Windows AutoPilot - Failed to Install last app (alt+tab shows Login window that shouldn't be there)

%3CLINGO-SUB%20id%3D%22lingo-sub-1869769%22%20slang%3D%22en-US%22%3EWindows%20AutoPilot%20-%20Failed%20to%20Install%20last%20app%20(alt%2Btab%20shows%20Login%20window%20that%20shouldn't%20be%20there)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1869769%22%20slang%3D%22en-US%22%3E%3CP%3EWindows%2010%201909%20with%20AutoPilot%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EI%20have%20seen%20a%20similar%20issue%20posted%20in%20these%20threads%2C%20however%20mine%20is%20not%20related%20to%20Visual%20C%2B%2B%20or%20another%20app.%20It%20appears%20to%20be%20related%20to%20the%20Intune%20Management%20Extension.%20I%20am%20able%20to%20get%2014%2F15%20applications%20to%20install%20correctly%2C%20however%20the%20final%20application%20(which%20I%20presume%20to%20be%20the%20Intune%20Management%20Extension)%20hangs.%20When%20I%20alt%2Btab%2C%20it%20shows%20a%20Microsoft%20Login%20screen%20(see%20uploaded%20picture)%20but%20I%20cannot%20switch%20to%20it.%20When%20I%20look%20in%20the%20logs%2C%20I%20find%20errors%20with%20the%20system%20getting%20an%20AAD%20Token%2C%20here%20is%20an%20excerpt%20from%20the%20%22_IntuneManagementExtension.txt%22%20output%20file%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CPRE%20class%3D%22lia-code-sample%20language-applescript%22%3E%3CCODE%3E%3CTIME%3E%3C%2FTIME%3E%3C%2FCODE%3E%3C%2FPRE%3E%3CP%3EI%20disabled%20the%20ESP%20to%20see%20if%20I%20can%20pinpoint%20the%20issue%2C%20but%20that%20did%20not%20help%20-%20and%20removed%20my%20completely%20automatic%20deployment.%20I%20will%20turn%20it%20back%20on%2C%20but%20I%20need%20the%20Intune%20Management%20Extension%20Error%20resolved%20so%20I%20can%20continue%20testing%2C%20before%20I%20deploy%202%2C000%2B%20devices%20and%20keep%20them%20updated.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHappy%20to%20provide%20more%20details%20if%20needed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20an%20AAD%20P2%20membership%2C%20and%20plenty%20of%20Intune%20Device%20licenses.%20Anyone%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnyone%20have%20any%20idea%20how%20to%20get%20past%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1869769%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1871552%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20AutoPilot%20-%20Failed%20to%20Install%20last%20app%20(alt%2Btab%20shows%20Login%20window%20that%20shouldn't%20be%20the%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1871552%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F863337%22%20target%3D%22_blank%22%3E%40Geekmaster614%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDon't%20happen%20to%20have%20some%20microsoft%20store%20apps%20required%20in%20the%20esp%3F%20I%20have%20seen%20this%20some%20time%20when%20all%20cloud%20apps%20is%20targeted%20in%20some%20conditional%20access%20policies%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Windows 10 1909 with AutoPilot


I have seen a similar issue posted in these threads, however mine is not related to Visual C++ or another app. It appears to be related to the Intune Management Extension. I am able to get 14/15 applications to install correctly, however the final application (which I presume to be the Intune Management Extension) hangs. When I alt+tab, it shows a Microsoft Login screen (see uploaded picture) but I cannot switch to it. When I look in the logs, I find errors with the system getting an AAD Token, here is an excerpt from the "_IntuneManagementExtension.txt" output file:

 

<![LOG[AAD User check using device check in app is failed, now fallback to the Graph audience. ex = Intune Management Extension Error.
Exception: Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.TokenAquireException: Attempt to get token, but failed.
   at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<IsAADUserInternal>d__17.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.DiscoveryService.<IsAADUser>d__15.MoveNext()]LOG]!><time="12:36:22.4219239" date="11-9-2020" component="IntuneManagementExtension" context="" type="3" thread="9" file="">

I disabled the ESP to see if I can pinpoint the issue, but that did not help - and removed my completely automatic deployment. I will turn it back on, but I need the Intune Management Extension Error resolved so I can continue testing, before I deploy 2,000+ devices and keep them updated.

 

Happy to provide more details if needed.

 

I have an AAD P2 membership, and plenty of Intune Device licenses. Anyone?

 

Anyone have any idea how to get past this?

3 Replies

@Geekmaster614 

 

Don't happen to have some microsoft store apps required in the esp? I have seen this some time when all cloud apps is targeted in some conditional access policies

We do have a couple conditional access policies targeting All Cloud Apps. I just added an exclusion for my AutoPilot group. Giving it some time to sync up and will try deployment again. Thanks for the tip!

@Rudy_Ooms adding the exception did not seem to make a difference, still sticks and fails on the final app. Do you, or anyone else reading this, know which log to look at to see the Application installation sequence? I only have 13 configured apps for this profile, but it installs 15. I'd like to see which applications it's installing in the 14th & 15th positions.