Intune Management Extension not installing

%3CLINGO-SUB%20id%3D%22lingo-sub-142443%22%20slang%3D%22en-US%22%3EIntune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-142443%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20testing%20Intune%2FEMS%20on%20Windows%2010%20(1709)%20PCs%20and%20trying%20to%20get%20Powershell%20scripts%20to%20run%20without%20success.%20I%20think%20the%20issue%20is%20with%20the%20Intune%20Management%20Extension%20not%20installing%20but%20cant%20find%20much%20information%20on%20how%20to%20troubleshoot%20this%20particular%20issue.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECan%20anyone%20advise%20how%20I%20get%20Powershell%20scripts%20to%20run%20%3F%20TIA%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EScott%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-142443%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-401009%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-401009%22%20slang%3D%22en-US%22%3E%3CP%3EGood%20news%20to%20all%2C%20the%20%22%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fin-development%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EIntune%20In%20Development%3C%2FA%3E%22%20site%20does%20list%20a%20feature%20which%20will%20be%20released%20soon%20that%20solves%20the%20agent%20install%20on%20devices%20not%20auto-enrolled%2C%20see%20here%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20id%3D%22configure-your-win32-apps-to-be-installed-on-intune-enrolled-azure-ad-joined-devices-%22%20class%3D%22heading-with-anchor%22%20id%3D%22toc-hId-1423196131%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-1505392290%22%3EConfigure%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%3EYou'll%20be%20able%20to%20assign%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices.%20For%20more%20information%20about%20Win32%20apps%20in%20Intune%2C%20see%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fapps-win32-app-management%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%20data-linktype%3D%22relative-path%22%3EWin32%20app%20management%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fin-development%23configure-your-win32-apps-to-be-installed-on-intune-enrolled-azure-ad-joined-devices-%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fin-development%23configure-your-win32-apps-to-be-installed-on-intune-enrolled-azure-ad-joined-devices-%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-390653%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-390653%22%20slang%3D%22en-US%22%3EIn%20my%20case%20it%20is%20enrolled%20through%20OOBE%20but%20a%20different%20issue.%20Basically%20if%20you%20go%20through%202%20x%20Reset%20this%20PC%20the%20agent%20does%20not%20come%20down.%20I%20found%20if%20I%20leave%20the%20device%20for%20about%202-4%20days%20it%20will%20eventually%20come%20down.%20This%20is%20just%20in%20my%20lab%20but%20easy%20to%20reproduce%20over%20and%20over%20again.%20I%20have%20not%20tried%20lately%20since%20a%20month%20or%20so.%20Just%20an%20observation%20and%20not%20an%20urgent%20issue.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-390619%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-390619%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3EWe%20have%20around%20250%20manually%20enrolled%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-365143%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-365143%22%20slang%3D%22en-US%22%3E%3CP%3EHmm%2C%20it%20certainly%20looks%20like%20it%20could%20be%20something%20like%20that.%20Sometimes%20it%20takes%205min%20to%20uninstall%2C%20sometimes%2020min%20or%20longer.%3C%2FP%3E%3CP%3EI%20don't%20really%20see%20why%20it%20matters%20whether%20a%20machine%20is%20auto-enrolled%20via%20GPO%20or%20manually%20joined%20to%20be%20supported%20for%20powershell%20usage.%26nbsp%3B%3CBR%20%2F%3ELet's%20hope%20Microsoft%20adds%20the%20functionality%20soon.%20In%20my%20case%20it's%20around%20100%20devices.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-365109%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-365109%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20might%20be%20that%20MS%20is%20pushing%20this%20uninstall%20as%20the%20device%20is%20not%20meant%20to%20be%20an%20agent%20device%2C%20but%20this%20is%20pure%20speculation.%20Microsoft%20is%20aware%20of%20this%20problem%20that%20people%20want%20to%20use%20the%20agent%20without%20going%20through%20the%20OOBE%20enrollment%20again.%3C%2FP%3E%0A%3CP%3ECan%20you%20and%20others%20in%20this%20thread%20provide%20me%20numbers%20of%20effected%20clients%3F%20How%20many%20clients%20do%20you%20want%20to%20have%20under%20Intune%20agent%20management%20and%20are%20currently%20blocked%20due%20to%20this.%3C%2FP%3E%0A%3CP%3EI'm%20asking%20to%20share%20the%20details%20of%20your%20deployment%20blockers%20with%20Intune%20PG.%20Are%20we%20talking%20about%20just%20a%20few%20devices%20or%20several%20thousand%3F%20Thanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-364716%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-364716%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20the%20same%20problem.%3C%2FP%3E%3CP%3EBecause%20all%20devices%20are%20manually%20joined%20to%20intune%2C%20they%20don't%20receive%20the%20Intune%20Management%20Extension.%3C%2FP%3E%3CP%3EI%20want%20to%20use%20powershell%20scripts%2C%20so%20I%20tried%20installing%20the%20extension%20manually%20as%20mentioned%20here%20(IntuneWindowsAgent.msi).%3C%2FP%3E%3CP%3EIt%20installs%20succesfully%20and%20I%20can%20see%20the%20extension%20in%20programs%20%26amp%3B%20features%20and%20see%20the%20files%20in%20C%3A%5CProgram%20Files%20(x86)%5CMicrosoft%20Intune%20Management%20Extension.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EHowever%2C%20after%20some%20minutes%2C%20it%20somehow%20uninstalls%20itself%3B%20the%20files%20are%20gone%20from%20the%20folder%20and%20it%20disappeared%20from%20apps%20%26amp%3B%20features.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EEvent%20manager%3A%3CBR%20%2F%3EEvent%20ID%2011724%20Product%3A%20Microsoft%20Intune%20Management%20Extension%20--%20Removal%20completed%20successfully.%3C%2FP%3E%3CP%3EEvent%20ID%201034%20Windows%20Installer%20removed%20the%20product.%20Product%20Name%3A%20Microsoft%20Intune%20Management%20Extension.%20Product%20Version%3A%201.16.105.0.%20Product%20Language%3A%201033.%20Manufacturer%3A%20Microsoft%20Corporation.%20Removal%20success%20or%20error%20status%3A%200.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F106235%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%20or%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F283805%22%20target%3D%22_blank%22%3E%40JarrettB%3C%2FA%3E%20Any%20idea%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-364690%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-364690%22%20slang%3D%22en-US%22%3E%3CP%3EI%20also%20have%20the%20same%20issue.%20Because%20of%20manual%20enrollment%20the%20Intune%20Management%20Extension%20does%20not%20install.%20I%20tried%20installing%20it%20manually%20as%20mentioned%20here%2C%20with%20IntuneWindowsAgent.msi.%3C%2FP%3E%3CP%3EIt%20installs%20succesfully%3B%20I%20can%20see%20it%20in%20apps%20%26amp%3B%20features%20and%20I%20can%20see%20the%20files%20in%20C%3A%5CProgram%20Files%20(x86)%5CMicrosoft%20Intune%20Management%20Extension.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20after%20some%20minutes%2C%20it%20somehow%20uninstalls%20itselfs.%20The%20files%20in%20the%20directory%20disappear.%3C%2FP%3E%3CP%3EFrom%20event%20manager%3A%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EEvent%20ID%2011724%20Product%3A%20Microsoft%20Intune%20Management%20Extension%20--%20Removal%20completed%20successfully.%3C%2FP%3E%3CP%3EEvent%20ID%201034%20Windows%20Installer%20removed%20the%20product.%20Product%20Name%3A%20Microsoft%20Intune%20Management%20Extension.%20Product%20Version%3A%201.16.105.0.%20Product%20Language%3A%201033.%20Manufacturer%3A%20Microsoft%20Corporation.%20Removal%20success%20or%20error%20status%3A%200.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F106235%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%3C%2FP%3E%3CDIV%20class%3D%22user-login%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F283805%22%20target%3D%22_blank%22%3E%40JarrettB%20%3C%2FA%3E%3C%2FDIV%3E%3CDIV%20class%3D%22post-author-login%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3EAny%20idea%3F%20Thanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-358290%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-358290%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20would%20appear%20the%20issue%20has%20been%20resolved%20somehow%20by%20Microsoft.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20attempted%20to%20replicate%20the%20exact%20problem%20twice%20yesterday%20-%26nbsp%3B%20In%20both%20trials%2C%20The%20intune%20agent%20properly%20deployed%20itself%20and%20ran%20powershell%20script%20after%20a%20system%20was%20wiped%2C%20while%20retaining%20AzureAD%20Enrollment.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20did%20not%20require%20the%20use%20of%20additional%20work-arounds%20like%20force-deploying%20the%20intune.msi%20as%20a%20Line-of-Business%20app%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357391%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357391%22%20slang%3D%22en-US%22%3E%3CP%3ELooks%20like%20you%20can%20use%20MDM%20to%20push-install%20that%20IntuneInstaller.MSI%20that%20you%20found.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20added%20it%20as%20an%20app%20with%20my%20OpenDNS%20and%20AV%20installs.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355928%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355928%22%20slang%3D%22en-US%22%3E%3CP%3EI%20will%20see%20what%20I%20can%20investigate...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355104%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355104%22%20slang%3D%22en-US%22%3E%3CP%3EI%20reset%20the%20broken%20machine%20and%20still%20broken.%20I%20left%20it%20overnight%20and%20still%20not%20working.%20I%20reset%20it%20again%20and%20still%20broken.%20What%20I%20did%20find%20is%20if%20I%20manually%20downloaded%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fprodamsub0102data.azureedge.net%2FIntuneWindowsAgent.msi%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fprodamsub0102data.azureedge.net%2FIntuneWindowsAgent.msi%3C%2FA%3E%20and%20ran%20it%2C%20my%20script%20started%20installing%20immediately.%20I%20just%20can't%20figure%20out%20what%20is%20blocking%20the%20agent%20from%20downloading%20and%20installing%20after%20the%20reset.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20ideas%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-354506%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-354506%22%20slang%3D%22en-US%22%3E%3CP%3EI%20also%20experienced%20this%20today.%20I%20have%20run%20through%20a%20number%20of%20resets%20using%20%22Keep%20my%20files%22%20without%20an%20issue%20but%20today%20this%20occured.%20I%20am%20using%201809%20Enterprise%20x64%20patched%20up%20to%2020-Feb%20on%20a%20Hyper-V%20VM.%20I%20will%20try%20a%20few%20more%20times%20and%20see%20what%20results.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-345671%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-345671%22%20slang%3D%22en-US%22%3E%3CP%3EAs%20expected%3A%3C%2FP%3E%3CP%3EI%20performed%20a%20full%20wipe%20-%20the%20machine%20was%20not%20AAD%20joined%20afterward%20-%20It%20had%20a%20new%20identity%20(PC%20name)%20--%20After%20manually%20rejoining%20AAD%2C%20manually%20reinstalling%20Company%20Portal%2C%20signing%20in%20as%20my%20AAD%20identity%2C%20Intune%20Agent%20downloaded.%20I%20can%20see%20in%20the%20DeviceManagment-Enterprise-Diagnostic-Provider%20a%20few%20new%20codes%2C%201922%2C%201920%2C%201906%2C%201905%20-%20installing%20various%20GUID%20labeled%20programs%20-%20and%20now%20agent%20is%20available%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EI%20performed%20a%20'Fresh%20Start'%20wipe%20on%20my%20other%20test%20machine.%20This%20retained%20the%20AAD%20association%20and%20PC%20name%20remained%20the%20same%20-%20after%20logging%20in%2C%20I%20manually%20reinstalled%20Company%20Portal.%20-%20after%203%20hours%2C%20multiple%20reboots%2C%20manually%20initiating%20sync%2C%20No%20Intune%20agent.%3C%2FP%3E%3CP%3EI%20just%20removed%20the%20PC%20from%20azureAD%2C%20rebooted%2C%20rejoined%20manually%2C%20launched%20company%20portal%2C%20hit%20sync%20-%20Intune%20agent%20pushed%20to%20the%20machine.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-341145%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-341145%22%20slang%3D%22en-US%22%3E%3CP%3EOut%20of%20curiosity%20did%20you%20try%20to%20reset%20without%20retaining%20user%20data.%20Maybe%20due%20to%20the%20retained%20user%20data%20there%20is%20some%20information%20stored%20which%20actually%20blocks%20the%20re-push%20of%20the%20agent.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-341136%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-341136%22%20slang%3D%22en-US%22%3E%3CP%3EReset%20with%20retain%20user%20data.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20selected%20reset%20with%20retain%20user%20data%20from%20the%20device%20locally%2C%20and%20initiated%20via%20the%20Azure%20portal.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20the%20device%20finishes%2C%20the%20user%20profile%20is%20re-created%20and%20the%20device%20automatically%20joined%20to%20Azure%20AD.%20I%20go%20to%20Win%20Store%20and%20download%20Company%20Portal%20---%20MSI%20apps%20that%20we%20set%20to%20install%20automatically%20like%20OpenDNS%20and%20Trend%20will%20download...%20but%20we%20never%20get%20the%20Intune%20agent%20after%20that%20reset%20event.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20remove%20all%20AzureAD%20accounts%20from%20the%20laptop%2C%20switch%20back%20to%20local%20profile...%20then%20rejoin%20to%20AzureAD%2C%20I%20will%20get%20the%20intune%20agent%20again.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-341134%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-341134%22%20slang%3D%22en-US%22%3E%3CP%3EFor%20further%20investigations%2C%20which%20type%20of%20reset%20did%20you%20choose%20exactly%3F%3C%2FP%3E%0A%3CP%3EWith%20retaining%20userdata%2C%20Autopilot%20Reset%2C%20Factory%20Reset%2C%20...%3C%2FP%3E%0A%3CP%3EThis%20might%20have%20additional%20impact%20on%20the%20situation.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%20for%20the%20info.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-339009%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-339009%22%20slang%3D%22en-US%22%3E%3CP%3EHey%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20too%20am%20having%20issues%20deploying%20the%20Intune%20agent.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESpecifically%20this%20scenario%20I%20have%20noticed%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can%20stand%20up%20a%20machine%2C%20join%20to%20AAD%2C%20it%20will%20push%20the%20intune%20agent.%20Powershell%20scripts%20work.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIF%20I%20RESET%20the%20Win%2010%20machine%2C%20it%20will%20re-join%20AAD%2C%20but%20the%20Intune%20agent%20never%20pushes.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENothing%20under%20win%5Csystem32%5Cconfig%5Csystemprofile%5Cappdata%5Clocal%5Cmdm%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOnly%20a%20few%20error%20messages%20in%20Event%20viewer%2C%20but%20nothing%20I%20recognize%20as%20%22intune%20agent%20failed%20to%20install%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20machine%20does%20show%20the%20MDMDeviceWithAAD%20property.%20CompanyPortal%20is%20installed%20via%20MS%20Store.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20replicated%20this%20behavior%20on%204%20different%20machines.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20one%20instance%20I%20did%20get%20the%20agent%20to%20repush%2C%20I%20had%20to%20REMOVE%20the%20AAD%20account%20under%20'Accounts%20-%26gt%3B%20Work%20%26amp%3B%20School'%20-%20then%20re-join%20it%20to%20AzureAD.%20-%20The%20Intune%20agent%20re-pushed%20after%20this%20process.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-314467%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-314467%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Matthew%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Eas%20time%20goes%20by%20things%20change%20%3A-)%2C%20support%20for%20Hybrid%20Domain%20Joined%20devices%20is%20now%20available.%3C%2FP%3E%0A%3CP%3Esee%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fintune-management-extension%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fintune-management-extension%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22prerequisites%22%20class%3D%22heading-with-anchor%22%20id%3D%22toc-hId-1619709636%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%20id%3D%22toc-hId--850251166%22%3EPrerequisites%3C%2FH2%3E%0A%3CP%3EThe%20Intune%20management%20extension%20has%20the%20following%20prerequisites%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EDevices%20must%20be%20joined%20to%20Azure%20AD%20and%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwindows-enroll%23enable-windows-10-automatic-enrollment%22%20data-linktype%3D%22relative-path%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eauto-enrolled%3C%2FA%3E.%20The%20Intune%20management%20extension%20supports%20Azure%20AD%20joined%2C%20%3CSTRONG%3Ehybrid%20domain%20joined%3C%2FSTRONG%3E%2C%20and%20comanaged%20enrolled%20Windows%20devices.%20GPO-enrolled%20devices%20aren't%20supported.%3C%2FLI%3E%0A%3CLI%3EDevices%20must%20run%20Windows%2010%20version%201607%20or%20later.%3C%2FLI%3E%0A%3CLI%3EThe%20Intune%20management%20extension%20agent%20is%20installed%20when%20a%20PowerShell%20script%20or%20a%20Win32%20app%20is%20deployed%20to%20a%20user%20or%20device%20security%20group.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3CBR%20%2F%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-307385%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-307385%22%20slang%3D%22en-US%22%3E%3CP%3EI%20believe%20I%20have%20found%20the%20answer%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EIf%20both%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EMAM%20user%20scope%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3Band%20automatic%20MDM%20enrollment%20(%3C%2FSPAN%3E%3CSTRONG%3EMDM%20user%20scope%3C%2FSTRONG%3E%3CSPAN%3E)%20are%20enabled%20for%20a%20group%2C%20only%20MAM%20is%20enabled.%20Only%20MAM%20is%20added%20for%20users%20in%20that%20group%20when%20they%20workplace%20join%20personal%20device.%20Devices%20are%20not%20automatically%20MDM%20enrolled.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-307383%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-307383%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20any%20way%20to%20trigger%20this%20with%20all%20of%20my%20manually%20enrolled%20devices%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-217045%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-217045%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20device%20need%20to%20be%20auto-enrolled%20in%20MDM%2C%20not%20manually%20enrolled.%20Only%20with%20auto-enrollement%20installation%20of%20management%20extension%20is%20triggered.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-163806%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-163806%22%20slang%3D%22en-US%22%3E%3CP%3EOh%20yes%20that's%20true%20I%20assumed%20AAD%20joined%20machines%20during%20discussion%20here%20all%20the%20time.%3C%2FP%3E%0A%3CP%3EThat's%20very%20good%20to%20mention%20here.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-163529%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-163529%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Oliver%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20been%20in%20contact%20with%20Intune%20Support%20who%20said%20Intune%20Powershell%20isn't%20avaible%20on%20Azure%20Hybrid%20Joined%20PC's%20with%20not%20ETA%20for%20that%20to%20be%20available.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHopefully%20this%20helps%20someone%20in%20the%20future%20%3A(%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-161089%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-161089%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Matt%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ecan%20you%20assign%20your%20user%20a%20new%20PowerShell%20script%20wait%2010%20min.%20and%20then%20sync%20again.%20After%20that%26nbsp%3Bcan%20you%20examine%20the%20event%20log%20if%20you%20can%20find%20any%20evidence%20of%20a%20failed%20EnterpriseDesktopAppManagement%20CSP%3F!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EStart%20event%20viewer%20%26gt%3B%20Applications%20and%20Services%20Logs%20%26gt%3B%20Microsoft%20%26gt%3B%20Windows%20%26gt%3B%20DeviceManagement-Enterprise-Diagnostics-Provider%20%26gt%3B%20Admin%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EMaybe%20you%20can%20also%20try%20to%20enable%20%E2%80%9CShow%20Analytic%20and%20Debug%20Logs%22%20and%20then%20examine%20the%20Debug%20event%20log%20for%20errors.%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3Ebest%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EOliver%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-161037%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-161037%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Oliver%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20are%20correct%20I%20don't%20received%20the%20policy%20you%20mentioned%20in%20the%20report.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20would%20assume%20it%20is%20working%20in%20some%20capacity%2C%20as%20I%20set%20the%20commercial%20ID%20for%20OMS%20and%20some%20computers%20are%20reporting%20data.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMatt%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-160593%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-160593%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Matt%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20you%20see%20no%20EnterpriseDesktopAppManagement%20then%20you%20did%20not%20received%20the%20MSI%20install%20job%20yet.%20Did%20you%20receive%20other%20policies%20from%20Intune%3F%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20assume%20you%20are%20not%20seeing%26nbsp%3B%3CSPAN%3E.%2Fdevice%2FVendor%2FMSFT%2FEnterpriseDesktopAppManagement%2F%3C%2FSPAN%3E%20in%20the%20Advanced%20MDM%20report%3F!%3F%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EOpen%20Settings%20%26gt%3B%20Accounts%20%26gt%3B%20Access%20work%20or%20school%20%26gt%3B%20Connected%20to%20TenantName%E2%80%99s%20Azure%20AD%20%26gt%3B%20Info%20%26gt%3B%20scroll%20down%20to%20the%20bottom%20and%20click%20%E2%80%9CCreate%20report%E2%80%9D%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3ESo%20the%20question%20here%20is%2C%20does%20your%20client%20receive%20any%20policies%20from%20Intune%3F%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EUser%20assignment%20is%20correct!%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EOliver%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-160482%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-160482%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Oliver%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20went%20to%20check%20the%20registry%20but%20there%20is%20no%20folder%20for%20enterprisedesktopappmanagement%2C%20there%20is%20enterpriseappmanagement%20but%20the%20next%20level%20is%20database%20not%20and%20SID.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20applied%20the%20intune%20script%20to%20a%20group%20that%20contains%20users.%20Is%20that%20a%20problem.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMatt%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-159992%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-159992%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Matthew%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECan%20you%20check%20the%20status%20of%20the%20agent%20deployment%20via%20%3CSTRONG%3EEnterpriseDesktopAppManagment%3C%2FSTRONG%3E%20%3CSTRONG%3ECSP%3C%2FSTRONG%3E%20please%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESee%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Foliverkieselbach.com%2F2018%2F02%2F12%2Fpart-2-deep-dive-microsoft-intune-management-extension-powershell-scripts%2F%23enterprisedesktopappmanagement-csp%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Foliverkieselbach.com%2F2018%2F02%2F12%2Fpart-2-deep-dive-microsoft-intune-management-extension-powershell-scripts%2F%23enterprisedesktopappmanagement-csp%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-159836%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-159836%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Oliver%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20been%20having%20similar%20issues%2C%20however%20I%20don't%20see%20any%20logs%2Ffolder%20you%20have%20in%20your%20troubleshooting%20steps.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20noticed%20i%20have%20a%20quite%20a%20few%20entries%20under%20configuration%20source%20in%20a%20provision%20state%20and%20have%20been%20for%20a%20couple%20weeks%20now.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAny%20ideas%20for%20me%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-153438%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-153438%22%20slang%3D%22en-US%22%3EDid%20you%20follow%20the%20troubleshooting%20advises%20from%20this%20thread%3F%3CBR%20%2F%3EApp%20deployment%20via%20CSP%2C%20App%20install%20and%20so%20on...%20checked%20all%20log%20files%20registry%20entries...%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-153435%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-153435%22%20slang%3D%22en-US%22%3E%3CP%3EI%20could%20handle%20hours%2C%20we%20are%20talking%20weeks%2C%20and%20still%20no%20Management%20Extension%20Service.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-153426%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-153426%22%20slang%3D%22en-US%22%3E%3CP%3EAbsolutely%20you%20have%20to%20be%20patient.%20Like%20ConfigMgr%20on-prem%20environment%20it%20takes%20time%20sometimes.%20A%20lot%20of%20background%20processes%20are%20running%20after%20OOBE%20and%20depending%20on%20various%20facts%20it%20may%20result%20in%20longer%20wait%20times.%20You%20observed%20it%2C%20OMA-DM%20client%20and%20so%20on...%20I%20have%20machine%20where%20I%20waited%20more%20than%20an%20hour.%20In%20the%20beginning%20of%20Intune%20(Silverlight%20portal%20and%20old%20backend)%20it%20was%20even%20worse%2C%20we%20waited%20for%20things%20sometime%20up%20to%204%20hours%20and%20more.%20The%20new%20Azure%20based%20infrastructure%20is%20much%20better%20but%20it%20also%20takes%20some%20time%20infrequent.%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESo%20again%20I%20can%20confirm%20that%20it%20takes%20time%20sometimes.%20But%20my%20past%20is%20defined%20by%20ConfigMgr%20environments%20and%20there%20you%20learn%20to%20have%20patients%20%3A-).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-153361%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-153361%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20morning%2C%20everything%20went%20fine%20and%20thought%20I%20would%20pull%20all%20my%20hair%20off.%20It%20worked%20with%20any%20users%20(AD%20or%20AAD)%2C%20scripts%20were%20installed%20sometimes%20after%207%20to%2010%20min%20of%20uptime%20after%20OOBE%2C%20but%20there%20were%20installed%20at%20some%20point.%3CBR%20%2F%3E%3CBR%20%2F%3EBut%20while%20writing%20this%20post%2C%20I%20did%20a%20last%20test%20with%20the%20same%20user%20I%20used%20during%20all%20my%20tests%2C%20and%20I%20hit%20the%20issue%20again%20%3A%20even%20the%20start%20menu%20icons%20(like%20for%20for%20XBox%2C%20Alarms%2C%20Weather%2C%20Sway%2C...)%20were%20not%20populated%20after%2010%20minutes%2C%20and%20were%20left%20with%20these%20%22down-arrows%22%20signs%20(see%20attachment)%2C%20even%20if%20the%20Intune%20Management%20Extension%20MSI%20could%20already%20be%20seen%20in%20Settings%2FApps%20pane.%20%3CBR%20%2F%3E%3CBR%20%2F%3EBut%20at%20the%20exact%20moment%2C%20that%20%22wsappx%22%20process%20starts%20to%20re-eat%20your%20CPU%20(it%20did%20it%20first%20time%20shortly%20after%20landing%20on%20desktop%20to%20install%20my%207-Zip%20MSI%2C%20Arduino%20and%20Bitcoin%20Calculator%20apps%20from%20the%20Store...%20I%20flagged%20them%20in%20Intune%20as%20%22Required%22)%2C%20my%20PS%20scripts%20were%20executed%20after%20exactly%2020%20min%20of%20uptime!%2C%20and%204%20minutes%20later%2C%20the%20start%20menu%20icons%20for%20XBox%26amp%3BCo%20started%20to%20be%20all%20populated.%3CBR%20%2F%3E%3CBR%20%2F%3ESo%20one%20thing%20is%20sure%20%3A%20you%20really%20have%20to%20wait%20until%20%22omadmclient.exe%22%20and%20this%20%22State%20Repository%20Service%22%20are%20really%20idle%20for%20long%20time%2C%20and%20you%20have%20to%20wait%20even%20few%20minutes%20more%20to%20be%20on%20safe%20side.%3CBR%20%2F%3E%3CBR%20%2F%3EIt%20makes%20me%20believe%20there%20is%20now%20like%20an%20artificial%20throttling%20interval%2C%20that%20didn't%20existed%20before%2C%20and%20is%20why%20people%20believe%20%22PS%20scripts%20do%20not%20always%20work%22%2C%20especially%20when%20your%20CPU%2Fnetwork%2Fdisk%20are%20fully%20idle%20for%20few%20min.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152982%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152982%22%20slang%3D%22en-US%22%3EThis%20looks%20good!%20According%20the%20info%20from%20the%20screenshot%20the%20CSP%20has%20successfully%20downloaded%20and%20triggered%20the%20install%20of%20the%20sidecar%20msi.%20Do%20you%20have%20the%20Management%20Extension%20Service%20in%20the%20VM%20now%3F%20If%20not%20do%20you%20have%20the%20msi%20logfile%20of%20the%20sidecar%20now%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152959%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152959%22%20slang%3D%22en-US%22%3E%3CP%3EScreenshot%20attached%20(enrolled%20this%20time%20my%20VM%20at%20OOBE%20with%20an%20AAD%20user)%2C%20and%20%22Status%22%20key%20is%200x46%20(70).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152919%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152919%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Olivier%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ewhat%20about%26nbsp%3B%3CSPAN%3EHKLM%5CSOFTWARE%5CMicrosoft%5C%3C%2FSPAN%3E%3CSPAN%3EEnterpriseDesktopAppManagement%5C%3CSID%3E%5C%3CMSI-PRODUCTCODE%3E%20can%20find%20the%20status%20there%3F%3C%2FMSI-PRODUCTCODE%3E%3C%2FSID%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EI%20assume%20the%20failure%20has%20something%20to%20do%20with%20the%20CSP%20as%20mentioned%20in%20my%20last%20post.%20Can%20you%20check%20this%2C%20please%3F%20I%20like%20to%20know%20if%20the%20backend%20is%20not%20even%20trying%20to%20deliver%20or%20if%20the%20corresponding%20CSP%26nbsp%3BEnterpriseDesktopAppManagement%20has%20a%20problem%20getting%20the%20sidecar%20msi%20and%20finally%20to%20execute%20it.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152917%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152917%22%20slang%3D%22en-US%22%3E%3CP%3EI%20also%20noticed%20the%20same%20since%20approx%202%20weeks.%26nbsp%3B%20This%20worked%20absolutely%20fine%20in%20the%20past%20(in%20Dec%20for%20example%2C%20I%20built%20internal%20docs%20based%20on%20these%20positive%20results).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EUnfortunately%2C%20I%20did%20not%20found%20any%20root%20cause%20so%20far%20%3A%20in%20%22devicemanagement%22%20event%20log%2C%20stuff%20seems%20to%20communicate%20to%20the%20Intune%20backed%20and%20no%20obvious%20errors.%20Hitting%20%22Sync%20button%22%20does%20not%20help.%20The%20file%26nbsp%3B%20%3CEM%3EC%3A%5CProgramData%5CMicrosoft%5CIntuneManagementExtension%5CLogs%5CIntuneManagementExtension.txt%3CSTRONG%3E%26nbsp%3B%20%3C%2FSTRONG%3E%3C%2FEM%3Eand%26nbsp%3B%20the%20key%20%3CEM%3EHKEY_LOCAL_MACHINE%5CSOFTWARE%5CMicrosoft%5CIntuneManagementExtension%5CPolicies%5C%3C%2FEM%3E%20are%20no%20longer%20created.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESince%20that%20time%20(coincidence%3F)%2C%20I%20have%20also%20problems%20with%20devices%20enrolled%20with%20on-prem%20users%20coming%20from%20%22synched%20AD%20groups%22%20(from%20an%20on-prem%20infra%2C%20and%20using%20ADFS)%2C%20where%20neither%20apps%2C%20scripts%2C%20or%20profiles%20are%20applied%2C%20even%20if%20%22devicemanagement%22%20event%20log%20does%20also%20not%20show%20obvious%20errors.%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20will%20post%20here%20once%20I%20will%20progress%20in%20my%20tests.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152803%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152803%22%20slang%3D%22en-US%22%3E%3CP%3ESounds%20like%20problems%20with%20the%20initial%20MSI%20Install%20job%20via%20EnterpriseDesktopAppManagement%20CSP%3A%3C%2FP%3E%0A%3CP%3Esee%20here%3A%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fclient-management%2Fmdm%2Fenterprisedesktopappmanagement-csp%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fclient-management%2Fmdm%2Fenterprisedesktopappmanagement-csp%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EMSI%2F%3CEM%3EProductID%3C%2FEM%3E%2FStatus%20%3C%2FSTRONG%3E%3CSPAN%3EStatus%20of%20the%20application.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20the%20registry%20at%20HKLM%5CSOFTWARE%5CMicrosoft%5C%3CSPAN%3EEnterpriseDesktopAppManagement%5C%3CSID%3E%5C%3CMSI-PRODUCTCODE%3E%20you%20can%20find%20the%20Status%20according%20to%20the%20CSP%20site%20above.%3C%2FMSI-PRODUCTCODE%3E%3C%2FSID%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ET%3CSPAN%3Ery%20to%20figure%20out%20this%20status%20-%20Download%20error%20or%20what%20else%20and%20correlate%20with%20your%20machine%20and%20environment%20(may%20there%20be%20a%20proxy%20issue%3F).%20In%20the%20past%20Intune%20followed%20a%20retry%20logic.%20I%20give%20an%20example%3A%20try%20it%203%20times%20with%20timeout%20of%2010%20min%20and%20then%20fail.%20If%20failed%2C%20Intune%20tried%20it%20again%20in%207%20days%20(the%207%20days%20setting%20after%20fail%20was%20fix%20in%20the%20past%2C%20maybe%20this%20interval%20is%20lowered%20now%20but%20I%20don't%20now%2C%20registry%20suggests%20that%20this%20is%20changed).%20So%20again%20the%20values%20above%20are%20examples%20based%20on%20registry%20values%20for%20the%20logic!%20I%20do%20not%20know%20if%20this%20is%20correct%20as%20I%20do%20not%20have%20documentation%20for%20it.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EWhat%20are%20the%20registry%20values%20for%20Enforcement*%20on%20that%20machine.%20Values%20are%20in%20the%20same%20path%20as%20described%20above.%20There%20are%20the%20Retry%2C%20Interval%2C%20Timeout%2C%20Index%20and%20StartTime%20values...%20I'm%20not%20sure%20if%20this%20is%20all%20and%20how%20they%20correlate%20to%20each%20other%20exactly...%20But%20maybe%20we%20can%20extract%20some%20information%20from%20the%20retry%20values.%20For%20example%20it%20may%20look%20like%20that%20all%20retries%20are%20failed%20and%20the%20machine%20is%20in%20extended%20timeout%20currently....%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EOther%20way%20dealing%20with%20MSI%20install%20fails%20in%20the%20past%2C%20was%20to%20change%20something%20at%20the%20MSI%20metadata%20to%20re-enforce%20push%2Finstall.%20This%20is%20not%20possible%20in%20our%20case%20as%20we%20have%20no%20control%20over%20the%20SideCar%20agent%20metadata.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3ECan%20someone%20share%20the%20MDM%20advanced%20diagnostic%20report...%20what%20is%20listed%20there%20and%20what%20about%20the%20eventlogs...%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152772%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152772%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20the%20same%20problem.%20Intune%20management%20extension%20does%20not%20get%20installed.%3C%2FP%3E%0A%3CP%3EI%20created%20a%20powershell%20script%20and%20assigned%20it%20to%20a%20group%20containing%20the%20user.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAny%20ideas%3F%20Or%20at%20least%20a%20way%20to%20troubleshoot%20the%20issue%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152726%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152726%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20our%20environments%20it's%20working%20quite%20well.%20We%20had%20problems%20due%20to%20interrupted%20network%20connectivity%20but%20this%20is%20not%20a%20problem%20of%20Intune%20or%20the%20agent.%20Are%20you%20targeting%20the%20scripts%20as%20user%20assignments%3F%20Can%20you%20share%20logs%20from%20a%20machine%20not%20getting%20the%20service%3F%20MDM%20report%2C%20logfiles%2C%20eventlogs%2C%20Intune%20Agent%20logfiles%20registry%20(HKLM%5CSoftware%5CMicrosoft%5CEnterpriseDesktopAppManagement)...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-152622%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-152622%22%20slang%3D%22en-US%22%3E%3CP%3EDid%20you%20get%20anywhere%20with%20this%3F%26nbsp%3B%20I%20have%20been%20struggling%20to%20figure%20out%20why%20sometimes%20I%20do%20not%20get%20the%20service%20and%20sometimes%20I%20do.%26nbsp%3B%20I%20have%20checked%20logs%20everywhere%20on%20the%20machine%20and%20do%20not%20see%20any%20relevant%20errors.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-149986%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-149986%22%20slang%3D%22en-US%22%3E%3CP%3EOliver%2C%20thanks%20for%20following%20up%20on%20this.%20Unfortunately%20I%20haven't%20made%20any%20progress%20on%20this%20as%20I%20have%20been%20working%20on%20other%20things.%20I%20will%20get%20back%20to%20it%2C%20hopefully%20sometime%20this%20week%20and%20let%20you%20know%20how%20I%20get%20on%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECheers%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-149614%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-149614%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20your%20problem%20still%20existing%3F%20Can%20you%20share%20us%20some%20details%20about%20the%20event%20log%20entries%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Eok%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-145140%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-145140%22%20slang%3D%22en-US%22%3E%3CP%3EI've%20checked%20a%20few%20of%20my%20test%20machines%2C%20I%20can't%20find%20event%20entries%20with%20ID%20822.%20Can%20you%20post%20a%20little%20more%20detail%20on%20your%20error%20events%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-145133%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-145133%22%20slang%3D%22en-US%22%3E%3CP%3EOkay%20the%20way%20the%20MSI's%20gets%20pushed%20to%20the%20machine%20is%20the%20same%20how%20the%20Intune%20Agent%20gets%20pushed%20down.%20So%20basically%20it%20should%20work.%3C%2FP%3E%0A%3CP%3EHow%20is%20your%20assignment%20did%20you%20use%20user%20assignment%3F%20In%20my%20tests%20that%20was%20the%20only%20functional%20way.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-145132%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-145132%22%20slang%3D%22en-US%22%3E%3CP%3EI%20should%20note%20that%20as%20a%20test%20I%20have%20deployed%20a%20few%20MSI's%20to%20my%20PC%20(%20Notepad%2B%2B%20and%207Zip%20etc%20)%20and%20these%20appear%20to%20install%20ok.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-145131%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-145131%22%20slang%3D%22en-US%22%3E%3CP%3EOliver%2C%20thanks%20for%20the%20update.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20I%20look%20in%20the%20appdata%5Clocal%5Cmdm%20folder%20it%20is%20empty%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20event%20viewer%20I%20have%20a%20number%20of%20errors%20with%20Event%20ID%20822%20(%20MDM%20PolicyManager%3AAcquiring%20the%20merge%20lock....%20)%2C%20each%20ending%20with%20%22cannot%20find%20the%20file%20specified%22%2C%20and%20a%20number%20of%20Event%20ID%20454%2C%20Command%20failure%20status.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENot%20sure%20from%20your%20guide%20what%20this%20means%20or%20where%20to%20look%20next%26nbsp%3B%20%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ERegards%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-145121%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-145121%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Scott%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Emaybe%20have%20a%20look%20at%20my%20blog%20post%20here%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EDeep%20dive%20Microsoft%20Intune%20Management%20Extension%20%E2%80%93%20PowerShell%20Scripts%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Foliverkieselbach.com%2F2017%2F11%2F29%2Fdeep-dive-microsoft-intune-management-extension-powershell-scripts%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Foliverkieselbach.com%2F2017%2F11%2F29%2Fdeep-dive-microsoft-intune-management-extension-powershell-scripts%2F%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20cover%20inner%20workings%20and%20troubleshooting%20of%20the%20agent%20to%20find%20such%20particular%20issues%20with%20installing%20Intune%20Management%20Extension.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETwo%20things%20to%20check%20for%20agent%20install%20issues%20are%20event%20viewer%20and%20the%20Agent%20MSI%20install%20log%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EStart%20event%20viewer%20%26gt%3B%20Applications%20and%20Services%20Logs%20%26gt%3B%20Microsoft%20%26gt%3B%20Windows%20%26gt%3B%20DeviceManagement-Enterprise-Diagnostics-Provider%20%26gt%3B%20Admin%20(event%20id%201924%20and%20others)%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EMSI%20install%20log%3A%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EC%3A%5CWindows%5Csystem32%5Cconfig%5Csystemprofile%5CAppData%5CLocal%5Cmdm%5C%20%7B25212568-E605-43D5-9AA2-7AE8DB2C3D09%7D.log%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3Ebest%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EOliver%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-142586%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-142586%22%20slang%3D%22en-US%22%3E%3CP%3E%3CFONT%20size%3D%223%22%20face%3D%22Calibri%2CHelvetica%2Csans-serif%22%20color%3D%22black%22%3E%3CSPAN%20style%3D%22font-size%3A%2012pt%3B%22%3ENo%20this%20directory%20(%20IntuneManagementExtension%20)%20does%20not%20exist....%3C%2FSPAN%3E%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-142493%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-142493%22%20slang%3D%22en-US%22%3E%3CP%3EHas%20the%20machine%20synced%3F%20Can%20you%20see%20any%20log%20files%20in%26nbsp%3BC%3A%5CProgramData%5CMicrosoft%5CIntuneManagementExtension%5CLogs%20%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-402803%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-402803%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EHmm%2C%20their%20wording%20is%20a%20bit%20confusing%20again%3A%3C%2FP%3E%3CP%3E%22You'll%20be%20able%20to%20assign%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices.%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEvery%20Intune%20MDM%20device%20is%20%22intune%20enrolled%22%2C%20regardless%20of%20whether%20this%20was%20manual%2Fgpo%2Fetc.%3C%2FP%3E%3CP%3EAlso%2C%20I%20don't%20have%20any%20problems%20with%20Azure%20AD%20joined%20devices.%20The%20problem%20is%20regarding%20Hybrid%20AD%20devices.%3C%2FP%3E%3CP%3EOn%20both%20hybrid%20and%20Azure%20AD%20joined%20devices%2C%20I%20use%20the%20%22connect%20work%20or%20school%20account%22%20(auto-enrollment%20MDM%20set-up).%20The%20Azure%20AD%20machines%20receive%20the%20intune%20management%20extension%2C%20while%20the%20hybrid%20ones%20do%20not.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-465765%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-465765%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFound%20this%20under%20the%20roadmap%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%20class%3D%22align-cell%22%3E%3CP%20class%3D%22c-paragraph-3%20x-weight-semibold%22%3E%3CEM%3EMicrosoft%20Intune%20expands%20Win32%20app%20deployment%20capabilities%3C%2FEM%3E%3C%2FP%3E%3C%2FDIV%3E%3CP%20class%3D%22c-paragraph-3%20x-weight-semibold%22%3E%3CEM%3EBuilding%20upon%20the%20existing%20support%20for%20line-of-business%20(LOB)%20apps%20and%20Microsoft%20Store%20for%20Business%20apps%2C%20administrators%20can%20now%20use%20Microsoft%20Intune%20to%20deploy%20most%20of%20their%20organization%E2%80%99s%20existing%20applications%20on%20Windows%2010%20devices.%20Administrators%20can%20add%2C%20install%2C%20and%20uninstall%20applications%20for%20Windows%2010%20users%20in%20a%20variety%20of%20formats%20such%20as%20MSI%2C%20MSP%2C%20and%20Setup.exe%20This%20feature%20is%20available%20in%20public%20preview%20as%20of%20CY%20Q4%202018%3C%2FEM%3E%3C%2FP%3E%3CP%20class%3D%22c-paragraph-3%20x-weight-semibold%22%3E%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Froadmap%3Frtc%3D3%26amp%3Bfilters%3DMicrosoft%2520Intune%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Froadmap%3Frtc%3D3%26amp%3Bfilters%3DMicrosoft%2520Intune%3C%2FA%3E%3C%2FP%3E%3CP%20class%3D%22c-paragraph-3%20x-weight-semibold%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22c-paragraph-3%20x-weight-semibold%22%3EThis%20%22update%22%20is%20the%20win32%20support%20that's%20already%20in%20public%20preview%3B%20I%20don't%20think%20it's%20related%20to%20the%20intune%20management%20extension%20not%20being%20installed.%3C%2FP%3E%3CP%20class%3D%22c-paragraph-3%20x-weight-semibold%22%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-465802%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-465802%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F288779%22%20target%3D%22_blank%22%3E%40WalterPrem%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI'm%20sorry%20the%20roadmap%20your%20are%20refering%20to%20is%20an%20old%20item.%20Your%20entry%20describes%20the%20Win32%20app%20support%20in%20general.%20This%20support%20is%20provided%20by%20the%20Intune%20since%20a%20few%20month%20now%20and%20is%20handeled%20by%20the%20Intune%20Management%20Agent%20which%20gets%20pushed%20down%20and%20is%20then%20in%20charge%20of%20installing%20all%20the%20.intunewin%20packaged%20setup.exe%20Win32%20apps.%3C%2FP%3E%0A%3CP%3EI'm%20refering%20to%20a%20feature%20which%20is%20upcoming.%20See%20the%20link%20again%20it%20is%20the%20%22In-Development%22%20site%20from%20Intune%20which%20announces%20new%20features%20beeing%20released%20soon%20(most%20of%20the%20time%20next%20month%2C%20that's%20why%20the%20site%20is%20called%20%22In%20development%20for%20Microsoft%20Intune%20-%20April%202019%22.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThere%20is%20the%20entry%3A%3C%2FP%3E%0A%3CH3%20id%3D%22configure-your-win32-apps-to-be-installed-on-intune-enrolled-azure-ad-joined-devices-%22%20class%3D%22heading-with-anchor%22%20id%3D%22toc-hId-1505392290%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%20id%3D%22toc-hId-696045664%22%3EConfigure%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%3EYou'll%20be%20able%20to%20assign%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices.%20For%20more%20information%20about%20Win32%20apps%20in%20Intune%2C%20see%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fapps-win32-app-management%22%20data-linktype%3D%22relative-path%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EWin32%20app%20management%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20basically%20describes%20that%20the%20agent%20who%20is%20in%20charge%20installing%20all%20the%20Win32%20apps%20will%20now%20be%20installed%20even%20for%20non%20auto-enrollment%20devices.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-465845%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-465845%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EHm%2C%20let's%20hope%20you're%20right%20then.%20As%20I%20set%20in%20my%20reply%20before%20that%2C%20I%20can%20already%20deploy%20my%20win32%20apps%20to%20%22Intune%20enrolled%20Azure%20AD%20joined%20devices%22.%20The%20problem%20is%20regarding%20Hybrid%20joined%20devices%20that%20didn't%20use%20GPO%2C%20but%20the%20auto-enroll%20%22add%20work%2Fschool%22%20method.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EAny%20ETA%20on%20this%20update%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%2C%3C%2FP%3E%3CP%3EWalter%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-465861%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-465861%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F288779%22%20target%3D%22_blank%22%3E%40WalterPrem%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIntune%20and%20auto-enrolled%20AADJ%2Fhybrid%20devices%20are%20covered%2C%20in%20fact%20this%20is%20the%20requirement%20for%20the%20Intune%20Management%20Agent%20(auto-enrollment)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWith%20the%20upcoming%20change%20AADJ%20devices%20which%20are%20enrolled%20into%20Intune%20afterwards%20are%20covered%20then.%3C%2FP%3E%0A%3CP%3EThe%20change%20does%20not%20mentioning%20Hybrid%20joined%20devices.%20It%20seems%20this%20situation%20will%20%3CU%3Enot%3C%2FU%3E%20change.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOnly%20people%20ho%20started%20with%20AADJ%20and%20enrolling%20these%20devices%20later%20on%20to%20Intune%20via%20add%20Work%2Fschool%20account%20are%20covered%20then.%20but%20hey%20maybe%20it%20also%20covers%20hybrid%20but%20the%20entry%20does%20only%20talk%20about%20AADJ%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-466017%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-466017%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3EOnly%20people%20ho%20started%20with%20AADJ%20and%20enrolling%20these%20devices%20later%20on%20to%20Intune%20via%20add%20Work%2Fschool%20account%20are%20covered%20then.%20but%20hey%20maybe%20it%20also%20covers%20hybrid%20but%20the%20entry%20does%20only%20talk%20about%20AADJ%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERight.%20In%20my%20case%20the%20devices%20were%20already%20AAD%20registered%20(not%20joined)%20and%20then%20manually%20added%20to%20intune%20via%20add%20work%2Fschool%20account.%20This%20doesn't%20work.%3C%2FP%3E%3CP%3ELet's%20hope%20they%20fix%20this%20problem%20too.%20I%20don't%20see%20why%20it%20would%20be%20any%20different%20than%20AAD%20joined%20PCs%20using%20the%20connect%20school%2Fwork%20button.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481808%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481808%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWell%2C%20the%20update%20you%20mentioned%20is%20now%20under%20%22What's%20new%22%20for%20last%20week%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwhats-new%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwhats-new%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CEM%3E%22You%20can%20assign%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices.%22%3C%2FEM%3E%3C%2FP%3E%3CP%3EAt%20the%20same%20time%2C%20win32%20apps%20are%20no%20longer%20in%20preview%20(coincidence..%3F).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUnfortunately%2C%20my%20hybrid%20AD%2C%26nbsp%3B%20add%20work%2Fschool%20joined%20device%2C%20still%20doesn't%20receive%20the%20intune%20management%20extention.%20I%20tried%20removing%20them%20from%20intune%20and%20re-enrolling.%20I%20re-added%20them%20to%20the%20software%20distribution%20group.%20Regular%20apps%20get%20installed%2C%20but%20the%20win32%20hangs%20on%20%22waiting%20for%20install%20status%22.%20The%20Win32%20apps%20don't%20appear%20in%20portal%20on%20the%20client%2C%20and%20the%20Intune%20management%20extension%20doesn't%20get%20installed.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EI'm%20guessing%20that%20-%20unfortunately%20-%20this%20only%20applies%20to%20Azure%20AD%20joined%20machines%20who%20are%20not%20yet%20enrolled%20into%20Intune.%3C%2FP%3E%3CP%3EI%20hope%20the%20same%20will%20be%20done%20for%20Hybrid%20machines%3B%20Hybrid%20is%20listed%20as%20supported%20by%20Microsoft%2C%20and%20I%20don't%20see%20why%20it%20would%20matter%20whether%20a%20device%20is%20hybrid%20or%20azure%20joined%2C%20when%20both%20use%20the%20same%20method%20to%20enroll.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20could%20pass%20this%20feedback%20in%20any%20way%20that%20would%20be%20great.%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWalter%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481811%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481811%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWell%2C%20the%20update%20you%20mentioned%20is%20now%20under%20%22What's%20new%22%20for%20this%20week%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwhats-new%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwhats-new%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CEM%3E%22You%20can%20assign%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices.%22%3C%2FEM%3E%3C%2FP%3E%3CP%3EAt%20the%20same%20time%2C%20win32%20apps%20are%20no%20longer%20in%20preview%20(coincidence..%3F).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUnfortunately%2C%20my%20hybrid%20AD%2C%26nbsp%3B%20add%20work%2Fschool%20joined%20device%2C%20still%20doesn't%20receive%20the%20intune%20management%20extention.%20I%20tried%20removing%20them%20from%20intune%20and%20re-enrolling.%20I%20re-added%20them%20to%20the%20software%20distribution%20group.%20Regular%20apps%20get%20installed%2C%20but%20the%20win32%20hangs%20on%20%22waiting%20for%20install%20status%22.%20The%20Win32%20apps%20don't%20appear%20in%20portal%20on%20the%20client%2C%20and%20the%20Intune%20management%20extension%20doesn't%20get%20installed.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EI'm%20guessing%20that%20-%20unfortunately%20-%20this%20only%20applies%20to%20Azure%20AD%20joined%20machines%20who%20are%20not%20yet%20enrolled%20into%20Intune.%3C%2FP%3E%3CP%3EI%20hope%20the%20same%20will%20be%20done%20for%20Hybrid%20machines%3B%20Hybrid%20is%20listed%20as%20supported%20by%20Microsoft%2C%20and%20I%20don't%20see%20why%20it%20would%20matter%20whether%20a%20device%20is%20hybrid%20or%20azure%20joined%2C%20when%20both%20use%20the%20same%20method%20to%20enroll.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20could%20pass%20this%20feedback%20in%20any%20way%20that%20would%20be%20great.%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWalter%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481869%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481869%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWell%2C%20the%20update%20you%20mentioned%20is%20now%20under%20%22%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwhats-new%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EWhat's%20new%3C%2FA%3E%22%20for%20this%20week%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%22You%20can%20assign%20your%20Win32%20apps%20to%20be%20installed%20on%20Intune%20enrolled%20Azure%20AD%20joined%20devices.%22%3C%2FP%3E%3CP%3EAt%20the%20same%20time%2C%20win32%20apps%20are%20no%20longer%20in%20preview%20(coincidence..%3F).%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EUnfortunately%2C%20my%20hybrid%20AD%2C%20add%20work%2Fschool%20joined%20device%2C%20still%20doesn't%20receive%20the%20intune%20management%20extention.%20I%20tried%20removing%20them%20from%20intune%20and%20re-enrolling.%20I%20re-added%20them%20to%20the%20software%20distribution%20group.%20Regular%20apps%20get%20installed%2C%20but%20the%20win32%20hangs%20on%20%22waiting%20for%20install%20status%22.%20The%20Win32%20apps%20don't%20appear%20in%20portal%20on%20the%20client%2C%20and%20the%20Intune%20management%20extension%20doesn't%20get%20installed.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EI'm%20guessing%20that%20-%20unfortunately%20-%20this%20only%20applies%20to%20Azure%20AD%20joined%20machines%20who%20are%20not%20yet%20enrolled%20into%20Intune.%3C%2FP%3E%3CP%3EI%20hope%20the%20same%20will%20be%20done%20for%20Hybrid%20machines%3B%20Hybrid%20is%20listed%20as%20supported%20by%20Microsoft%2C%20and%20I%20don't%20see%20why%20it%20would%20matter%20whether%20a%20device%20is%20hybrid%20or%20azure%20joined%2C%20when%20both%20use%20the%20same%20method%20to%20enroll.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EIf%20you%20could%20pass%20this%20feedback%20in%20any%20way%20that%20would%20be%20great.%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EWalter%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481925%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481925%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F288779%22%20target%3D%22_blank%22%3E%40WalterPrem%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20had%20Azure%20AD%20joined%20device%20and%20autenrolled%20in%20Intune.%20Management%20extension%20was%20installed%20properly.%20I%20retire%20the%20device%20from%20Intune%20(%20WIndows%2010%201809)%20and%20device%20get%20disconnected%20from%20Azure%20AD%20(from%20documentation%20this%20should%20not%20happen)%3C%2FP%3E%3CP%3EI%20logged%20on%20with%20local%20admin%20and%20joined%20the%20device%20again%20to%20Azure%20AD.%26nbsp%3B%20Device%20is%20enrolled%20in%20Intune%20but%20management%20extension%20is%20not%20installed.%20I%20tried%20to%20deploy%20one%20script%20but%20nothing%20happen%2C%20management%20extension%20is%20not%20installed.%20Did%20some%20of%20you%20had%20similar%20scenario%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-482929%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-482929%22%20slang%3D%22en-US%22%3E%3CP%3EOkay%20your%20issue%20is%20that%20you%20have%20technically%20a%20WorkPlace%20Joined%20(WPJ)%20device%20and%20not%20hybrid%20AADJ.%20Because%20of%20the%20use%20of%20manually%20add%20work%2Fschool%20acount%20the%20device%20is%20treated%20as%20WPJ.%20The%20WPJ%20scenario%20is%20not%20supported%20by%20MS%20for%20the%20Intune%20Management%20Extension%20(IME)%20and%20I'm%20not%20sure%20it%20will%20in%20near%20future.%20As%20WPJ%20is%20more%20targeted%20to%20BYOD%20and%20MS%20don't%20want%20to%20mess%20with%20BYOD%20devices%20by%20installing%20agents%20on%20personal%20devices.%3C%2FP%3E%0A%3CP%3ETo%20make%20the%20agent%20work%20you%20would%20need%20to%20WPJ%20un-enroll%20them%20and%20hybrid%20AADJ%20them%20via%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EHow%20To%3A%20Plan%20your%20hybrid%20Azure%20Active%20Directory%20join%20implementation%3C%2FSPAN%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevices%2Fhybrid-azuread-join-plan%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevices%2Fhybrid-azuread-join-plan%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI'm%20sorry%20if%20this%20introduces%20efforts%20on%20your%20side.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20documentation%20is%20telling%20the%20fact%20only%20implicit%20by%20not%20telling%20that%20the%20IME%20is%20supported%20on%20WPJ%20devices%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%3E%3CSPAN%3EThe%20Intune%20management%20extension%20supports%20Azure%20AD%20joined%2C%20hybrid%20Azure%20AD%20domain%20joined%2C%20and%20co-managed%20enrolled%20Windows%20devices.%3C%2FSPAN%3E%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20is%20a%20bit%20confusing.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-482939%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-482939%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20Oliver%2C%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EYes%2C%20the%20confusion%20also%20comes%20from%20me%20thinking%20that%20%22%3CSPAN%3Ehybrid%20Azure%20AD%20domain%20joined%22%20simply%20means%20being%20in%20a%20hybrid%20situation.%20Since%2C%20if%20you%20add%20a%20local-AD%20machine%20to%20Intune%2C%20it's%20also%20added%20to%20Azure%20AD%20and%20becomes%20Hybrid.%20We%20have%20AD%20connect%20set%20up%20(for%20password%20sync)%20and%20when%20people%20login%20to%20Outlook%2C%20the%20devices%20shows%20in%20Azure%20AD%20devices%20(even%20before%20add%20school%2Fwork%20account).%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CBR%20%2F%3EThe%20other%20confusing%20part%20is%20that%20I%20would%20think%20MAM%20exists%20for%20BYOD%20scenarios%20(instead%20of%20WPJ)%2C%20and%20I%20can%20use%20MDM%20if%20I%20decide%20to%20use%20all%20intune%20features%20on%20every%20devices%20I%20have%20(including%20local%20AD%20joined%20laptops).%20%3CSTRONG%3EFrom%20my%20end%2C%20the%20devices%20don't%20look%20WPJ%20at%20all.%20They%20show%20as%20fully%20managed%20by%20intune%20MDM.%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20will%20go%20over%20the%20hybrid%20AD%20join%20methods%20you%20linked%20and%20see%20if%20this%20can%20fix%20our%20issues.%26nbsp%3B%3CBR%20%2F%3EI%20still%20believe%20it%20would%20be%20beneficial%20for%20all%20if%20every%20MDM%20intune%20(not%20MAM)%20would%20support%20the%20IME.%3CBR%20%2F%3EThanks%20for%20you%20time.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1121164%22%20slang%3D%22de-DE%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1121164%22%20slang%3D%22de-DE%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F288779%22%20target%3D%22_blank%22%3E%40WalterPrem%3A%3C%2FA%3EDid%20you%20ever%20solved%20this%3F%20I%20got%20exactly%20the%20same%20problem%20%3A(%3C%2Fimg%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1122481%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1122481%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F527525%22%20target%3D%22_blank%22%3E%40AlexanderKarls%3C%2FA%3E%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EWell%2C%20the%20conclusion%20is%20that%20it's%20simply%20not%20supported%20for%20devices%20that%20are%20%22manually%22%20joined%20to%20Intune%2C%20e.g.%20when%20using%20add%2Fremove%20account%20or%20the%20company%20portal.%3C%2FP%3E%3CP%3EYou%20need%20to%20use%20Windows%20Autopilot%20or%20Azure%20AD%20join%20during%20setup%2C%20or%20setup%20Hybrid%20environment%20(syncing%20computers)%20and%20rolling%20out%20Intune%20using%20GPO.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-687314%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Management%20Extension%20not%20installing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-687314%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174439%22%20target%3D%22_blank%22%3E%40Oliver%20Kieselbach%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CBR%20%2F%3ESo%20today%2C%20surprisingly%2C%20I%20got%20the%20Intune%20Management%20Extension%20working%20on%20a%3CSTRONG%3E%20WorkplaceJoined%26nbsp%3B%3C%2FSTRONG%3EPC%20by%20removing%20the%20work%20account%2C%20and%20then%20choosing%26nbsp%3B%3CSTRONG%3EEnroll%20only%20in%20device%20management%3C%2FSTRONG%3E%20instead%20(almost%20hidden%20on%20the%20right...).%3C%2FP%3E%3CP%3EFor%20some%20reason%2C%20MDMdiag%20XML%20now%20reports%20%3CSTRONG%3EMDMFull%20%3C%2FSTRONG%3Einstead%20of%20%3CSTRONG%3EMDMFullWithAAD%3C%2FSTRONG%3E%2C%20and%20to%20my%20surprise%2C%20after%20installing%20the%20IME%2C%20I'm%20receiving%20powershell%20scripts.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAgain%20I%20have%20a%20lot%20of%20trouble%20finding%20documentation%20on%20the%20difference%20between%20the%20above%2C%20and%20why%20it's%20working%20if%20I%20use%20the%20Enroll%20only%20button%20rather%20than%20the%20CONNECT%20button.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20problem%20is%20still%20that%2C%20all%20our%20devices%20are%20joined%20to%20Intune%20with%20the%20CONNECT%20button%20either%20via%20the%20add%20school%2Fwork%20account%20menu%20or%20via%20the%20company%20portal.%3C%2FP%3E%3CP%3EThis%20means%20I%20would%20still%20need%20to%20un-enroll%20and%20re-enroll%20all%20our%20%22WorkplaceJoined%22%20devices.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMaybe%20you%20know%20of%20a%20way%20to%20get%20%22MDMFullWithAAD%22%20devices%20to%20be%20%22MDMFull%22%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

I am testing Intune/EMS on Windows 10 (1709) PCs and trying to get Powershell scripts to run without success. I think the issue is with the Intune Management Extension not installing but cant find much information on how to troubleshoot this particular issue.

 

Can anyone advise how I get Powershell scripts to run ? TIA

 

Scott

66 Replies
Highlighted

Has the machine synced? Can you see any log files in C:\ProgramData\Microsoft\IntuneManagementExtension\Logs ? 

Highlighted

No this directory ( IntuneManagementExtension ) does not exist....

Highlighted

Hi Scott,

 

maybe have a look at my blog post here:

 

Deep dive Microsoft Intune Management Extension – PowerShell Scripts

https://oliverkieselbach.com/2017/11/29/deep-dive-microsoft-intune-management-extension-powershell-s...

 

I cover inner workings and troubleshooting of the agent to find such particular issues with installing Intune Management Extension.

 

Two things to check for agent install issues are event viewer and the Agent MSI install log:

 

Start event viewer > Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider > Admin (event id 1924 and others)

 

MSI install log:

C:\Windows\system32\config\systemprofile\AppData\Local\mdm\ {25212568-E605-43D5-9AA2-7AE8DB2C3D09}.log

 

best,

Oliver

Highlighted

Oliver, thanks for the update.

 

If I look in the appdata\local\mdm folder it is empty

 

In event viewer I have a number of errors with Event ID 822 ( MDM PolicyManager:Acquiring the merge lock.... ), each ending with "cannot find the file specified", and a number of Event ID 454, Command failure status.

 

Not sure from your guide what this means or where to look next  ?

 

Regards

 

Highlighted

I should note that as a test I have deployed a few MSI's to my PC ( Notepad++ and 7Zip etc ) and these appear to install ok.

Highlighted

Okay the way the MSI's gets pushed to the machine is the same how the Intune Agent gets pushed down. So basically it should work.

How is your assignment did you use user assignment? In my tests that was the only functional way.

Highlighted

I've checked a few of my test machines, I can't find event entries with ID 822. Can you post a little more detail on your error events?

Highlighted

Is your problem still existing? Can you share us some details about the event log entries?

 

ok

Highlighted

Oliver, thanks for following up on this. Unfortunately I haven't made any progress on this as I have been working on other things. I will get back to it, hopefully sometime this week and let you know how I get on

 

Cheers

Highlighted

Did you get anywhere with this?  I have been struggling to figure out why sometimes I do not get the service and sometimes I do.  I have checked logs everywhere on the machine and do not see any relevant errors.

Highlighted

In our environments it's working quite well. We had problems due to interrupted network connectivity but this is not a problem of Intune or the agent. Are you targeting the scripts as user assignments? Can you share logs from a machine not getting the service? MDM report, logfiles, eventlogs, Intune Agent logfiles registry (HKLM\Software\Microsoft\EnterpriseDesktopAppManagement)...

Highlighted

I have the same problem. Intune management extension does not get installed.

I created a powershell script and assigned it to a group containing the user.

 

Any ideas? Or at least a way to troubleshoot the issue?

Highlighted

Sounds like problems with the initial MSI Install job via EnterpriseDesktopAppManagement CSP:

see here:

https://docs.microsoft.com/en-us/windows/client-management/mdm/enterprisedesktopappmanagement-csp

MSI/ProductID/Status Status of the application.

 

In the registry at HKLM\SOFTWARE\Microsoft\EnterpriseDesktopAppManagement\<SID>\<MSI-ProductCode> you can find the Status according to the CSP site above.

 

Try to figure out this status - Download error or what else and correlate with your machine and environment (may there be a proxy issue?). In the past Intune followed a retry logic. I give an example: try it 3 times with timeout of 10 min and then fail. If failed, Intune tried it again in 7 days (the 7 days setting after fail was fix in the past, maybe this interval is lowered now but I don't now, registry suggests that this is changed). So again the values above are examples based on registry values for the logic! I do not know if this is correct as I do not have documentation for it.

What are the registry values for Enforcement* on that machine. Values are in the same path as described above. There are the Retry, Interval, Timeout, Index and StartTime values... I'm not sure if this is all and how they correlate to each other exactly... But maybe we can extract some information from the retry values. For example it may look like that all retries are failed and the machine is in extended timeout currently....

 

Other way dealing with MSI install fails in the past, was to change something at the MSI metadata to re-enforce push/install. This is not possible in our case as we have no control over the SideCar agent metadata.

 

Can someone share the MDM advanced diagnostic report... what is listed there and what about the eventlogs...

Highlighted

I also noticed the same since approx 2 weeks.  This worked absolutely fine in the past (in Dec for example, I built internal docs based on these positive results).

 

Unfortunately, I did not found any root cause so far : in "devicemanagement" event log, stuff seems to communicate to the Intune backed and no obvious errors. Hitting "Sync button" does not help. The file  C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\IntuneManagementExtension.txt  and  the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\Policies\ are no longer created.

 

Since that time (coincidence?), I have also problems with devices enrolled with on-prem users coming from "synched AD groups" (from an on-prem infra, and using ADFS), where neither apps, scripts, or profiles are applied, even if "devicemanagement" event log does also not show obvious errors.    

 

I will post here once I will progress in my tests.

Highlighted

Hi Olivier,

 

what about HKLM\SOFTWARE\Microsoft\EnterpriseDesktopAppManagement\<SID>\<MSI-ProductCode> can find the status there?

I assume the failure has something to do with the CSP as mentioned in my last post. Can you check this, please? I like to know if the backend is not even trying to deliver or if the corresponding CSP EnterpriseDesktopAppManagement has a problem getting the sidecar msi and finally to execute it.

Highlighted

Screenshot attached (enrolled this time my VM at OOBE with an AAD user), and "Status" key is 0x46 (70).

 

Highlighted
This looks good! According the info from the screenshot the CSP has successfully downloaded and triggered the install of the sidecar msi. Do you have the Management Extension Service in the VM now? If not do you have the msi logfile of the sidecar now?
Highlighted

This morning, everything went fine and thought I would pull all my hair off. It worked with any users (AD or AAD), scripts were installed sometimes after 7 to 10 min of uptime after OOBE, but there were installed at some point.

But while writing this post, I did a last test with the same user I used during all my tests, and I hit the issue again : even the start menu icons (like for for XBox, Alarms, Weather, Sway,...) were not populated after 10 minutes, and were left with these "down-arrows" signs (see attachment), even if the Intune Management Extension MSI could already be seen in Settings/Apps pane.

But at the exact moment, that "wsappx" process starts to re-eat your CPU (it did it first time shortly after landing on desktop to install my 7-Zip MSI, Arduino and Bitcoin Calculator apps from the Store... I flagged them in Intune as "Required"), my PS scripts were executed after exactly 20 min of uptime!, and 4 minutes later, the start menu icons for XBox&Co started to be all populated.

So one thing is sure : you really have to wait until "omadmclient.exe" and this "State Repository Service" are really idle for long time, and you have to wait even few minutes more to be on safe side.

It makes me believe there is now like an artificial throttling interval, that didn't existed before, and is why people believe "PS scripts do not always work", especially when your CPU/network/disk are fully idle for few min.

Highlighted

Absolutely you have to be patient. Like ConfigMgr on-prem environment it takes time sometimes. A lot of background processes are running after OOBE and depending on various facts it may result in longer wait times. You observed it, OMA-DM client and so on... I have machine where I waited more than an hour. In the beginning of Intune (Silverlight portal and old backend) it was even worse, we waited for things sometime up to 4 hours and more. The new Azure based infrastructure is much better but it also takes some time infrequent. 

So again I can confirm that it takes time sometimes. But my past is defined by ConfigMgr environments and there you learn to have patients :-).