Forum Discussion
Required Apps assigned to dynamic group are being skipped during pre-provisioning?
I have a few dynamic groups based on a group tag that gets assigned to the device during Intune enrollment. Each of those groups have a different set of applications that are installed on them. One of those dynamic groups just doesn't want to detect the required applications. There are supposed to be 5 apps. During pre-provisioning, it just jumps straight to the reseal page.
- If I let the device sit at the ESP page, the apps are installed in the background as if they aren't being tracked.
- If I quickly seal the machine before other apps are installed and unseal, it works like normal (tracking each of the apps and installing them).
I can confirm the following:
- The device is in the proper dynamic group
- The Autopilot deployment profile and ESP settings are correct
- All of the applications are Win32 packages and install successfully during ESP
- This same setup works with my other dynamic groups fine. And it has worked previously with the trouble group before. I didn't change anything
I tried:
- Removing and re-registering the device
I'm about to delete and recreate the dynamic group or try to create a static group and see if I get the same results. Everything looks fine and I haven't been able to find something in the logs that points to why it doesn't see the apps as required. Again, if I let it sit, the apps install in the background fine. It's just baffling since my other dynamic groups work fine.
Has anyone seen something similar?
5 Replies
After a long set of back and forths MS support (long story), I had to remove a requirement script that I set on my applications and app tracking went back to normal.
For some reason, the script doesn't evaluate consistently. It will sometimes mark as "false" and then shortly after that evaluate as "true."
- When it evaluates as false, it will "skip" the app and continue with the others. The ones that evaluate properly are tracked.
- Shortly after the app is skipped, it evaluates as true later in ESP and will install silently.
All the script does is check the explorer process and see if it's running under with an account that matches "defaultuser." If it matches, the bool is true, else false. If true, the app will install. It ensures the apps only install during ESP. I don't believe it's an issue with my script because
- it was consistent prior to me making this post
- it evaluates as true when I run it manually during ESP, both with the defaultuser0 account and under the system account with psexec
MS believes it's my script but that this point, the ticket was open since April, apps are being tracked properly and I don't wanna fight anymore
Now it's happening to the static group I just created.
I sent the wipe command to the device in Intune and watched it wipe. It got to the OOBE page and now it's showing the same behavior of the dynamic group.
Hy, based on your description, is very strange what is happening, do you have any kind of filter on these applications, this could be a problem. The filters with assignments targeting the dynamics group could be causing this, as from my analysis they are evaluated very late.
Good luck!
Nope. No filters or anything like that.
I set up the static group just like I did the dynamic group and it worked first try.
I put in a ticket with MS but the juice might not be worth the squeeze since this group is basically my testing config and it’ll probably less than 5 machines in this group at a time.
Sucks but creating a static group and assigning all of the apps allowed it to work as normal
