Share via

APP_CI_COMPLIANCE is acting strangely in config manager client

Jeff Smith 0 Reputation points
2024-06-24T13:42:00.87+00:00

Our tenant has config manager version 2309 with hotfix (KB27863823) build 5.00.9122.1019 and has co-management pilot setup to pilot autopatch in Intune. All client devices are running Windows 10 22H2 with build 5.00.9122.1000 config manager client as minimum

We've become aware within the last month of an issue with the reporting of application deployments. A routine deployment of the latest version of Adobe Reader was showing in Monitoring | Deployments with a lot of installation errors. Around 700 devices were reporting error while 1600 were success

The errors show in Deployment Status as:

Category Status Type Error Code Error Description
Already Compliant Error 0x0 (0) Success
Content Downloaded Error 0x0 (0) Success
In progress Error 0x0 (0) Success
Success Error 0x0 (0) Success
Waiting for content Error 0x0 (0) Success

Following an investigation I found that the app is successfully installed and running fine on the client devices. I tweaked the detection method on the app and the number assets reporting an error started to drop. However, the following week the errors started to move back up. I discovered that devices which previously reported an error, then reported as already compliant and are now reporting the error again.

Further investigation found that it wasn't just restricted to the one app; we've over 600 apps so I'm not gonna check them all, but indications are that most apps are giving a similar report. Even apps that have been installed on devices for several years are showing the errors. It is also affecting user deployments and device deployments.

I have scanned the following logs (I'm hiding the IDs for the apps and DTs):

AppDiscovery:

+++Evaluating expression to discover application....

+++Discovered application....

AppEnforce:

Performing detection of app deployment type ....... for system

+++Discovered application.....

++++++ App enforcement completed (65 seconds) for App DT ...... ++++++

AppIntentEval:

ScopeId_..... :-Current State = Compliant, Applicability = Applicable, Resolved State = Compliant, ConfigureState = NotNeeded, Title = ApplicationIntentPolicy

ExpressionSolver:

CExpressionSolver::SolvedExpression - Expression (ScopeId_.....) evaluated to TRUE

StateMessage:

Adding message with TopicType 1701:APP_CI_COMPLIANCE and TopicId ScopeId_..... to WMI

State message(State ID : 1:APP_CI_PRESENT) with TopicType 1701:APP_CI_COMPLIANCE and TopicId ScopeId_..... has been recorded for S-1-5-21-......, priority 5

State message with TopicType 1701:APP_CI_COMPLIANCE and TopicId ScopeId_..... has been updated

I have also used the Deployment Monitoring Tool to query a client. This is a summary of the Reporting tab:

Name Value
_APP__CI_ASSIGNMENT_EVALUATION 05/21/2021 10:19:13
ScopeID..../RequiredApplication...._APP_CI_COMPLIANCE_ERROR 06/24/2024 11:17:20
ScopeId..../RequiredApplication...._APP_CI_COMPLIANCE_COMPLIANT 06/24/2024 10:50:44
ScopeId..../RequiredApplication...._APP_CI_COMPLIANCE_ERROR 06/24/2024 12:20:06
ScopeId..../DeploymentType....APP_CI_ENFORCEMENT_APP_CI_ENFORCEMENT_SUCCEEDED 05/21/2024 10:19:18
ScopeId..../DeploymentType...._APP__CI_COMPLIANCE_CI_COMPLIANT 06/24/2024 10:50:43
ScopeId..../DeploymentType....APP_CI_COMPLIANCE_COMPLIANT 06/24/2024 09:47:35

Strangely, there doesn't seem to be a pattern with clients and apps. Some apps are fine on some clients; but the same clients have the issue with other apps. Fortunately, the clients aren't notifying their users of any issues, so the service desk isn't being slammed with calls.

Sorry for the long post but its go me confused and any help is appreciated

Microsoft Configuration Manager Deployment
Microsoft Configuration Manager Deployment
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Deployment: The process of delivering, assembling, and maintaining a particular version of a software system at a site.
924 questions
Microsoft Configuration Manager Application
Microsoft Configuration Manager Application
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Application: A computer program designed to carry out a specific task other than one relating to the operation of the computer itself, typically to be used by end users.
466 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. AllenLiu-MSFT 42,186 Reputation points Microsoft Vendor
    2024-06-25T06:48:01.1833333+00:00

    Hi, @Jeff Smith

    Thank you for posting in Microsoft Q&A forum.

    Based on the information provided, it seems that the compliance states for application deployments are not being reported accurately in Configuration Manager. This issue is affecting multiple applications and devices, and there doesn't seem to be a clear pattern.

    One possible solution is to check the detection method for the affected applications and ensure that it is correctly configured. Another option is to review the logs for the affected applications and devices, such as AppDiscovery, AppEnforce, AppIntentEval, and StateMessage logs, to see if there are any errors or issues being reported.

    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".