Intune scanning on GCC tenants

[jcaruso]

I am attempting to setup Intune scanning against our GCC High tenant.

I am getting an error: No valid or working credentials found for tenant Id 'redacted'

I have followed the instructions at https://community.lansweeper.com/t5/scanning-your-network/scan-mobile-devices-through-microsoft-intu... and added DeviceManagementManagedDevices.Read.All permissions to our existing Lansweeper Microsoft Cloud Services app.

These credentials are already successfully being used to send Lansweeper emails, so I know that it is functional in that regard. I have double checked I am pasting the correct values.

However, in the email configuration we have to specifically set Graph endpoint to Default and Government Community Cloud (GCC) before it will work.

There is no setting for Graph endpoint in the scanning credentials, which makes me think that is why it's not scanning.

Is there a way to change the Graph endpoint to GCC for Scanning Credentials? If not, are there plans to add this?

[DavidPK]

Hi 

Thank you for the detailed explanation. At this time, configuring the Graph endpoint for GCC or GCC High within the Intune scanning credentials is not supported. Intune discovery currently uses the standard commercial Graph endpoint, and there is no option available in the UI to switch the endpoint for scanning.

The good news is that support for GCC/GCC High Intune scanning is on our roadmap, as we understand how important this functionality is for customers in government cloud environments. However, we do not yet have an estimated timeline for when this capability will be available.