR DETAILS
Syncml(500): The recipient encountered an unexpected condition which prevented it from fulfilling the request
I noticed that first when I create the compliance policy, it is green but after some usage, it turns to error. Seems like a bug. I use only Win10 protection, no 3rd party and Firewall is own and Security Center is green in Win10.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 11%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJH%3C/text%3E%3C/svg%3E)
Hi, I had the same issue with device compliance and the same error code. The way i fixed this was by pushing all updates and re-syncing from the user side. Settings > Accounts > access work or school > info button on your tenant > sync.
Facing the same issue with our tenant too. Has anyone able to find the reason and fix for this please?
Regards
Aravinth M
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 37%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEM%3C/text%3E%3C/svg%3E)
This worked for me. thanks
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 1%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EES%3C/text%3E%3C/svg%3E)
We have the same issue only on Win11 devices, done all that users suggest no luck.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 21%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMJ%3C/text%3E%3C/svg%3E)
The sync from the client PC worked for me.
"Settings > Accounts > access work or school > info button on your tenant > sync."
Didn't do a push of anything. Only the sync. Weird problem.
Hello. This issue was fixed by itself, but in new computers I see similar from time to time. Usually, when go to Company Portal and Devices, and check for access and compliance, the issue eventually gets fixed.
Same issue here on Windows 11.
ERROR CODE
0x87d101f4
ERROR DETAILS
Syncml(500): The recipient encountered an unexpected condition which prevented it from fulfilling the request
Same issues as here :
https://www.reddit.com/r/Intune/comments/f37oi5/device_showing_not_compliant_but_is_compliant_oo/
https://www.reddit.com/r/Intune/comments/jg2sov/antivirus_syncml500_the_recipient_encountered_an/
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 57.00000000000001%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGE%3C/text%3E%3C/svg%3E)
I got same error (-2016345612 & 0x87d101f4) with a Always On VPN user tunnel device configuration policy. Tried multiple intune manual syncs (Settings, Accounts, Access work or school, click AD domain, Info, Sync) & reboots & waiting 2hr yielded no change. I then deleted the Windows User Profile & when they logged back in to create new win user profile VPN & policy shows success no more errors
One of my specialist - collegue is complainging about the same issue.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 15%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEZ%3C/text%3E%3C/svg%3E)
Since a few days, we have a few devices too, which are not compliant because of AV and firewall. The devices "say" all is ok.
Hi,
Is there a way to identify this that the device is not getting compliant because of Antivirus and Firewall.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(99.2, 99%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
Yes, under Enpoint Manager (endpoint.microsoft.com), under devices, Windows, select your non-compliant device, then under device compliance, it will display which rule trigger the non-compliant state, and when you click on it, it will display which component of the rule is non-compliant. Example here:
In our tenant, the device shows compliant however the built-in compliance policy is still failing.
Due to this the Corporate VPN is not visible on the device.
I have tried syncing the device via the Company portal but still the same.
Any help would be appreciated.
Regards,
Ashish Arya