Skip to main content
3kidsinacoat
New Member
April 1, 2026
Question

Endpoint Deployment Failing, Showing Unsupported Operating System

  • April 1, 2026
  • 3 replies
  • 190 views

We have just migrated to FortiClient EMS 7.4.5 LinuxVM from FortiClient 7.2.12 WindowsVM. In that process we are trying to move from Active Directory to Microsoft Entra for controlling Manage Deployments. While deployments are working fine from the Active Directory side, the issue we are seeing is that Windows devices from the Entra side are not and showing "Unsupported Operating System"

All these devices are Windows and have been onboard from Intune and as this is a hybrid environment. The same device works fine on the Active Directory side.

I am sure I am missing something, but I have been through it a few times and I can see nothing wrong from the setup documents.

Anyone have any idea what I am missing?

3 replies

Jean-Philippe_P
Staff & Editor
Staff & Editor
April 6, 2026

Hello 3kidsinacoat, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Jean-Philippe - Fortinet Community Team
Jean-Philippe_P
Staff & Editor
Staff & Editor
April 7, 2026

Hello,

 

We are still looking for an answer to your question.

 

We will come back to you ASAP.

Jean-Philippe - Fortinet Community Team
Jean-Philippe_P
Staff & Editor
Staff & Editor
April 9, 2026

Hello 3kidsinacoat,

 

I found this answer, can you tell us if it helps, please?

 

To address the issue of endpoint deployment failing with an "unsupported operating system" error, let's break down the potential causes and solutions based on the provided context:

 

Possible Causes and Solutions

  1. Compatibility Matrix Signature:

    • Ensure that the EMS has downloaded the latest EMS/FCT upgrade & compatibility matrix signature from FortiGuard. This signature is crucial as it provides the necessary operating system support information for FortiClient versions.
    • Verify that the FortiClient version you are trying to deploy is supported on the Windows version of the endpoints in your Microsoft Entra environment.
  2. Deployment Configuration:

    • Double-check the deployment configuration settings in EMS. Ensure that the correct endpoint groups are selected and that the deployment package is compatible with the operating systems of the endpoints.
    • Make sure that the security groups from Microsoft Entra include device objects, as EMS requires this to assign installers correctly.
  3. Network and Firewall Settings:

    • Ensure that EMS has the necessary network access to the endpoints. This includes allowing SMB and RPC traffic (ports 445 and 135) and access to the LDAP server (ports 389 or 636 for LDAPS).
    • Verify that network discovery is enabled on both EMS and the endpoints.
  4. Endpoint Configuration:

    • Check that the necessary services on the endpoints are set correctly, such as Remote Registry, Task Scheduler, and Windows Installer.
    • Ensure that local firewalls on the endpoints are configured to allow necessary traffic or are disabled for testing purposes.
  5. Testing and Verification:

    • Conduct tests to ensure EMS can access and copy files to the endpoint directories (e.g., \\<endpoint>\C$\Windows\Temp).
    • Verify that EMS can open the remote registry and that endpoints can download packages from the FortiClient Installer URL.

 

Follow-ups and Clarification Questions

  • Compatibility Check: Have you verified that the FortiClient version you are deploying is supported on the specific Windows versions in your Microsoft Entra environment?
  • Deployment Configuration: Can you confirm that the deployment configuration in EMS is set up correctly with the appropriate endpoint groups and deployment packages?
  • Network Access: Are there any network restrictions or firewall settings that might be blocking EMS from accessing the endpoints in the Microsoft Entra environment?
  • Endpoint Services: Have you checked that all necessary services on the endpoints are running and configured correctly?

 

By addressing these areas, you should be able to identify and resolve the issue with the unsupported operating system error during deployment. If the problem persists, further investigation into the specific configurations and logs may be necessary.

Jean-Philippe - Fortinet Community Team