topic Intel EMA New AD Group Error in Intel vPro® Platform

Intel EMA New AD Group Error

Yauheni — Thu, 12 Dec 2024 07:34:28 GMT

Hello,

I have installed and configured Intel EMA server and use Azure SSO to login users from my organization. It works well. I see there is an option to add whole AD groups to server and use them to manage access rights. But I encounter a problem (Internal server Error) when I try to add any group from Azure AD. Is it even possible or I do some mistakes during setup process?

Re: Intel EMA New AD Group Error

Yauheni — Thu, 12 Dec 2024 09:33:43 GMT

It happens due to lack of api permissions for groups for appRegistration for Azure. It is confusing because I didn't find any information about this permissions in intel-ema-server-installation-and-maintenance-guide.

Re:Intel EMA New AD Group Error

vij1 — Fri, 13 Dec 2024 00:40:29 GMT

Hello Yauheni,

Greetings!

Could you please share the details below:

OS version of the Server

SQL version

Location of both; (physical, virtual)

Will they be on the same server machine?

Authentication mode: Local, Azure AD, or Windows AD

Intel® EMA software version:

Regards,

Vijay N

Intel Customer Support.

intel.com/vpro

Re:Intel EMA New AD Group Error

vij1 — Tue, 17 Dec 2024 22:54:42 GMT

Hello Yauheni,

I am following up on the case and wondering if I can help you with anything else. Look forward to your response.

Regards,

Vijay N

Re: Intel EMA New AD Group Error

Yauheni — Wed, 18 Dec 2024 06:40:11 GMT

As I mentioned earlier I fixed my problem by adding additional API permissions for appRegistarion.

Re:Intel EMA New AD Group Error

vij1 — Wed, 18 Dec 2024 17:58:17 GMT

Hello Yauheni,

Greetings!

Thank you for your response.

Please find the Intel® Endpoint Management Assistant (Intel® EMA) Deployment Guide for Microsoft Azure at the link below:

Intel® EMA Deployment Guide for Azure

https://www.google.com/url?sa=i&url=https%3A%2F%2Fcdrdv2-public.intel.com%2F841816%2Fintel-ema-web-deployment-guide-fo-azue.pdf&psig=AOvVaw1Y1i8yI1CIqqx_X7fr5w44&ust=1734630578669000&source=images&cd=vfe&opi=89978449&ved=0CAYQrpoMahcKEwiAsIjN8LGKAxUAAAAAHQAAAAAQBA

If you need any assistance in the future, please feel free to reach out to us.

Best regards,

Vijay N

Re: Intel EMA New AD Group Error

Tristan_T_Intel — Mon, 10 Feb 2025 19:17:15 GMT

Could you share a screenshot or details on what permission change?

Re: Intel EMA New AD Group Error

Yauheni — Tue, 11 Feb 2025 07:01:33 GMT

Yes, to work with AD groups via Azure SSO you need to add group permissions for App registration in Azure.

It is confusing because in intel-ema-server-installation-and-maintenance-guide manual they mention only "User.Read.All" permission

Re: Intel EMA New AD Group Error

Chrisatwork — Wed, 12 Mar 2025 13:32:23 GMT

I have the same error using standard on prem AD and LDAP, when trying to add AD Groups using the EMA tool and AD distinguished name.
(Internal Server Error)

What could cause that.
Very frustrating.