Win32App - Intune - Not installing apps

[IbrarMahmood]

Win32App - Intune - Not installing apps

Intune Extention Logs show 

[Win32App] ---------------------------------------------------- Can't get lock on DoWorkInternal, skipping...--------------------------------------

Has anyone else ever come across this?

I have reenrolled the device multiple times onto Intune and still, no apps installed. 

All policies work fine. 

[#2]

Is the logged in user licensed for Intune? Is that the only part of the log you can post? Have you also attempted an MSI LOB app? Have you tried PowerShell scripts? I'm curious if you are also having issues with that.

[#3]

Just like nathan asked... Can you give some more background information

-Are the devices aadj or haadj joined?
-Did you use configmgr in the past?
-Are other users experiencing the issue and are they license for intune
-Are other devices experiencing this issue
-How did you reenoll the device? manually or autopilot?
-How are the apps targetted --> user or device
-Waht happens when you configure the app as available and install it manually from the company portal?

[#4]

Hi @Nathan Blasac, Thank you for your reply.

Is the logged-in user licensed for Intune? Yes

Is that the only part of the log you can post? See below

Have you also attempted an MSI LOB app? Yes but doesn't seem to want to even try to install as it keeps showing the error below. 

Have you tried PowerShell scripts? Not yet will test this next 

[Win32App] Getting ESP tracking win32AppPolicy for user: 00000000-0000-0000-0000-000000000000 IntuneManagementExtension 20/08/2021 10:32:25 5 (0x0005)
[Win32App] Found ESP tracking app ec1d880d-ed84-4e80-bb68-ca7b7619e896 added for EspPhase: DeviceSetup with node: .//Vendor/MSFT/EnrollmentStatusTracking/Setup/Apps/Tracking/SidecarWin32App_ec1d880d-ed84-4e80-bb68-ca7b7619e896_1. Skip. IntuneManagementExtension 20/08/2021 10:32:25 5 (0x0005)
[Win32App] SetSidecarTrackingPoliciesCreated setting trackingPoliciesCreated True with userSID IntuneManagementExtension 20/08/2021 10:32:30 5 (0x0005)
[Win32App] ESP starts checker for valid AAD user token after all device policies created IntuneManagementExtension 20/08/2021 10:32:30 5 (0x0005)
[Win32App] BackgroundWorker starts IntuneManagementExtension 20/08/2021 10:32:30 5 (0x0005)
[Win32App] BackgroundWorker ends IntuneManagementExtension 20/08/2021 10:32:30 5 (0x0005)
[Win32App] SetSidecarTrackingPoliciesCreated setting trackingPoliciesCreated True with PropertyNameParentID ./Vendor/MSFT/EnrollmentStatusTracking/Setup/Apps/PolicyProviders IntuneManagementExtension 20/08/2021 10:32:30 5 (0x0005)
[Win32App] BackgroundWorker is checking at 0 TotalSeconds IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] Get 1 active user sessions IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
starting impersonation, session id = 3 IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
After impersonation: MKHE\IMahmood IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[TokenManager::GetTokenForNewRequestUsingDeviceCheckInAppId] IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
provider id = https://login.microsoft.com, authority = organizations IntuneManagementExtension 20/08/2021 10:32:30 19 (0x0013)
get provider, provider name = Workplace or school account IntuneManagementExtension 20/08/2021 10:32:30 19 (0x0013)
[Win32App] In EspPhase: DeviceSetup. All Win32App has been added. Set SidecarReady: True with IntuneManagementExtension 20/08/2021 10:32:30 5 (0x0005)
Successfully get the token with client id fc0f3af4-6835-4174-b806-f7db311fd2f3 and resource id 26a4ae64-5862-427f-a9b0-044e62572a4f IntuneManagementExtension 20/08/2021 10:32:30 19 (0x0013)
[Win32App] valid AAD user session id : 3 IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] Total valid AAD User session count is 1 IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] ESP checker found 1 session for user IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] ESP Found 1 valid AAD user token IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] GetLogonIdFromFirstSyncReg Opening SOFTWARE\Microsoft\Enrollments IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] This is a device session. Will get the first userSid notCompleted one from FirstSyncReg for ESP if available Or absolute first userSid IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] Loaded 0 Win32App results. IntuneManagementExtension 20/08/2021 10:32:30 5 (0x0005)
[Win32App] LastFullResultReportTimeUTC 08/20/2021 09:32:30 IntuneManagementExtension 20/08/2021 10:32:30 5 (0x0005)
[Win32App] GetLogonIdFromFirstSyncReg Found FirstSync under: SOFTWARE\Microsoft\Enrollments\D7D3125F-D948-4079-A09D-D2FCF96EEAA3 IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] GetLogonIdFromFirstSyncReg check subkey: S-1-5-21-2470528315-2896375165-862631926-78461 under: SOFTWARE\Microsoft\Enrollments\D7D3125F-D948-4079-A09D-D2FCF96EEAA3\FirstSync, nth = 0 IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] GetLogonIdFromFirstSyncReg Found userSIDFromFirstSync: S-1-5-21-2470528315-2896375165-862631926-78461 under: SOFTWARE\Microsoft\Enrollments\D7D3125F-D948-4079-A09D-D2FCF96EEAA3\FirstSync IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] GetLogonIdFromFirstSyncReg Got isSyncDoneForUserStr: under: SOFTWARE\Microsoft\Enrollments\D7D3125F-D948-4079-A09D-D2FCF96EEAA3\FirstSync\S-1-5-21-2470528315-2896375165-862631926-78461 IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] ESP Found valid user SID S-1-5-21-2470528315-2896375165-862631926-78461 IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] BackgroundWorker calling callBack IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] ESP starts session for user, checkUserTokenThreadRunning set to false, start app check in worker. IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
Comgt app workload status False IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)
[Win32App] ---------------------------------------------------- Can't get lock on DoWorkInternal, skipping...-------------------------------------- IntuneManagementExtension 20/08/2021 10:32:30 20 (0x0014)

[#5]

Is the logged-in user licensed for Intune? Yes

[#6]

Is that the only part of the log you can post? See below

[#7]

Have you also attempted an MSI LOB app? Yes but doesn't seem to want to even try to install as it keeps showing the error below. 

[#8]

Have you tried PowerShell scripts? Not yet will test this next 

[#9]

Hi @Rudy_Ooms_MVP,

Thank you for your reply. 

-Are the devices aadj or haadj joined? - they are hybrid azure AD joined. 
-Did you use ConfigMgr in the past? - yes, we do use ConfigMgr. The devices are co-managed. 
-Are other users experiencing the issue and are they license for intune?- No just getting this on a handful of devices. 
-Are other devices experiencing this issue? - No just getting this on a handful of devices. 
-How did you reenoll the device? manually or autopilot? We have an auto-enrollment GPO and when the PC is built it auto enrolls into Intune. 
-How are the apps targetted --> user or device - Device and are required 
-What happens when you configure the app as available and install it manually from the company portal? We do not use the comp portal. We will either assign to an Azure AD group and have devices added into those groups. 

Thank you

[#10]

Hi @Nathan Blasac 

Thank you for your reply. 

Is the logged in user licensed for Intune? Yes

Is that the only part of the log you can post? See below

Have you also attempted an MSI LOB app? Yes but from logs i cannot see an attempt to install. All i see is the logs below and it keeps retrying that. 

Have you tried PowerShell scripts? Not yet i will be testing this soon. 

[Win32App] Found ESP tracking app c8402ea7-5d58-4afc-a46d-3c1ca594b2f1 added for EspPhase: DeviceSetup with node: .//Vendor/MSFT/EnrollmentStatusTracking/Setup/Apps/Tracking/SidecarWin32App_c8402ea7-5d58-4afc-a46d-3c1ca594b2f1_1. Skip. IntuneManagementExtension 20/08/2021 10:52:36 5 (0x0005)
[Win32App] Getting ESP tracking win32AppPolicy for user: 00000000-0000-0000-0000-000000000000 IntuneManagementExtension 20/08/2021 10:52:36 5 (0x0005)
[Win32App] Found ESP tracking app cbd47788-ca9b-46a4-8a9d-a03984440c38 added for EspPhase: DeviceSetup with node: .//Vendor/MSFT/EnrollmentStatusTracking/Setup/Apps/Tracking/SidecarWin32App_cbd47788-ca9b-46a4-8a9d-a03984440c38_1. Skip. IntuneManagementExtension 20/08/2021 10:52:36 5 (0x0005)
[Win32App] Getting ESP tracking win32AppPolicy for user: 00000000-0000-0000-0000-000000000000 IntuneManagementExtension 20/08/2021 10:52:36 5 (0x0005)
[Win32App] Found ESP tracking app ec1d880d-ed84-4e80-bb68-ca7b7619e896 added for EspPhase: DeviceSetup with node: .//Vendor/MSFT/EnrollmentStatusTracking/Setup/Apps/Tracking/SidecarWin32App_ec1d880d-ed84-4e80-bb68-ca7b7619e896_1. Skip. IntuneManagementExtension 20/08/2021 10:52:36 5 (0x0005)
[Win32App] SetSidecarTrackingPoliciesCreated setting trackingPoliciesCreated True with userSID IntuneManagementExtension 20/08/2021 10:52:41 5 (0x0005)
[Win32App] ESP starts checker for valid AAD user token after all device policies created IntuneManagementExtension 20/08/2021 10:52:41 5 (0x0005)
[Win32App] BackgroundWorker starts IntuneManagementExtension 20/08/2021 10:52:41 5 (0x0005)
[Win32App] BackgroundWorker ends IntuneManagementExtension 20/08/2021 10:52:41 5 (0x0005)
[Win32App] SetSidecarTrackingPoliciesCreated setting trackingPoliciesCreated True with PropertyNameParentID ./Vendor/MSFT/EnrollmentStatusTracking/Setup/Apps/PolicyProviders IntuneManagementExtension 20/08/2021 10:52:41 5 (0x0005)
[Win32App] BackgroundWorker is checking at 0 TotalSeconds IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] Get 1 active user sessions IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
starting impersonation, session id = 3 IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
After impersonation: [Domain}\[Username] IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[TokenManager::GetTokenForNewRequestUsingDeviceCheckInAppId] IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
provider id = https://login.microsoft.com, authority = organizations IntuneManagementExtension 20/08/2021 10:52:41 19 (0x0013)
get provider, provider name = Workplace or school account IntuneManagementExtension 20/08/2021 10:52:41 19 (0x0013)
[Win32App] In EspPhase: DeviceSetup. All Win32App has been added. Set SidecarReady: True with IntuneManagementExtension 20/08/2021 10:52:41 5 (0x0005)
Successfully get the token with client id fc0f3af4-6835-4174-b806-f7db311fd2f3 and resource id 26a4ae64-5862-427f-a9b0-044e62572a4f IntuneManagementExtension 20/08/2021 10:52:41 19 (0x0013)
[Win32App] valid AAD user session id : 3 IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] Total valid AAD User session count is 1 IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] ESP checker found 1 session for user IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] Loaded 0 Win32App results. IntuneManagementExtension 20/08/2021 10:52:41 5 (0x0005)
[Win32App] ESP Found 1 valid AAD user token IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] GetLogonIdFromFirstSyncReg Opening SOFTWARE\Microsoft\Enrollments IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] This is a device session. Will get the first userSid notCompleted one from FirstSyncReg for ESP if available Or absolute first userSid IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] GetLogonIdFromFirstSyncReg Found FirstSync under: SOFTWARE\Microsoft\Enrollments\D7D3125F-D948-4079-A09D-D2FCF96EEAA3 IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] LastFullResultReportTimeUTC 08/20/2021 09:52:41 IntuneManagementExtension 20/08/2021 10:52:41 5 (0x0005)
[Win32App] GetLogonIdFromFirstSyncReg check subkey: S-1-5-21-2470528315-2896375165-862631926-78461 under: SOFTWARE\Microsoft\Enrollments\D7D3125F-D948-4079-A09D-D2FCF96EEAA3\FirstSync, nth = 0 IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] GetLogonIdFromFirstSyncReg Found userSIDFromFirstSync: S-1-5-21-2470528315-2896375165-862631926-78461 under: SOFTWARE\Microsoft\Enrollments\D7D3125F-D948-4079-A09D-D2FCF96EEAA3\FirstSync IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] GetLogonIdFromFirstSyncReg Got isSyncDoneForUserStr: under: SOFTWARE\Microsoft\Enrollments\D7D3125F-D948-4079-A09D-D2FCF96EEAA3\FirstSync\S-1-5-21-2470528315-2896375165-862631926-78461 IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] ESP Found valid user SID S-1-5-21-2470528315-2896375165-862631926-78461 IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] BackgroundWorker calling callBack IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] ESP starts session for user, checkUserTokenThreadRunning set to false, start app check in worker. IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
Comgt app workload status False IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)
[Win32App] ---------------------------------------------------- Can't get lock on DoWorkInternal, skipping...-------------------------------------- IntuneManagementExtension 20/08/2021 10:52:41 20 (0x0014)

[#11]

Hi, Thanx.. Is it somehow possible to get a larger part of the intune mgt log?

[#12]

Hi @Rudy_Ooms_MVP & @Nathan Blasac 

In regards to Nathan's question 

Is the logged in user licensed for Intune? Yes 

Is that the only part of the log you can post? See below; 

Have you also attempted an MSI LOB app? Yes this works fine. 

Have you tried PowerShell scripts? Will test this soon. 

[TokenManager::GetTokenForNewRequestUsingDeviceCheckInAppId] IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
provider id = https://login.microsoft.com, authority = organizations IntuneManagementExtension 20/08/2021 14:09:27 19 (0x0013)
get provider, provider name = Workplace or school account IntuneManagementExtension 20/08/2021 14:09:27 19 (0x0013)
[Win32App] In EspPhase: DeviceSetup. All Win32App has been added. Set SidecarReady: True with IntuneManagementExtension 20/08/2021 14:09:27 5 (0x0005)
Successfully get the token with client id fc0f3af4-6835-4174-b806-f7db311fd2f3 and resource id 26a4ae64-5862-427f-a9b0-044e62572a4f IntuneManagementExtension 20/08/2021 14:09:27 19 (0x0013)
[Win32App] valid AAD user session id : 4 IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] Total valid AAD User session count is 1 IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] ESP checker found 1 session for user IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] ESP Found 1 valid AAD user token IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] GetLogonIdFromFirstSyncReg Opening SOFTWARE\Microsoft\Enrollments IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] This is a device session. Will get the first userSid notCompleted one from FirstSyncReg for ESP if available Or absolute first userSid IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] GetLogonIdFromFirstSyncReg Found FirstSync under: SOFTWARE\Microsoft\Enrollments\D7D3125F-D948-4079-A09D-D2FCF96EEAA3 IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] GetLogonIdFromFirstSyncReg check subkey: S-1-5-21-2470528315-2896375165-862631926-78461 under: SOFTWARE\Microsoft\Enrollments\D7D3125F-D948-4079-A09D-D2FCF96EEAA3\FirstSync, nth = 0 IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] GetLogonIdFromFirstSyncReg Found userSIDFromFirstSync: S-1-5-21-2470528315-2896375165-862631926-78461 under: SOFTWARE\Microsoft\Enrollments\D7D3125F-D948-4079-A09D-D2FCF96EEAA3\FirstSync IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] GetLogonIdFromFirstSyncReg Got isSyncDoneForUserStr: under: SOFTWARE\Microsoft\Enrollments\D7D3125F-D948-4079-A09D-D2FCF96EEAA3\FirstSync\S-1-5-21-2470528315-2896375165-862631926-78461 IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] ESP Found valid user SID S-1-5-21-2470528315-2896375165-862631926-78461 IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] BackgroundWorker calling callBack IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] ESP starts session for user, checkUserTokenThreadRunning set to false, start app check in worker. IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] Loaded 0 Win32App results. IntuneManagementExtension 20/08/2021 14:09:27 5 (0x0005)
[Win32App] LastFullResultReportTimeUTC 08/20/2021 13:09:27 IntuneManagementExtension 20/08/2021 14:09:27 5 (0x0005)
Comgt app workload status False IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)
[Win32App] ---------------------------------------------------- Can't get lock on DoWorkInternal, skipping...-------------------------------------- IntuneManagementExtension 20/08/2021 14:09:27 20 (0x0014)

[#13]

Do you happen to have configuration manager and any co management settings configured?

[#14]

HI, Like Ibrarmahmood already told the devices are co managed. I was also expecting that the client apps workload was not moved of giving issues on some devices. But as he also told: msi lob apps are working?