Home

Intune Management Extension not installing

%3CLINGO-SUB%20id%3D%22lingo-sub-142443%22%20slang%3D%22en-US%22%3EIntune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-142443%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20testing%20Intune%2FEMS%20on%20Windows%2010%20(1709)%20PCs%20and%20trying%20to%20get%20Powershell%20scripts%20to%20run%20without%20success.%20I%20think%20the%20issue%20is%20with%20the%20Intune%20Management%20Extension%20not%20installing%20but%20cant%20find%20much%20information%20on%20how%20to%20troubleshoot%20this%20particular%20issue.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECan%20anyone%20advise%20how%20I%20get%20Powershell%20scripts%20to%20run%20%3F%20TIA%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EScott%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-142443%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-401009%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-401009%22%20slang%3D%22en-US%22%3E%3CP%3EGood%20news%20to%20all%2C%20the%20%22%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fin-development%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EIntune%20In%20Development%3C%2FA%3E%22%20site%20does%20list%20a%20feature%20which%20will%20be%20released%20soon%20that%20solves%20the%20agent%20install%20on%20devices%20not%20auto-enrolled%2C%20see%20here%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20id%3D%22configure-your-win32-apps-to-be-installed-on-intune-enrolled-azure-ad-joined-devices-%22%20class%3D%22heading-with-anchor%22%20id%3D%22toc-hId-1423196131%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%3EConfigure%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%3EYou'll%20be%20able%20to%20assign%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices.%20For%20more%20information%20about%20Win32%20apps%20in%20Intune%2C%20see%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fapps-win32-app-management%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%20data-linktype%3D%22relative-path%22%3EWin32%20app%20management%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fin-development%23configure-your-win32-apps-to-be-installed-on-intune-enrolled-azure-ad-joined-devices-%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fin-development%23configure-your-win32-apps-to-be-installed-on-intune-enrolled-azure-ad-joined-devices-%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-390653%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-390653%22%20slang%3D%22en-US%22%3EIn%20my%20case%20it%20is%20enrolled%20through%20OOBE%20but%20a%20different%20issue.%20Basically%20if%20you%20go%20through%202%20x%20Reset%20this%20PC%20the%20agent%20does%20not%20come%20down.%20I%20found%20if%20I%20leave%20the%20device%20for%20about%202-4%20days%20it%20will%20eventually%20come%20down.%20This%20is%20just%20in%20my%20lab%20but%20easy%20to%20reproduce%20over%20and%20over%20again.%20I%20have%20not%20tried%20lately%20since%20a%20month%20or%20so.%20Just%20an%20observation%20and%20not%20an%20urgent%20issue.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-390619%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-390619%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3EWe%20have%20around%20250%20manually%20enrolled%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-365143%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-365143%22%20slang%3D%22en-US%22%3E%3CP%3EHmm%2C%20it%20certainly%20looks%20like%20it%20could%20be%20something%20like%20that.%20Sometimes%20it%20takes%205min%20to%20uninstall%2C%20sometimes%2020min%20or%20longer.%3C%2FP%3E%3CP%3EI%20don't%20really%20see%20why%20it%20matters%20whether%20a%20machine%20is%20auto-enrolled%20via%20GPO%20or%20manually%20joined%20to%20be%20supported%20for%20powershell%20usage.%26nbsp%3B%3CBR%20%2F%3ELet's%20hope%20Microsoft%20adds%20the%20functionality%20soon.%20In%20my%20case%20it's%20around%20100%20devices.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-365109%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-365109%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20might%20be%20that%20MS%20is%20pushing%20this%20uninstall%20as%20the%20device%20is%20not%20meant%20to%20be%20an%20agent%20device%2C%20but%20this%20is%20pure%20speculation.%20Microsoft%20is%20aware%20of%20this%20problem%20that%20people%20want%20to%20use%20the%20agent%20without%20going%20through%20the%20OOBE%20enrollment%20again.%3C%2FP%3E%0A%3CP%3ECan%20you%20and%20others%20in%20this%20thread%20provide%20me%20numbers%20of%20effected%20clients%3F%20How%20many%20clients%20do%20you%20want%20to%20have%20under%20Intune%20agent%20management%20and%20are%20currently%20blocked%20due%20to%20this.%3C%2FP%3E%0A%3CP%3EI'm%20asking%20to%20share%20the%20details%20of%20your%20deployment%20blockers%20with%20Intune%20PG.%20Are%20we%20talking%20about%20just%20a%20few%20devices%20or%20several%20thousand%3F%20Thanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-364716%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-364716%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20the%20same%20problem.%3C%2FP%3E%3CP%3EBecause%20all%20devices%20are%20manually%20joined%20to%20intune%2C%20they%20don't%20receive%20the%20Intune%20Management%20Extension.%3C%2FP%3E%3CP%3EI%20want%20to%20use%20powershell%20scripts%2C%20so%20I%20tried%20installing%20the%20extension%20manually%20as%20mentioned%20here%20(IntuneWindowsAgent.msi).%3C%2FP%3E%3CP%3EIt%20installs%20succesfully%20and%20I%20can%20see%20the%20extension%20in%20programs%20%26amp%3B%20features%20and%20see%20the%20files%20in%20C%3A%5CProgram%20Files%20(x86)%5CMicrosoft%20Intune%20Management%20Extension.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EHowever%2C%20after%20some%20minutes%2C%20it%20somehow%20uninstalls%20itself%3B%20the%20files%20are%20gone%20from%20the%20folder%20and%20it%20disappeared%20from%20apps%20%26amp%3B%20features.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EEvent%20manager%3A%3CBR%20%2F%3EEvent%20ID%2011724%20Product%3A%20Microsoft%20Intune%20Management%20Extension%20--%20Removal%20completed%20successfully.%3C%2FP%3E%3CP%3EEvent%20ID%201034%20Windows%20Installer%20removed%20the%20product.%20Product%20Name%3A%20Microsoft%20Intune%20Management%20Extension.%20Product%20Version%3A%201.16.105.0.%20Product%20Language%3A%201033.%20Manufacturer%3A%20Microsoft%20Corporation.%20Removal%20success%20or%20error%20status%3A%200.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F106235%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%20or%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F283805%22%20target%3D%22_blank%22%3E%40JarrettB%3C%2FA%3E%20Any%20idea%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-364690%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-364690%22%20slang%3D%22en-US%22%3E%3CP%3EI%20also%20have%20the%20same%20issue.%20Because%20of%20manual%20enrollment%20the%20Intune%20Management%20Extension%20does%20not%20install.%20I%20tried%20installing%20it%20manually%20as%20mentioned%20here%2C%20with%20IntuneWindowsAgent.msi.%3C%2FP%3E%3CP%3EIt%20installs%20succesfully%3B%20I%20can%20see%20it%20in%20apps%20%26amp%3B%20features%20and%20I%20can%20see%20the%20files%20in%20C%3A%5CProgram%20Files%20(x86)%5CMicrosoft%20Intune%20Management%20Extension.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20after%20some%20minutes%2C%20it%20somehow%20uninstalls%20itselfs.%20The%20files%20in%20the%20directory%20disappear.%3C%2FP%3E%3CP%3EFrom%20event%20manager%3A%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EEvent%20ID%2011724%20Product%3A%20Microsoft%20Intune%20Management%20Extension%20--%20Removal%20completed%20successfully.%3C%2FP%3E%3CP%3EEvent%20ID%201034%20Windows%20Installer%20removed%20the%20product.%20Product%20Name%3A%20Microsoft%20Intune%20Management%20Extension.%20Product%20Version%3A%201.16.105.0.%20Product%20Language%3A%201033.%20Manufacturer%3A%20Microsoft%20Corporation.%20Removal%20success%20or%20error%20status%3A%200.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F106235%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%3C%2FP%3E%3CDIV%20class%3D%22user-login%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F283805%22%20target%3D%22_blank%22%3E%40JarrettB%20%3C%2FA%3E%3C%2FDIV%3E%3CDIV%20class%3D%22post-author-login%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3EAny%20idea%3F%20Thanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-358290%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-358290%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20would%20appear%20the%20issue%20has%20been%20resolved%20somehow%20by%20Microsoft.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20attempted%20to%20replicate%20the%20exact%20problem%20twice%20yesterday%20-%26nbsp%3B%20In%20both%20trials%2C%20The%20intune%20agent%20properly%20deployed%20itself%20and%20ran%20powershell%20script%20after%20a%20system%20was%20wiped%2C%20while%20retaining%20AzureAD%20Enrollment.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20did%20not%20require%20the%20use%20of%20additional%20work-arounds%20like%20force-deploying%20the%20intune.msi%20as%20a%20Line-of-Business%20app%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357391%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357391%22%20slang%3D%22en-US%22%3E%3CP%3ELooks%20like%20you%20can%20use%20MDM%20to%20push-install%20that%20IntuneInstaller.MSI%20that%20you%20found.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20added%20it%20as%20an%20app%20with%20my%20OpenDNS%20and%20AV%20installs.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355928%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355928%22%20slang%3D%22en-US%22%3E%3CP%3EI%20will%20see%20what%20I%20can%20investigate...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355104%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355104%22%20slang%3D%22en-US%22%3E%3CP%3EI%20reset%20the%20broken%20machine%20and%20still%20broken.%20I%20left%20it%20overnight%20and%20still%20not%20working.%20I%20reset%20it%20again%20and%20still%20broken.%20What%20I%20did%20find%20is%20if%20I%20manually%20downloaded%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fprodamsub0102data.azureedge.net%2FIntuneWindowsAgent.msi%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fprodamsub0102data.azureedge.net%2FIntuneWindowsAgent.msi%3C%2FA%3E%20and%20ran%20it%2C%20my%20script%20started%20installing%20immediately.%20I%20just%20can't%20figure%20out%20what%20is%20blocking%20the%20agent%20from%20downloading%20and%20installing%20after%20the%20reset.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20ideas%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-354506%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-354506%22%20slang%3D%22en-US%22%3E%3CP%3EI%20also%20experienced%20this%20today.%20I%20have%20run%20through%20a%20number%20of%20resets%20using%20%22Keep%20my%20files%22%20without%20an%20issue%20but%20today%20this%20occured.%20I%20am%20using%201809%20Enterprise%20x64%20patched%20up%20to%2020-Feb%20on%20a%20Hyper-V%20VM.%20I%20will%20try%20a%20few%20more%20times%20and%20see%20what%20results.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-345671%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-345671%22%20slang%3D%22en-US%22%3E%3CP%3EAs%20expected%3A%3C%2FP%3E%3CP%3EI%20performed%20a%20full%20wipe%20-%20the%20machine%20was%20not%20AAD%20joined%20afterward%20-%20It%20had%20a%20new%20identity%20(PC%20name)%20--%20After%20manually%20rejoining%20AAD%2C%20manually%20reinstalling%20Company%20Portal%2C%20signing%20in%20as%20my%20AAD%20identity%2C%20Intune%20Agent%20downloaded.%20I%20can%20see%20in%20the%20DeviceManagment-Enterprise-Diagnostic-Provider%20a%20few%20new%20codes%2C%201922%2C%201920%2C%201906%2C%201905%20-%20installing%20various%20GUID%20labeled%20programs%20-%20and%20now%20agent%20is%20available%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EI%20performed%20a%20'Fresh%20Start'%20wipe%20on%20my%20other%20test%20machine.%20This%20retained%20the%20AAD%20association%20and%20PC%20name%20remained%20the%20same%20-%20after%20logging%20in%2C%20I%20manually%20reinstalled%20Company%20Portal.%20-%20after%203%20hours%2C%20multiple%20reboots%2C%20manually%20initiating%20sync%2C%20No%20Intune%20agent.%3C%2FP%3E%3CP%3EI%20just%20removed%20the%20PC%20from%20azureAD%2C%20rebooted%2C%20rejoined%20manually%2C%20launched%20company%20portal%2C%20hit%20sync%20-%20Intune%20agent%20pushed%20to%20the%20machine.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-341145%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-341145%22%20slang%3D%22en-US%22%3E%3CP%3EOut%20of%20curiosity%20did%20you%20try%20to%20reset%20without%20retaining%20user%20data.%20Maybe%20due%20to%20the%20retained%20user%20data%20there%20is%20some%20information%20stored%20which%20actually%20blocks%20the%20re-push%20of%20the%20agent.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-341136%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-341136%22%20slang%3D%22en-US%22%3E%3CP%3EReset%20with%20retain%20user%20data.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20selected%20reset%20with%20retain%20user%20data%20from%20the%20device%20locally%2C%20and%20initiated%20via%20the%20Azure%20portal.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20the%20device%20finishes%2C%20the%20user%20profile%20is%20re-created%20and%20the%20device%20automatically%20joined%20to%20Azure%20AD.%20I%20go%20to%20Win%20Store%20and%20download%20Company%20Portal%20---%20MSI%20apps%20that%20we%20set%20to%20install%20automatically%20like%20OpenDNS%20and%20Trend%20will%20download...%20but%20we%20never%20get%20the%20Intune%20agent%20after%20that%20reset%20event.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20remove%20all%20AzureAD%20accounts%20from%20the%20laptop%2C%20switch%20back%20to%20local%20profile...%20then%20rejoin%20to%20AzureAD%2C%20I%20will%20get%20the%20intune%20agent%20again.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-341134%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-341134%22%20slang%3D%22en-US%22%3E%3CP%3EFor%20further%20investigations%2C%20which%20type%20of%20reset%20did%20you%20choose%20exactly%3F%3C%2FP%3E%0A%3CP%3EWith%20retaining%20userdata%2C%20Autopilot%20Reset%2C%20Factory%20Reset%2C%20...%3C%2FP%3E%0A%3CP%3EThis%20might%20have%20additional%20impact%20on%20the%20situation.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%20for%20the%20info.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-339009%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-339009%22%20slang%3D%22en-US%22%3E%3CP%3EHey%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20too%20am%20having%20issues%20deploying%20the%20Intune%20agent.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESpecifically%20this%20scenario%20I%20have%20noticed%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can%20stand%20up%20a%20machine%2C%20join%20to%20AAD%2C%20it%20will%20push%20the%20intune%20agent.%20Powershell%20scripts%20work.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIF%20I%20RESET%20the%20Win%2010%20machine%2C%20it%20will%20re-join%20AAD%2C%20but%20the%20Intune%20agent%20never%20pushes.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENothing%20under%20win%5Csystem32%5Cconfig%5Csystemprofile%5Cappdata%5Clocal%5Cmdm%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOnly%20a%20few%20error%20messages%20in%20Event%20viewer%2C%20but%20nothing%20I%20recognize%20as%20%22intune%20agent%20failed%20to%20install%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20machine%20does%20show%20the%20MDMDeviceWithAAD%20property.%20CompanyPortal%20is%20installed%20via%20MS%20Store.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20replicated%20this%20behavior%20on%204%20different%20machines.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20one%20instance%20I%20did%20get%20the%20agent%20to%20repush%2C%20I%20had%20to%20REMOVE%20the%20AAD%20account%20under%20'Accounts%20-%26gt%3B%20Work%20%26amp%3B%20School'%20-%20then%20re-join%20it%20to%20AzureAD.%20-%20The%20Intune%20agent%20re-pushed%20after%20this%20process.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-314467%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-314467%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Matthew%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Eas%20time%20goes%20by%20things%20change%20%3A-)%2C%20support%20for%20Hybrid%20Domain%20Joined%20devices%20is%20now%20available.%3C%2FP%3E%0A%3CP%3Esee%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fintune-management-extension%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fintune-management-extension%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22prerequisites%22%20class%3D%22heading-with-anchor%22%20id%3D%22toc-hId-1619709636%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%3EPrerequisites%3C%2FH2%3E%0A%3CP%3EThe%20Intune%20management%20extension%20has%20the%20following%20prerequisites%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EDevices%20must%20be%20joined%20to%20Azure%20AD%20and%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwindows-enroll%23enable-windows-10-automatic-enrollment%22%20data-linktype%3D%22relative-path%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eauto-enrolled%3C%2FA%3E.%20The%20Intune%20management%20extension%20supports%20Azure%20AD%20joined%2C%20%3CSTRONG%3Ehybrid%20domain%20joined%3C%2FSTRONG%3E%2C%20and%20comanaged%20enrolled%20Windows%20devices.%20GPO-enrolled%20devices%20aren't%20supported.%3C%2FLI%3E%0A%3CLI%3EDevices%20must%20run%20Windows%2010%20version%201607%20or%20later.%3C%2FLI%3E%0A%3CLI%3EThe%20Intune%20management%20extension%20agent%20is%20installed%20when%20a%20PowerShell%20script%20or%20a%20Win32%20app%20is%20deployed%20to%20a%20user%20or%20device%20security%20group.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3CBR%20%2F%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-307385%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-307385%22%20slang%3D%22en-US%22%3E%3CP%3EI%20believe%20I%20have%20found%20the%20answer%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EIf%20both%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EMAM%20user%20scope%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3Band%20automatic%20MDM%20enrollment%20(%3C%2FSPAN%3E%3CSTRONG%3EMDM%20user%20scope%3C%2FSTRONG%3E%3CSPAN%3E)%20are%20enabled%20for%20a%20group%2C%20only%20MAM%20is%20enabled.%20Only%20MAM%20is%20added%20for%20users%20in%20that%20group%20when%20they%20workplace%20join%20personal%20device.%20Devices%20are%20not%20automatically%20MDM%20enrolled.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-307383%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-307383%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20any%20way%20to%20trigger%20this%20with%20all%20of%20my%20manually%20enrolled%20devices%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-217045%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-217045%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20device%20need%20to%20be%20auto-enrolled%20in%20MDM%2C%20not%20manually%20enrolled.%20Only%20with%20auto-enrollement%20installation%20of%20management%20extension%20is%20triggered.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-163806%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-163806%22%20slang%3D%22en-US%22%3E%3CP%3EOh%20yes%20that's%20true%20I%20assumed%20AAD%20joined%20machines%20during%20discussion%20here%20all%20the%20time.%3C%2FP%3E%0A%3CP%3EThat's%20very%20good%20to%20mention%20here.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-163529%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-163529%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Oliver%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20been%20in%20contact%20with%20Intune%20Support%20who%20said%20Intune%20Powershell%20isn't%20avaible%20on%20Azure%20Hybrid%20Joined%20PC's%20with%20not%20ETA%20for%20that%20to%20be%20available.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHopefully%20this%20helps%20someone%20in%20the%20future%20%3A(%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-161089%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-161089%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Matt%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ecan%20you%20assign%20your%20user%20a%20new%20PowerShell%20script%20wait%2010%20min.%20and%20then%20sync%20again.%20After%20that%26nbsp%3Bcan%20you%20examine%20the%20event%20log%20if%20you%20can%20find%20any%20evidence%20of%20a%20failed%20EnterpriseDesktopAppManagement%20CSP%3F!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EStart%20event%20viewer%20%26gt%3B%20Applications%20and%20Services%20Logs%20%26gt%3B%20Microsoft%20%26gt%3B%20Windows%20%26gt%3B%20DeviceManagement-Enterprise-Diagnostics-Provider%20%26gt%3B%20Admin%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EMaybe%20you%20can%20also%20try%20to%20enable%20%E2%80%9CShow%20Analytic%20and%20Debug%20Logs%22%20and%20then%20examine%20the%20Debug%20event%20log%20for%20errors.%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3Ebest%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EOliver%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-161037%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-161037%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Oliver%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20are%20correct%20I%20don't%20received%20the%20policy%20you%20mentioned%20in%20the%20report.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20would%20assume%20it%20is%20working%20in%20some%20capacity%2C%20as%20I%20set%20the%20commercial%20ID%20for%20OMS%20and%20some%20computers%20are%20reporting%20data.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMatt%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-160593%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-160593%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Matt%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20you%20see%20no%20EnterpriseDesktopAppManagement%20then%20you%20did%20not%20received%20the%20MSI%20install%20job%20yet.%20Did%20you%20receive%20other%20policies%20from%20Intune%3F%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20assume%20you%20are%20not%20seeing%26nbsp%3B%3CSPAN%3E.%2Fdevice%2FVendor%2FMSFT%2FEnterpriseDesktopAppManagement%2F%3C%2FSPAN%3E%20in%20the%20Advanced%20MDM%20report%3F!%3F%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EOpen%20Settings%20%26gt%3B%20Accounts%20%26gt%3B%20Access%20work%20or%20school%20%26gt%3B%20Connected%20to%20TenantName%E2%80%99s%20Azure%20AD%20%26gt%3B%20Info%20%26gt%3B%20scroll%20down%20to%20the%20bottom%20and%20click%20%E2%80%9CCreate%20report%E2%80%9D%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3ESo%20the%20question%20here%20is%2C%20does%20your%20client%20receive%20any%20policies%20from%20Intune%3F%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EUser%20assignment%20is%20correct!%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EOliver%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-160482%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-160482%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Oliver%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20went%20to%20check%20the%20registry%20but%20there%20is%20no%20folder%20for%20enterprisedesktopappmanagement%2C%20there%20is%20enterpriseappmanagement%20but%20the%20next%20level%20is%20database%20not%20and%20SID.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20applied%20the%20intune%20script%20to%20a%20group%20that%20contains%20users.%20Is%20that%20a%20problem.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMatt%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-159992%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-159992%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Matthew%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECan%20you%20check%20the%20status%20of%20the%20agent%20deployment%20via%20%3CSTRONG%3EEnterpriseDesktopAppManagment%3C%2FSTRONG%3E%20%3CSTRONG%3ECSP%3C%2FSTRONG%3E%20please%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESee%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Foliverkieselbach.com%2F2018%2F02%2F12%2Fpart-2-deep-dive-microsoft-intune-management-extension-powershell-scripts%2F%23enterprisedesktopappmanagement-csp%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Foliverkieselbach.com%2F2018%2F02%2F12%2Fpart-2-deep-dive-microsoft-intune-management-extension-powershell-scripts%2F%23enterprisedesktopappmanagement-csp%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-159836%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-159836%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Oliver%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20been%20having%20similar%20issues%2C%20however%20I%20don't%20see%20any%20logs%2Ffolder%20you%20have%20in%20your%20troubleshooting%20steps.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20noticed%20i%20have%20a%20quite%20a%20few%20entries%20under%20configuration%20source%20in%20a%20provision%20state%20and%20have%20been%20for%20a%20couple%20weeks%20now.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAny%20ideas%20for%20me%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-153438%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-153438%22%20slang%3D%22en-US%22%3EDid%20you%20follow%20the%20troubleshooting%20advises%20from%20this%20thread%3F%3CBR%20%2F%3EApp%20deployment%20via%20CSP%2C%20App%20install%20and%20so%20on...%20checked%20all%20log%20files%20registry%20entries...%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-153435%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-153435%22%20slang%3D%22en-US%22%3E%3CP%3EI%20could%20handle%20hours%2C%20we%20are%20talking%20weeks%2C%20and%20still%20no%20Management%20Extension%20Service.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-153426%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-153426%22%20slang%3D%22en-US%22%3E%3CP%3EAbsolutely%20you%20have%20to%20be%20patient.%20Like%20ConfigMgr%20on-prem%20environment%20it%20takes%20time%20sometimes.%20A%20lot%20of%20background%20processes%20are%20running%20after%20OOBE%20and%20depending%20on%20various%20facts%20it%20may%20result%20in%20longer%20wait%20times.%20You%20observed%20it%2C%20OMA-DM%20client%20and%20so%20on...%20I%20have%20machine%20where%20I%20waited%20more%20than%20an%20hour.%20In%20the%20beginning%20of%20Intune%20(Silverlight%20portal%20and%20old%20backend)%20it%20was%20even%20worse%2C%20we%20waited%20for%20things%20sometime%20up%20to%204%20hours%20and%20more.%20The%20new%20Azure%20based%20infrastructure%20is%20much%20better%20but%20it%20also%20takes%20some%20time%20infrequent.%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESo%20again%20I%20can%20confirm%20that%20it%20takes%20time%20sometimes.%20But%20my%20past%20is%20defined%20by%20ConfigMgr%20environments%20and%20there%20you%20learn%20to%20have%20patients%20%3A-).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-153361%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-153361%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20morning%2C%20everything%20went%20fine%20and%20thought%20I%20would%20pull%20all%20my%20hair%20off.%20It%20worked%20with%20any%20users%20(AD%20or%20AAD)%2C%20scripts%20were%20installed%20sometimes%20after%207%20to%2010%20min%20of%20uptime%20after%20OOBE%2C%20but%20there%20were%20installed%20at%20some%20point.%3CBR%20%2F%3E%3CBR%20%2F%3EBut%20while%20writing%20this%20post%2C%20I%20did%20a%20last%20test%20with%20the%20same%20user%20I%20used%20during%20all%20my%20tests%2C%20and%20I%20hit%20the%20issue%20again%20%3A%20even%20the%20start%20menu%20icons%20(like%20for%20for%20XBox%2C%20Alarms%2C%20Weather%2C%20Sway%2C...)%20were%20not%20populated%20after%2010%20minutes%2C%20and%20were%20left%20with%20these%20%22down-arrows%22%20signs%20(see%20attachment)%2C%20even%20if%20the%20Intune%20Management%20Extension%20MSI%20could%20already%20be%20seen%20in%20Settings%2FApps%20pane.%20%3CBR%20%2F%3E%3CBR%20%2F%3EBut%20at%20the%20exact%20moment%2C%20that%20%22wsappx%22%20process%20starts%20to%20re-eat%20your%20CPU%20(it%20did%20it%20first%20time%20shortly%20after%20landing%20on%20desktop%20to%20install%20my%207-Zip%20MSI%2C%20Arduino%20and%20Bitcoin%20Calculator%20apps%20from%20the%20Store...%20I%20flagged%20them%20in%20Intune%20as%20%22Required%22)%2C%20my%20PS%20scripts%20were%20executed%20after%20exactly%2020%20min%20of%20uptime!%2C%20and%204%20minutes%20later%2C%20the%20start%20menu%20icons%20for%20XBox%26amp%3BCo%20started%20to%20be%20all%20populated.%3CBR%20%2F%3E%3CBR%20%2F%3ESo%20one%20thing%20is%20sure%20%3A%20you%20really%20have%20to%20wait%20until%20%22omadmclient.exe%22%20and%20this%20%22State%20Repository%20Service%22%20are%20really%20idle%20for%20long%20time%2C%20and%20you%20have%20to%20wait%20even%20few%20minutes%20more%20to%20be%20on%20safe%20side.%3CBR%20%2F%3E%3CBR%20%2F%3EIt%20makes%20me%20believe%20there%20is%20now%20like%20an%20artificial%20throttling%20interval%2C%20that%20didn't%20existed%20before%2C%20and%20is%20why%20people%20believe%20%22PS%20scripts%20do%20not%20always%20work%22%2C%20especially%20when%20your%20CPU%2Fnetwork%2Fdisk%20are%20fully%20idle%20for%20few%20min.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152982%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152982%22%20slang%3D%22en-US%22%3EThis%20looks%20good!%20According%20the%20info%20from%20the%20screenshot%20the%20CSP%20has%20successfully%20downloaded%20and%20triggered%20the%20install%20of%20the%20sidecar%20msi.%20Do%20you%20have%20the%20Management%20Extension%20Service%20in%20the%20VM%20now%3F%20If%20not%20do%20you%20have%20the%20msi%20logfile%20of%20the%20sidecar%20now%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152959%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152959%22%20slang%3D%22en-US%22%3E%3CP%3EScreenshot%20attached%20(enrolled%20this%20time%20my%20VM%20at%20OOBE%20with%20an%20AAD%20user)%2C%20and%20%22Status%22%20key%20is%200x46%20(70).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152919%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152919%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Olivier%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ewhat%20about%26nbsp%3B%3CSPAN%3EHKLM%5CSOFTWARE%5CMicrosoft%5C%3C%2FSPAN%3E%3CSPAN%3EEnterpriseDesktopAppManagement%5C%3CSID%3E%5C%3CMSI-PRODUCTCODE%3E%20can%20find%20the%20status%20there%3F%3C%2FMSI-PRODUCTCODE%3E%3C%2FSID%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EI%20assume%20the%20failure%20has%20something%20to%20do%20with%20the%20CSP%20as%20mentioned%20in%20my%20last%20post.%20Can%20you%20check%20this%2C%20please%3F%20I%20like%20to%20know%20if%20the%20backend%20is%20not%20even%20trying%20to%20deliver%20or%20if%20the%20corresponding%20CSP%26nbsp%3BEnterpriseDesktopAppManagement%20has%20a%20problem%20getting%20the%20sidecar%20msi%20and%20finally%20to%20execute%20it.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152917%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152917%22%20slang%3D%22en-US%22%3E%3CP%3EI%20also%20noticed%20the%20same%20since%20approx%202%20weeks.%26nbsp%3B%20This%20worked%20absolutely%20fine%20in%20the%20past%20(in%20Dec%20for%20example%2C%20I%20built%20internal%20docs%20based%20on%20these%20positive%20results).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EUnfortunately%2C%20I%20did%20not%20found%20any%20root%20cause%20so%20far%20%3A%20in%20%22devicemanagement%22%20event%20log%2C%20stuff%20seems%20to%20communicate%20to%20the%20Intune%20backed%20and%20no%20obvious%20errors.%20Hitting%20%22Sync%20button%22%20does%20not%20help.%20The%20file%26nbsp%3B%20%3CEM%3EC%3A%5CProgramData%5CMicrosoft%5CIntuneManagementExtension%5CLogs%5CIntuneManagementExtension.txt%3CSTRONG%3E%26nbsp%3B%20%3C%2FSTRONG%3E%3C%2FEM%3Eand%26nbsp%3B%20the%20key%20%3CEM%3EHKEY_LOCAL_MACHINE%5CSOFTWARE%5CMicrosoft%5CIntuneManagementExtension%5CPolicies%5C%3C%2FEM%3E%20are%20no%20longer%20created.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESince%20that%20time%20(coincidence%3F)%2C%20I%20have%20also%20problems%20with%20devices%20enrolled%20with%20on-prem%20users%20coming%20from%20%22synched%20AD%20groups%22%20(from%20an%20on-prem%20infra%2C%20and%20using%20ADFS)%2C%20where%20neither%20apps%2C%20scripts%2C%20or%20profiles%20are%20applied%2C%20even%20if%20%22devicemanagement%22%20event%20log%20does%20also%20not%20show%20obvious%20errors.%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20will%20post%20here%20once%20I%20will%20progress%20in%20my%20tests.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152803%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152803%22%20slang%3D%22en-US%22%3E%3CP%3ESounds%20like%20problems%20with%20the%20initial%20MSI%20Install%20job%20via%20EnterpriseDesktopAppManagement%20CSP%3A%3C%2FP%3E%0A%3CP%3Esee%20here%3A%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fclient-management%2Fmdm%2Fenterprisedesktopappmanagement-csp%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fclient-management%2Fmdm%2Fenterprisedesktopappmanagement-csp%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EMSI%2F%3CEM%3EProductID%3C%2FEM%3E%2FStatus%20%3C%2FSTRONG%3E%3CSPAN%3EStatus%20of%20the%20application.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20the%20registry%20at%20HKLM%5CSOFTWARE%5CMicrosoft%5C%3CSPAN%3EEnterpriseDesktopAppManagement%5C%3CSID%3E%5C%3CMSI-PRODUCTCODE%3E%20you%20can%20find%20the%20Status%20according%20to%20the%20CSP%20site%20above.%3C%2FMSI-PRODUCTCODE%3E%3C%2FSID%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ET%3CSPAN%3Ery%20to%20figure%20out%20this%20status%20-%20Download%20error%20or%20what%20else%20and%20correlate%20with%20your%20machine%20and%20environment%20(may%20there%20be%20a%20proxy%20issue%3F).%20In%20the%20past%20Intune%20followed%20a%20retry%20logic.%20I%20give%20an%20example%3A%20try%20it%203%20times%20with%20timeout%20of%2010%20min%20and%20then%20fail.%20If%20failed%2C%20Intune%20tried%20it%20again%20in%207%20days%20(the%207%20days%20setting%20after%20fail%20was%20fix%20in%20the%20past%2C%20maybe%20this%20interval%20is%20lowered%20now%20but%20I%20don't%20now%2C%20registry%20suggests%20that%20this%20is%20changed).%20So%20again%20the%20values%20above%20are%20examples%20based%20on%20registry%20values%20for%20the%20logic!%20I%20do%20not%20know%20if%20this%20is%20correct%20as%20I%20do%20not%20have%20documentation%20for%20it.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EWhat%20are%20the%20registry%20values%20for%20Enforcement*%20on%20that%20machine.%20Values%20are%20in%20the%20same%20path%20as%20described%20above.%20There%20are%20the%20Retry%2C%20Interval%2C%20Timeout%2C%20Index%20and%20StartTime%20values...%20I'm%20not%20sure%20if%20this%20is%20all%20and%20how%20they%20correlate%20to%20each%20other%20exactly...%20But%20maybe%20we%20can%20extract%20some%20information%20from%20the%20retry%20values.%20For%20example%20it%20may%20look%20like%20that%20all%20retries%20are%20failed%20and%20the%20machine%20is%20in%20extended%20timeout%20currently....%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EOther%20way%20dealing%20with%20MSI%20install%20fails%20in%20the%20past%2C%20was%20to%20change%20something%20at%20the%20MSI%20metadata%20to%20re-enforce%20push%2Finstall.%20This%20is%20not%20possible%20in%20our%20case%20as%20we%20have%20no%20control%20over%20the%20SideCar%20agent%20metadata.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3ECan%20someone%20share%20the%20MDM%20advanced%20diagnostic%20report...%20what%20is%20listed%20there%20and%20what%20about%20the%20eventlogs...%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152772%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152772%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20the%20same%20problem.%20Intune%20management%20extension%20does%20not%20get%20installed.%3C%2FP%3E%0A%3CP%3EI%20created%20a%20powershell%20script%20and%20assigned%20it%20to%20a%20group%20containing%20the%20user.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAny%20ideas%3F%20Or%20at%20least%20a%20way%20to%20troubleshoot%20the%20issue%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152726%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152726%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20our%20environments%20it's%20working%20quite%20well.%20We%20had%20problems%20due%20to%20interrupted%20network%20connectivity%20but%20this%20is%20not%20a%20problem%20of%20Intune%20or%20the%20agent.%20Are%20you%20targeting%20the%20scripts%20as%20user%20assignments%3F%20Can%20you%20share%20logs%20from%20a%20machine%20not%20getting%20the%20service%3F%20MDM%20report%2C%20logfiles%2C%20eventlogs%2C%20Intune%20Agent%20logfiles%20registry%20(HKLM%5CSoftware%5CMicrosoft%5CEnterpriseDesktopAppManagement)...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152622%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152622%22%20slang%3D%22en-US%22%3E%3CP%3EDid%20you%20get%20anywhere%20with%20this%3F%26nbsp%3B%20I%20have%20been%20struggling%20to%20figure%20out%20why%20sometimes%20I%20do%20not%20get%20the%20service%20and%20sometimes%20I%20do.%26nbsp%3B%20I%20have%20checked%20logs%20everywhere%20on%20the%20machine%20and%20do%20not%20see%20any%20relevant%20errors.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-149986%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-149986%22%20slang%3D%22en-US%22%3E%3CP%3EOliver%2C%20thanks%20for%20following%20up%20on%20this.%20Unfortunately%20I%20haven't%20made%20any%20progress%20on%20this%20as%20I%20have%20been%20working%20on%20other%20things.%20I%20will%20get%20back%20to%20it%2C%20hopefully%20sometime%20this%20week%20and%20let%20you%20know%20how%20I%20get%20on%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECheers%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-149614%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-149614%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20your%20problem%20still%20existing%3F%20Can%20you%20share%20us%20some%20details%20about%20the%20event%20log%20entries%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Eok%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-145140%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-145140%22%20slang%3D%22en-US%22%3E%3CP%3EI've%20checked%20a%20few%20of%20my%20test%20machines%2C%20I%20can't%20find%20event%20entries%20with%20ID%20822.%20Can%20you%20post%20a%20little%20more%20detail%20on%20your%20error%20events%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-145133%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-145133%22%20slang%3D%22en-US%22%3E%3CP%3EOkay%20the%20way%20the%20MSI's%20gets%20pushed%20to%20the%20machine%20is%20the%20same%20how%20the%20Intune%20Agent%20gets%20pushed%20down.%20So%20basically%20it%20should%20work.%3C%2FP%3E%0A%3CP%3EHow%20is%20your%20assignment%20did%20you%20use%20user%20assignment%3F%20In%20my%20tests%20that%20was%20the%20only%20functional%20way.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-145132%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-145132%22%20slang%3D%22en-US%22%3E%3CP%3EI%20should%20note%20that%20as%20a%20test%20I%20have%20deployed%20a%20few%20MSI's%20to%20my%20PC%20(%20Notepad%2B%2B%20and%207Zip%20etc%20)%20and%20these%20appear%20to%20install%20ok.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-145131%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-145131%22%20slang%3D%22en-US%22%3E%3CP%3EOliver%2C%20thanks%20for%20the%20update.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20I%20look%20in%20the%20appdata%5Clocal%5Cmdm%20folder%20it%20is%20empty%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20event%20viewer%20I%20have%20a%20number%20of%20errors%20with%20Event%20ID%20822%20(%20MDM%20PolicyManager%3AAcquiring%20the%20merge%20lock....%20)%2C%20each%20ending%20with%20%22cannot%20find%20the%20file%20specified%22%2C%20and%20a%20number%20of%20Event%20ID%20454%2C%20Command%20failure%20status.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENot%20sure%20from%20your%20guide%20what%20this%20means%20or%20where%20to%20look%20next%26nbsp%3B%20%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ERegards%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-145121%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-145121%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Scott%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Emaybe%20have%20a%20look%20at%20my%20blog%20post%20here%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EDeep%20dive%20Microsoft%20Intune%20Management%20Extension%20%E2%80%93%20PowerShell%20Scripts%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Foliverkieselbach.com%2F2017%2F11%2F29%2Fdeep-dive-microsoft-intune-management-extension-powershell-scripts%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Foliverkieselbach.com%2F2017%2F11%2F29%2Fdeep-dive-microsoft-intune-management-extension-powershell-scripts%2F%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20cover%20inner%20workings%20and%20troubleshooting%20of%20the%20agent%20to%20find%20such%20particular%20issues%20with%20installing%20Intune%20Management%20Extension.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETwo%20things%20to%20check%20for%20agent%20install%20issues%20are%20event%20viewer%20and%20the%20Agent%20MSI%20install%20log%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EStart%20event%20viewer%20%26gt%3B%20Applications%20and%20Services%20Logs%20%26gt%3B%20Microsoft%20%26gt%3B%20Windows%20%26gt%3B%20DeviceManagement-Enterprise-Diagnostics-Provider%20%26gt%3B%20Admin%20(event%20id%201924%20and%20others)%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EMSI%20install%20log%3A%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EC%3A%5CWindows%5Csystem32%5Cconfig%5Csystemprofile%5CAppData%5CLocal%5Cmdm%5C%20%7B25212568-E605-43D5-9AA2-7AE8DB2C3D09%7D.log%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3Ebest%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EOliver%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-142586%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-142586%22%20slang%3D%22en-US%22%3E%3CP%3E%3CFONT%20size%3D%223%22%20face%3D%22Calibri%2CHelvetica%2Csans-serif%22%20color%3D%22black%22%3E%3CSPAN%20style%3D%22font-size%3A%2012pt%3B%22%3ENo%20this%20directory%20(%20IntuneManagementExtension%20)%20does%20not%20exist....%3C%2FSPAN%3E%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-142493%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-142493%22%20slang%3D%22en-US%22%3E%3CP%3EHas%20the%20machine%20synced%3F%20Can%20you%20see%20any%20log%20files%20in%26nbsp%3BC%3A%5CProgramData%5CMicrosoft%5CIntuneManagementExtension%5CLogs%20%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-402803%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-402803%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EHmm%2C%20their%20wording%20is%20a%20bit%20confusing%20again%3A%3C%2FP%3E%3CP%3E%22You'll%20be%20able%20to%20assign%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices.%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEvery%20Intune%20MDM%20device%20is%20%22intune%20enrolled%22%2C%20regardless%20of%20whether%20this%20was%20manual%2Fgpo%2Fetc.%3C%2FP%3E%3CP%3EAlso%2C%20I%20don't%20have%20any%20problems%20with%20Azure%20AD%20joined%20devices.%20The%20problem%20is%20regarding%20Hybrid%20AD%20devices.%3C%2FP%3E%3CP%3EOn%20both%20hybrid%20and%20Azure%20AD%20joined%20devices%2C%20I%20use%20the%20%22connect%20work%20or%20school%20account%22%20(auto-enrollment%20MDM%20set-up).%20The%20Azure%20AD%20machines%20receive%20the%20intune%20management%20extension%2C%20while%20the%20hybrid%20ones%20do%20not.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-465765%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-465765%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFound%20this%20under%20the%20roadmap%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%20class%3D%22align-cell%22%3E%3CP%20class%3D%22c-paragraph-3%20x-weight-semibold%22%3E%3CEM%3EMicrosoft%20Intune%20expands%20Win32%20app%20deployment%20capabilities%3C%2FEM%3E%3C%2FP%3E%3C%2FDIV%3E%3CP%20class%3D%22c-paragraph-3%20x-weight-semibold%22%3E%3CEM%3EBuilding%20upon%20the%20existing%20support%20for%20line-of-business%20(LOB)%20apps%20and%20Microsoft%20Store%20for%20Business%20apps%2C%20administrators%20can%20now%20use%20Microsoft%20Intune%20to%20deploy%20most%20of%20their%20organization%E2%80%99s%20existing%20applications%20on%20Windows%2010%20devices.%20Administrators%20can%20add%2C%20install%2C%20and%20uninstall%20applications%20for%20Windows%2010%20users%20in%20a%20variety%20of%20formats%20such%20as%20MSI%2C%20MSP%2C%20and%20Setup.exe%20This%20feature%20is%20available%20in%20public%20preview%20as%20of%20CY%20Q4%202018%3C%2FEM%3E%3C%2FP%3E%3CP%20class%3D%22c-paragraph-3%20x-weight-semibold%22%3E%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Froadmap%3Frtc%3D3%26amp%3Bfilters%3DMicrosoft%2520Intune%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Froadmap%3Frtc%3D3%26amp%3Bfilters%3DMicrosoft%2520Intune%3C%2FA%3E%3C%2FP%3E%3CP%20class%3D%22c-paragraph-3%20x-weight-semibold%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22c-paragraph-3%20x-weight-semibold%22%3EThis%20%22update%22%20is%20the%20win32%20support%20that's%20already%20in%20public%20preview%3B%20I%20don't%20think%20it's%20related%20to%20the%20intune%20management%20extension%20not%20being%20installed.%3C%2FP%3E%3CP%20class%3D%22c-paragraph-3%20x-weight-semibold%22%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-465802%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-465802%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F288779%22%20target%3D%22_blank%22%3E%40WalterPrem%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI'm%20sorry%20the%20roadmap%20your%20are%20refering%20to%20is%20an%20old%20item.%20Your%20entry%20describes%20the%20Win32%20app%20support%20in%20general.%20This%20support%20is%20provided%20by%20the%20Intune%20since%20a%20few%20month%20now%20and%20is%20handeled%20by%20the%20Intune%20Management%20Agent%20which%20gets%20pushed%20down%20and%20is%20then%20in%20charge%20of%20installing%20all%20the%20.intunewin%20packaged%20setup.exe%20Win32%20apps.%3C%2FP%3E%0A%3CP%3EI'm%20refering%20to%20a%20feature%20which%20is%20upcoming.%20See%20the%20link%20again%20it%20is%20the%20%22In-Development%22%20site%20from%20Intune%20which%20announces%20new%20features%20beeing%20released%20soon%20(most%20of%20the%20time%20next%20month%2C%20that's%20why%20the%20site%20is%20called%20%22In%20development%20for%20Microsoft%20Intune%20-%20April%202019%22.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThere%20is%20the%20entry%3A%3C%2FP%3E%0A%3CH3%20id%3D%22configure-your-win32-apps-to-be-installed-on-intune-enrolled-azure-ad-joined-devices-%22%20class%3D%22heading-with-anchor%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%3EConfigure%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%3EYou'll%20be%20able%20to%20assign%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices.%20For%20more%20information%20about%20Win32%20apps%20in%20Intune%2C%20see%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fapps-win32-app-management%22%20data-linktype%3D%22relative-path%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EWin32%20app%20management%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20basically%20describes%20that%20the%20agent%20who%20is%20in%20charge%20installing%20all%20the%20Win32%20apps%20will%20now%20be%20installed%20even%20for%20non%20auto-enrollment%20devices.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-465845%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-465845%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EHm%2C%20let's%20hope%20you're%20right%20then.%20As%20I%20set%20in%20my%20reply%20before%20that%2C%20I%20can%20already%20deploy%20my%20win32%20apps%20to%20%22Intune%20enrolled%20Azure%20AD%20joined%20devices%22.%20The%20problem%20is%20regarding%20Hybrid%20joined%20devices%20that%20didn't%20use%20GPO%2C%20but%20the%20auto-enroll%20%22add%20work%2Fschool%22%20method.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EAny%20ETA%20on%20this%20update%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%2C%3C%2FP%3E%3CP%3EWalter%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-465861%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-465861%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F288779%22%20target%3D%22_blank%22%3E%40WalterPrem%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIntune%20and%20auto-enrolled%20AADJ%2Fhybrid%20devices%20are%20covered%2C%20in%20fact%20this%20is%20the%20requirement%20for%20the%20Intune%20Management%20Agent%20(auto-enrollment)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWith%20the%20upcoming%20change%20AADJ%20devices%20which%20are%20enrolled%20into%20Intune%20afterwards%20are%20covered%20then.%3C%2FP%3E%0A%3CP%3EThe%20change%20does%20not%20mentioning%20Hybrid%20joined%20devices.%20It%20seems%20this%20situation%20will%20%3CU%3Enot%3C%2FU%3E%20change.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOnly%20people%20ho%20started%20with%20AADJ%20and%20enrolling%20these%20devices%20later%20on%20to%20Intune%20via%20add%20Work%2Fschool%20account%20are%20covered%20then.%20but%20hey%20maybe%20it%20also%20covers%20hybrid%20but%20the%20entry%20does%20only%20talk%20about%20AADJ%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-466017%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-466017%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3EOnly%20people%20ho%20started%20with%20AADJ%20and%20enrolling%20these%20devices%20later%20on%20to%20Intune%20via%20add%20Work%2Fschool%20account%20are%20covered%20then.%20but%20hey%20maybe%20it%20also%20covers%20hybrid%20but%20the%20entry%20does%20only%20talk%20about%20AADJ%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERight.%20In%20my%20case%20the%20devices%20were%20already%20AAD%20registered%20(not%20joined)%20and%20then%20manually%20added%20to%20intune%20via%20add%20work%2Fschool%20account.%20This%20doesn't%20work.%3C%2FP%3E%3CP%3ELet's%20hope%20they%20fix%20this%20problem%20too.%20I%20don't%20see%20why%20it%20would%20be%20any%20different%20than%20AAD%20joined%20PCs%20using%20the%20connect%20school%2Fwork%20button.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481808%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481808%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWell%2C%20the%20update%20you%20mentioned%20is%20now%20under%20%22What's%20new%22%20for%20last%20week%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwhats-new%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwhats-new%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CEM%3E%22You%20can%20assign%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices.%22%3C%2FEM%3E%3C%2FP%3E%3CP%3EAt%20the%20same%20time%2C%20win32%20apps%20are%20no%20longer%20in%20preview%20(coincidence..%3F).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUnfortunately%2C%20my%20hybrid%20AD%2C%26nbsp%3B%20add%20work%2Fschool%20joined%20device%2C%20still%20doesn't%20receive%20the%20intune%20management%20extention.%20I%20tried%20removing%20them%20from%20intune%20and%20re-enrolling.%20I%20re-added%20them%20to%20the%20software%20distribution%20group.%20Regular%20apps%20get%20installed%2C%20but%20the%20win32%20hangs%20on%20%22waiting%20for%20install%20status%22.%20The%20Win32%20apps%20don't%20appear%20in%20portal%20on%20the%20client%2C%20and%20the%20Intune%20management%20extension%20doesn't%20get%20installed.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EI'm%20guessing%20that%20-%20unfortunately%20-%20this%20only%20applies%20to%20Azure%20AD%20joined%20machines%20who%20are%20not%20yet%20enrolled%20into%20Intune.%3C%2FP%3E%3CP%3EI%20hope%20the%20same%20will%20be%20done%20for%20Hybrid%20machines%3B%20Hybrid%20is%20listed%20as%20supported%20by%20Microsoft%2C%20and%20I%20don't%20see%20why%20it%20would%20matter%20whether%20a%20device%20is%20hybrid%20or%20azure%20joined%2C%20when%20both%20use%20the%20same%20method%20to%20enroll.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20could%20pass%20this%20feedback%20in%20any%20way%20that%20would%20be%20great.%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWalter%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481811%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481811%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWell%2C%20the%20update%20you%20mentioned%20is%20now%20under%20%22What's%20new%22%20for%20this%20week%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwhats-new%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwhats-new%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CEM%3E%22You%20can%20assign%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices.%22%3C%2FEM%3E%3C%2FP%3E%3CP%3EAt%20the%20same%20time%2C%20win32%20apps%20are%20no%20longer%20in%20preview%20(coincidence..%3F).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUnfortunately%2C%20my%20hybrid%20AD%2C%26nbsp%3B%20add%20work%2Fschool%20joined%20device%2C%20still%20doesn't%20receive%20the%20intune%20management%20extention.%20I%20tried%20removing%20them%20from%20intune%20and%20re-enrolling.%20I%20re-added%20them%20to%20the%20software%20distribution%20group.%20Regular%20apps%20get%20installed%2C%20but%20the%20win32%20hangs%20on%20%22waiting%20for%20install%20status%22.%20The%20Win32%20apps%20don't%20appear%20in%20portal%20on%20the%20client%2C%20and%20the%20Intune%20management%20extension%20doesn't%20get%20installed.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EI'm%20guessing%20that%20-%20unfortunately%20-%20this%20only%20applies%20to%20Azure%20AD%20joined%20machines%20who%20are%20not%20yet%20enrolled%20into%20Intune.%3C%2FP%3E%3CP%3EI%20hope%20the%20same%20will%20be%20done%20for%20Hybrid%20machines%3B%20Hybrid%20is%20listed%20as%20supported%20by%20Microsoft%2C%20and%20I%20don't%20see%20why%20it%20would%20matter%20whether%20a%20device%20is%20hybrid%20or%20azure%20joined%2C%20when%20both%20use%20the%20same%20method%20to%20enroll.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20could%20pass%20this%20feedback%20in%20any%20way%20that%20would%20be%20great.%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWalter%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481869%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481869%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWell%2C%20the%20update%20you%20mentioned%20is%20now%20under%20%22%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwhats-new%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EWhat's%20new%3C%2FA%3E%22%20for%20this%20week%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%22You%20can%20assign%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices.%22%3C%2FP%3E%3CP%3EAt%20the%20same%20time%2C%20win32%20apps%20are%20no%20longer%20in%20preview%20(coincidence..%3F).%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EUnfortunately%2C%20my%20hybrid%20AD%2C%20add%20work%2Fschool%20joined%20device%2C%20still%20doesn't%20receive%20the%20intune%20management%20extention.%20I%20tried%20removing%20them%20from%20intune%20and%20re-enrolling.%20I%20re-added%20them%20to%20the%20software%20distribution%20group.%20Regular%20apps%20get%20installed%2C%20but%20the%20win32%20hangs%20on%20%22waiting%20for%20install%20status%22.%20The%20Win32%20apps%20don't%20appear%20in%20portal%20on%20the%20client%2C%20and%20the%20Intune%20management%20extension%20doesn't%20get%20installed.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EI'm%20guessing%20that%20-%20unfortunately%20-%20this%20only%20applies%20to%20Azure%20AD%20joined%20machines%20who%20are%20not%20yet%20enrolled%20into%20Intune.%3C%2FP%3E%3CP%3EI%20hope%20the%20same%20will%20be%20done%20for%20Hybrid%20machines%3B%20Hybrid%20is%20listed%20as%20supported%20by%20Microsoft%2C%20and%20I%20don't%20see%20why%20it%20would%20matter%20whether%20a%20device%20is%20hybrid%20or%20azure%20joined%2C%20when%20both%20use%20the%20same%20method%20to%20enroll.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EIf%20you%20could%20pass%20this%20feedback%20in%20any%20way%20that%20would%20be%20great.%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EWalter%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481925%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481925%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F288779%22%20target%3D%22_blank%22%3E%40WalterPrem%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20had%20Azure%20AD%20joined%20device%20and%20autenrolled%20in%20Intune.%20Management%20extension%20was%20installed%20properly.%20I%20retire%20the%20device%20from%20Intune%20(%20WIndows%2010%201809)%20and%20device%20get%20disconnected%20from%20Azure%20AD%20(from%20documentation%20this%20should%20not%20happen)%3C%2FP%3E%3CP%3EI%20logged%20on%20with%20local%20admin%20and%20joined%20the%20device%20again%20to%20Azure%20AD.%26nbsp%3B%20Device%20is%20enrolled%20in%20Intune%20but%20management%20extension%20is%20not%20installed.%20I%20tried%20to%20deploy%20one%20script%20but%20nothing%20happen%2C%20management%20extension%20is%20not%20installed.%20Did%20some%20of%20you%20had%20similar%20scenario%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-482929%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-482929%22%20slang%3D%22en-US%22%3E%3CP%3EOkay%20your%20issue%20is%20that%20you%20have%20technically%20a%20WorkPlace%20Joined%20(WPJ)%20device%20and%20not%20hybrid%20AADJ.%20Because%20of%20the%20use%20of%20manually%20add%20work%2Fschool%20acount%20the%20device%20is%20treated%20as%20WPJ.%20The%20WPJ%20scenario%20is%20not%20supported%20by%20MS%20for%20the%20Intune%20Management%20Extension%20(IME)%20and%20I'm%20not%20sure%20it%20will%20in%20near%20future.%20As%20WPJ%20is%20more%20targeted%20to%20BYOD%20and%20MS%20don't%20want%20to%20mess%20with%20BYOD%20devices%20by%20installing%20agents%20on%20personal%20devices.%3C%2FP%3E%0A%3CP%3ETo%20make%20the%20agent%20work%20you%20would%20need%20to%20WPJ%20un-enroll%20them%20and%20hybrid%20AADJ%20them%20via%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EHow%20To%3A%20Plan%20your%20hybrid%20Azure%20Active%20Directory%20join%20implementation%3C%2FSPAN%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevices%2Fhybrid-azuread-join-plan%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevices%2Fhybrid-azuread-join-plan%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI'm%20sorry%20if%20this%20introduces%20efforts%20on%20your%20side.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20documentation%20is%20telling%20the%20fact%20only%20implicit%20by%20not%20telling%20that%20the%20IME%20is%20supported%20on%20WPJ%20devices%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%3E%3CSPAN%3EThe%20Intune%20management%20extension%20supports%20Azure%20AD%20joined%2C%20hybrid%20Azure%20AD%20domain%20joined%2C%20and%20co-managed%20enrolled%20Windows%20devices.%3C%2FSPAN%3E%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20is%20a%20bit%20confusing.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-482939%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-482939%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20Oliver%2C%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EYes%2C%20the%20confusion%20also%20comes%20from%20me%20thinking%20that%20%22%3CSPAN%3Ehybrid%20Azure%20AD%20domain%20joined%22%20simply%20means%20being%20in%20a%20hybrid%20situation.%20Since%2C%20if%20you%20add%20a%20local-AD%20machine%20to%20Intune%2C%20it's%20also%20added%20to%20Azure%20AD%20and%20becomes%20Hybrid.%20We%20have%20AD%20connect%20set%20up%20(for%20password%20sync)%20and%20when%20people%20login%20to%20Outlook%2C%20the%20devices%20shows%20in%20Azure%20AD%20devices%20(even%20before%20add%20school%2Fwork%20account).%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CBR%20%2F%3EThe%20other%20confusing%20part%20is%20that%20I%20would%20think%20MAM%20exists%20for%20BYOD%20scenarios%20(instead%20of%20WPJ)%2C%20and%20I%20can%20use%20MDM%20if%20I%20decide%20to%20use%20all%20intune%20features%20on%20every%20devices%20I%20have%20(including%20local%20AD%20joined%20laptops).%20%3CSTRONG%3EFrom%20my%20end%2C%20the%20devices%20don't%20look%20WPJ%20at%20all.%20They%20show%20as%20fully%20managed%20by%20intune%20MDM.%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20will%20go%20over%20the%20hybrid%20AD%20join%20methods%20you%20linked%20and%20see%20if%20this%20can%20fix%20our%20issues.%26nbsp%3B%3CBR%20%2F%3EI%20still%20believe%20it%20would%20be%20beneficial%20for%20all%20if%20every%20MDM%20intune%20(not%20MAM)%20would%20support%20the%20IME.%3CBR%20%2F%3EThanks%20for%20you%20time.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-687314%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-687314%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CBR%20%2F%3ESo%20today%2C%20surprisingly%2C%20I%20got%20the%20Intune%20Management%20Extension%20working%20on%20a%3CSTRONG%3E%20WorkplaceJoined%26nbsp%3B%3C%2FSTRONG%3EPC%20by%20removing%20the%20work%20account%2C%20and%20then%20choosing%26nbsp%3B%3CSTRONG%3EEnroll%20only%20in%20device%20management%3C%2FSTRONG%3E%20instead%20(almost%20hidden%20on%20the%20right...).%3C%2FP%3E%3CP%3EFor%20some%20reason%2C%20MDMdiag%20XML%20now%20reports%20%3CSTRONG%3EMDMFull%20%3C%2FSTRONG%3Einstead%20of%20%3CSTRONG%3EMDMFullWithAAD%3C%2FSTRONG%3E%2C%20and%20to%20my%20surprise%2C%20after%20installing%20the%20IME%2C%20I'm%20receiving%20powershell%20scripts.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAgain%20I%20have%20a%20lot%20of%20trouble%20finding%20documentation%20on%20the%20difference%20between%20the%20above%2C%20and%20why%20it's%20working%20if%20I%20use%20the%20Enroll%20only%20button%20rather%20than%20the%20CONNECT%20button.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20problem%20is%20still%20that%2C%20all%20our%20devices%20are%20joined%20to%20Intune%20with%20the%20CONNECT%20button%20either%20via%20the%20add%20school%2Fwork%20account%20menu%20or%20via%20the%20company%20portal.%3C%2FP%3E%3CP%3EThis%20means%20I%20would%20still%20need%20to%20un-enroll%20and%20re-enroll%20all%20our%20%22WorkplaceJoined%22%20devices.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMaybe%20you%20know%20of%20a%20way%20to%20get%20%22MDMFullWithAAD%22%20devices%20to%20be%20%22MDMFull%22%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Scott Paterson
Occasional Contributor

I am testing Intune/EMS on Windows 10 (1709) PCs and trying to get Powershell scripts to run without success. I think the issue is with the Intune Management Extension not installing but cant find much information on how to troubleshoot this particular issue.

 

Can anyone advise how I get Powershell scripts to run ? TIA

 

Scott

63 Replies

Has the machine synced? Can you see any log files in C:\ProgramData\Microsoft\IntuneManagementExtension\Logs ? 

No this directory ( IntuneManagementExtension ) does not exist....

Hi Scott,

 

maybe have a look at my blog post here:

 

Deep dive Microsoft Intune Management Extension – PowerShell Scripts

https://oliverkieselbach.com/2017/11/29/deep-dive-microsoft-intune-management-extension-powershell-s...

 

I cover inner workings and troubleshooting of the agent to find such particular issues with installing Intune Management Extension.

 

Two things to check for agent install issues are event viewer and the Agent MSI install log:

 

Start event viewer > Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider > Admin (event id 1924 and others)

 

MSI install log:

C:\Windows\system32\config\systemprofile\AppData\Local\mdm\ {25212568-E605-43D5-9AA2-7AE8DB2C3D09}.log

 

best,

Oliver

Oliver, thanks for the update.

 

If I look in the appdata\local\mdm folder it is empty

 

In event viewer I have a number of errors with Event ID 822 ( MDM PolicyManager:Acquiring the merge lock.... ), each ending with "cannot find the file specified", and a number of Event ID 454, Command failure status.

 

Not sure from your guide what this means or where to look next  ?

 

Regards

 

I should note that as a test I have deployed a few MSI's to my PC ( Notepad++ and 7Zip etc ) and these appear to install ok.

Okay the way the MSI's gets pushed to the machine is the same how the Intune Agent gets pushed down. So basically it should work.

How is your assignment did you use user assignment? In my tests that was the only functional way.

I've checked a few of my test machines, I can't find event entries with ID 822. Can you post a little more detail on your error events?

Is your problem still existing? Can you share us some details about the event log entries?

 

ok

Oliver, thanks for following up on this. Unfortunately I haven't made any progress on this as I have been working on other things. I will get back to it, hopefully sometime this week and let you know how I get on

 

Cheers

Did you get anywhere with this?  I have been struggling to figure out why sometimes I do not get the service and sometimes I do.  I have checked logs everywhere on the machine and do not see any relevant errors.

In our environments it's working quite well. We had problems due to interrupted network connectivity but this is not a problem of Intune or the agent. Are you targeting the scripts as user assignments? Can you share logs from a machine not getting the service? MDM report, logfiles, eventlogs, Intune Agent logfiles registry (HKLM\Software\Microsoft\EnterpriseDesktopAppManagement)...

I have the same problem. Intune management extension does not get installed.

I created a powershell script and assigned it to a group containing the user.

 

Any ideas? Or at least a way to troubleshoot the issue?

Sounds like problems with the initial MSI Install job via EnterpriseDesktopAppManagement CSP:

see here:

https://docs.microsoft.com/en-us/windows/client-management/mdm/enterprisedesktopappmanagement-csp

MSI/ProductID/Status Status of the application.

 

In the registry at HKLM\SOFTWARE\Microsoft\EnterpriseDesktopAppManagement\<SID>\<MSI-ProductCode> you can find the Status according to the CSP site above.

 

Try to figure out this status - Download error or what else and correlate with your machine and environment (may there be a proxy issue?). In the past Intune followed a retry logic. I give an example: try it 3 times with timeout of 10 min and then fail. If failed, Intune tried it again in 7 days (the 7 days setting after fail was fix in the past, maybe this interval is lowered now but I don't now, registry suggests that this is changed). So again the values above are examples based on registry values for the logic! I do not know if this is correct as I do not have documentation for it.

What are the registry values for Enforcement* on that machine. Values are in the same path as described above. There are the Retry, Interval, Timeout, Index and StartTime values... I'm not sure if this is all and how they correlate to each other exactly... But maybe we can extract some information from the retry values. For example it may look like that all retries are failed and the machine is in extended timeout currently....

 

Other way dealing with MSI install fails in the past, was to change something at the MSI metadata to re-enforce push/install. This is not possible in our case as we have no control over the SideCar agent metadata.

 

Can someone share the MDM advanced diagnostic report... what is listed there and what about the eventlogs...

I also noticed the same since approx 2 weeks.  This worked absolutely fine in the past (in Dec for example, I built internal docs based on these positive results).

 

Unfortunately, I did not found any root cause so far : in "devicemanagement" event log, stuff seems to communicate to the Intune backed and no obvious errors. Hitting "Sync button" does not help. The file  C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\IntuneManagementExtension.txt  and  the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\Policies\ are no longer created.

 

Since that time (coincidence?), I have also problems with devices enrolled with on-prem users coming from "synched AD groups" (from an on-prem infra, and using ADFS), where neither apps, scripts, or profiles are applied, even if "devicemanagement" event log does also not show obvious errors.    

 

I will post here once I will progress in my tests.

Hi Olivier,

 

what about HKLM\SOFTWARE\Microsoft\EnterpriseDesktopAppManagement\<SID>\<MSI-ProductCode> can find the status there?

I assume the failure has something to do with the CSP as mentioned in my last post. Can you check this, please? I like to know if the backend is not even trying to deliver or if the corresponding CSP EnterpriseDesktopAppManagement has a problem getting the sidecar msi and finally to execute it.

Screenshot attached (enrolled this time my VM at OOBE with an AAD user), and "Status" key is 0x46 (70).

 

This looks good! According the info from the screenshot the CSP has successfully downloaded and triggered the install of the sidecar msi. Do you have the Management Extension Service in the VM now? If not do you have the msi logfile of the sidecar now?

This morning, everything went fine and thought I would pull all my hair off. It worked with any users (AD or AAD), scripts were installed sometimes after 7 to 10 min of uptime after OOBE, but there were installed at some point.

But while writing this post, I did a last test with the same user I used during all my tests, and I hit the issue again : even the start menu icons (like for for XBox, Alarms, Weather, Sway,...) were not populated after 10 minutes, and were left with these "down-arrows" signs (see attachment), even if the Intune Management Extension MSI could already be seen in Settings/Apps pane.

But at the exact moment, that "wsappx" process starts to re-eat your CPU (it did it first time shortly after landing on desktop to install my 7-Zip MSI, Arduino and Bitcoin Calculator apps from the Store... I flagged them in Intune as "Required"), my PS scripts were executed after exactly 20 min of uptime!, and 4 minutes later, the start menu icons for XBox&Co started to be all populated.

So one thing is sure : you really have to wait until "omadmclient.exe" and this "State Repository Service" are really idle for long time, and you have to wait even few minutes more to be on safe side.

It makes me believe there is now like an artificial throttling interval, that didn't existed before, and is why people believe "PS scripts do not always work", especially when your CPU/network/disk are fully idle for few min.

Absolutely you have to be patient. Like ConfigMgr on-prem environment it takes time sometimes. A lot of background processes are running after OOBE and depending on various facts it may result in longer wait times. You observed it, OMA-DM client and so on... I have machine where I waited more than an hour. In the beginning of Intune (Silverlight portal and old backend) it was even worse, we waited for things sometime up to 4 hours and more. The new Azure based infrastructure is much better but it also takes some time infrequent. 

So again I can confirm that it takes time sometimes. But my past is defined by ConfigMgr environments and there you learn to have patients :-).

I could handle hours, we are talking weeks, and still no Management Extension Service.

Did you follow the troubleshooting advises from this thread?
App deployment via CSP, App install and so on... checked all log files registry entries...

Hi Oliver,

 

I have been having similar issues, however I don't see any logs/folder you have in your troubleshooting steps.

 

I have noticed i have a quite a few entries under configuration source in a provision state and have been for a couple weeks now.

 

Any ideas for me?

Hi Matthew,

 

Can you check the status of the agent deployment via EnterpriseDesktopAppManagment CSP please?

 

See here: https://oliverkieselbach.com/2018/02/12/part-2-deep-dive-microsoft-intune-management-extension-power...

 

best,

Oliver

Hi Oliver,

 

I went to check the registry but there is no folder for enterprisedesktopappmanagement, there is enterpriseappmanagement but the next level is database not and SID.

 

I have applied the intune script to a group that contains users. Is that a problem.

 

Matt

Hi Matt,

 

If you see no EnterpriseDesktopAppManagement then you did not received the MSI install job yet. Did you receive other policies from Intune? 

I assume you are not seeing ./device/Vendor/MSFT/EnterpriseDesktopAppManagement/ in the Advanced MDM report?!?

Open Settings > Accounts > Access work or school > Connected to TenantName’s Azure AD > Info > scroll down to the bottom and click “Create report”

 

So the question here is, does your client receive any policies from Intune?

User assignment is correct!

 

Oliver

Hi Oliver

 

You are correct I don't received the policy you mentioned in the report.

 

I would assume it is working in some capacity, as I set the commercial ID for OMS and some computers are reporting data.

 

Matt

Hi Matt,

 

can you assign your user a new PowerShell script wait 10 min. and then sync again. After that can you examine the event log if you can find any evidence of a failed EnterpriseDesktopAppManagement CSP?!

 

Start event viewer > Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider > Admin

 

Maybe you can also try to enable “Show Analytic and Debug Logs" and then examine the Debug event log for errors.

 

best,

Oliver

Hi Oliver,

 

I have been in contact with Intune Support who said Intune Powershell isn't avaible on Azure Hybrid Joined PC's with not ETA for that to be available.

 

Hopefully this helps someone in the future :(

Oh yes that's true I assumed AAD joined machines during discussion here all the time.

That's very good to mention here.

The device need to be auto-enrolled in MDM, not manually enrolled. Only with auto-enrollement installation of management extension is triggered.

Is there any way to trigger this with all of my manually enrolled devices? 

I believe I have found the answer, 

 

If both MAM user scope and automatic MDM enrollment (MDM user scope) are enabled for a group, only MAM is enabled. Only MAM is added for users in that group when they workplace join personal device. Devices are not automatically MDM enrolled.

Hi Matthew,

 

as time goes by things change :-), support for Hybrid Domain Joined devices is now available.

see here: https://docs.microsoft.com/en-us/intune/intune-management-extension

 

Prerequisites

The Intune management extension has the following prerequisites:

  • Devices must be joined to Azure AD and auto-enrolled. The Intune management extension supports Azure AD joined, hybrid domain joined, and comanaged enrolled Windows devices. GPO-enrolled devices aren't supported.
  • Devices must run Windows 10 version 1607 or later.
  • The Intune management extension agent is installed when a PowerShell script or a Win32 app is deployed to a user or device security group.

 

best,
Oliver

Hey @Oliver Kieselbach 

 

I too am having issues deploying the Intune agent.

 

Specifically this scenario I have noticed

 

I can stand up a machine, join to AAD, it will push the intune agent. Powershell scripts work.

 

IF I RESET the Win 10 machine, it will re-join AAD, but the Intune agent never pushes.

 

Nothing under win\system32\config\systemprofile\appdata\local\mdm

 

Only a few error messages in Event viewer, but nothing I recognize as "intune agent failed to install"

 

The machine does show the MDMDeviceWithAAD property. CompanyPortal is installed via MS Store.

 

I have replicated this behavior on 4 different machines.

 

The one instance I did get the agent to repush, I had to REMOVE the AAD account under 'Accounts -> Work & School' - then re-join it to AzureAD. - The Intune agent re-pushed after this process.

For further investigations, which type of reset did you choose exactly?

With retaining userdata, Autopilot Reset, Factory Reset, ...

This might have additional impact on the situation.

 

Thanks for the info.

Reset with retain user data. 

 

I've selected reset with retain user data from the device locally, and initiated via the Azure portal.

 

When the device finishes, the user profile is re-created and the device automatically joined to Azure AD. I go to Win Store and download Company Portal --- MSI apps that we set to install automatically like OpenDNS and Trend will download... but we never get the Intune agent after that reset event.

 

If I remove all AzureAD accounts from the laptop, switch back to local profile... then rejoin to AzureAD, I will get the intune agent again.

Out of curiosity did you try to reset without retaining user data. Maybe due to the retained user data there is some information stored which actually blocks the re-push of the agent.

As expected:

I performed a full wipe - the machine was not AAD joined afterward - It had a new identity (PC name) -- After manually rejoining AAD, manually reinstalling Company Portal, signing in as my AAD identity, Intune Agent downloaded. I can see in the DeviceManagment-Enterprise-Diagnostic-Provider a few new codes, 1922, 1920, 1906, 1905 - installing various GUID labeled programs - and now agent is available


I performed a 'Fresh Start' wipe on my other test machine. This retained the AAD association and PC name remained the same - after logging in, I manually reinstalled Company Portal. - after 3 hours, multiple reboots, manually initiating sync, No Intune agent.

I just removed the PC from azureAD, rebooted, rejoined manually, launched company portal, hit sync - Intune agent pushed to the machine.

I also experienced this today. I have run through a number of resets using "Keep my files" without an issue but today this occured. I am using 1809 Enterprise x64 patched up to 20-Feb on a Hyper-V VM. I will try a few more times and see what results.

I reset the broken machine and still broken. I left it overnight and still not working. I reset it again and still broken. What I did find is if I manually downloaded https://prodamsub0102data.azureedge.net/IntuneWindowsAgent.msi and ran it, my script started installing immediately. I just can't figure out what is blocking the agent from downloading and installing after the reset.

 

Any ideas @Oliver Kieselbach ?

I will see what I can investigate...

Looks like you can use MDM to push-install that IntuneInstaller.MSI that you found. 

 

I added it as an app with my OpenDNS and AV installs.

It would appear the issue has been resolved somehow by Microsoft.

 

I attempted to replicate the exact problem twice yesterday -  In both trials, The intune agent properly deployed itself and ran powershell script after a system was wiped, while retaining AzureAD Enrollment.

 

I did not require the use of additional work-arounds like force-deploying the intune.msi as a Line-of-Business app

I also have the same issue. Because of manual enrollment the Intune Management Extension does not install. I tried installing it manually as mentioned here, with IntuneWindowsAgent.msi.

It installs succesfully; I can see it in apps & features and I can see the files in C:\Program Files (x86)\Microsoft Intune Management Extension.

 

However, after some minutes, it somehow uninstalls itselfs. The files in the directory disappear.

From event manager:


Event ID 11724 Product: Microsoft Intune Management Extension -- Removal completed successfully.

Event ID 1034 Windows Installer removed the product. Product Name: Microsoft Intune Management Extension. Product Version: 1.16.105.0. Product Language: 1033. Manufacturer: Microsoft Corporation. Removal success or error status: 0.


@Oliver Kieselbach

Any idea? Thanks

I have the same problem.

Because all devices are manually joined to intune, they don't receive the Intune Management Extension.

I want to use powershell scripts, so I tried installing the extension manually as mentioned here (IntuneWindowsAgent.msi).

It installs succesfully and I can see the extension in programs & features and see the files in C:\Program Files (x86)\Microsoft Intune Management Extension.


However, after some minutes, it somehow uninstalls itself; the files are gone from the folder and it disappeared from apps & features.


Event manager:
Event ID 11724 Product: Microsoft Intune Management Extension -- Removal completed successfully.

Event ID 1034 Windows Installer removed the product. Product Name: Microsoft Intune Management Extension. Product Version: 1.16.105.0. Product Language: 1033. Manufacturer: Microsoft Corporation. Removal success or error status: 0.

 

@Oliver Kieselbach  or @JarrettB Any idea?

 

It might be that MS is pushing this uninstall as the device is not meant to be an agent device, but this is pure speculation. Microsoft is aware of this problem that people want to use the agent without going through the OOBE enrollment again.

Can you and others in this thread provide me numbers of effected clients? How many clients do you want to have under Intune agent management and are currently blocked due to this.

I'm asking to share the details of your deployment blockers with Intune PG. Are we talking about just a few devices or several thousand? Thanks.

Hmm, it certainly looks like it could be something like that. Sometimes it takes 5min to uninstall, sometimes 20min or longer.

I don't really see why it matters whether a machine is auto-enrolled via GPO or manually joined to be supported for powershell usage. 
Let's hope Microsoft adds the functionality soon. In my case it's around 100 devices.

@Oliver KieselbachWe have around 250 manually enrolled

In my case it is enrolled through OOBE but a different issue. Basically if you go through 2 x Reset this PC the agent does not come down. I found if I leave the device for about 2-4 days it will eventually come down. This is just in my lab but easy to reproduce over and over again. I have not tried lately since a month or so. Just an observation and not an urgent issue.
Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
Extentions Synchronization
ChirmyRam in Discussions on
3 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies