![windows monitor usb traffic windows monitor usb traffic](http://www.skyward-soft.com/images/tm_big.jpg)
- #Windows monitor usb traffic install
- #Windows monitor usb traffic windows 10
- #Windows monitor usb traffic code
If we analyze the SyncML stream we find evidence that Intune is actually doing that:Īs seen it is really useful and helps to get better understanding of the MDM Sync and underlying protocols.
![windows monitor usb traffic windows monitor usb traffic](https://docs.microsoft.com/en-us/windows-hardware/drivers/portable/images/framesummary1.png)
Therefore I would assume that Intune queries the device to gather the hardware hash of the device.
#Windows monitor usb traffic windows 10
Viewing the OMA DM protocol and the xml-based SyncML representation helps me to deepen the understanding and check if an actual setting configured in Intune is transferred to the Windows 10 client and actually set.įor example I’ve setup my tenant to automatically convert devices to Autopilot devices with the following setting on the Autopilot profile:
![windows monitor usb traffic windows monitor usb traffic](http://www.usblyzer.com/img/tour/preferences-dialog-capture-tab-bg.png)
#Windows monitor usb traffic install
To provide the ability to deliver ongoing updates to the tool, I added a small update functionality which will indicate if there is a new version available and on manual check (Menu Item > Help > Check for SyncML Viewer Update) it will trigger a download and install of the new version: This should give you an easy way to analyse what’s actually going on.
![windows monitor usb traffic windows monitor usb traffic](https://m.media-amazon.com/images/I/7104drTKCsL._AC_SS450_.jpg)
I’ve added the response status codes and made them easily searchable:
#Windows monitor usb traffic code
To step through this a bit easier I parse them and provide a specialized view for it on the second tab, which lists individual sessions and exchanged messages belonging to that session:įor protocol analysis it is quite handy to have the status code reference from the official OMA SyncML Representation Protocol documentation available. The protocol is designed to have session information for one sync action and exchanged messages belonging to that SyncML session. You can easily look through the complete sync session and even search for elements: SyncML Viewer will show in real time all SyncML xml-based representation protocol information, exchanged between the Windows 10 client and the management system (Intune), in one long stream: Here a direct link to the zip archived program: The project is maintained on GitHub here: After quite a bit of research regarding the correct ETW providers to use (special thanks to Matt Graeber for providing detailed ETW provider details here) and suitable layout elements for presentation, I finally have a version 1.0 as community release. Therefore I decided to build my own tool named SyncML Viewer. I wanted to be able to start a small tool and getting all protocol information I want in a proper view. Despite of the initial setup the approach is great and delivers deep insights, but personally I wanted to have something more simple for troubleshooting. The Message Analyzer approach Michael described felt a bit complicated to setup (choosing provider and setup columns to filter for the relevant events). There is a great blog post from Michael Niehaus ( Want to watch the MDM client activity in real time?), which inspired me to write this small troubleshooting helper tool. In fact this isn’t a special hack, Microsoft provides so called ETW providers which are able to give you all relevant information. I’ve written a small tool to view the SyncML representation protocol on Windows 10 in real time. Do you ever wanted to know what is going on behind the curtain when clicking MDM Sync on Windows 10? Gaining insights how the SyncML representation protocol is used during device management of Windows 10 clients? With SyncML Viewer you have the chance to easily get deep insights now.