azureblog.co.uk
← cd ~/events
// events/1506 · Intune MDM

Event ID 1506WiFiConfigurationServiceProvider: Node set value

The Wi-Fi CSP applied a setting from an Intune Wi-Fi profile, with the result.

LogMicrosoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
SourceMicrosoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
AreaIntune MDM

What to check

Confirm the result is 'The operation completed successfully'. If the event is missing, the Wi-Fi profile has not reached the device.

Find it with PowerShell

Run on the machine that logs it.

powershell2 lines
Get-WinEvent -FilterHashtable @{ LogName = 'Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin'; Id = 1506 } -MaxEvents 50 |
    Format-List TimeCreated, Id, Message

Hunt for it in Sentinel or Log Analytics

This works once a data collection rule sends the Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin log to your workspace, where it lands in the Event table.

kql5 lines
Event
| where TimeGenerated > ago(7d)
| where EventLog == "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin" and EventID == 1506
| project TimeGenerated, Computer, Source, RenderedDescription
| order by TimeGenerated desc

Related Intune MDM events

Search all 123 event IDs →