Our tenant has config manager version 2309 with hotfix (KB27863823) build 5.00.9122.1019 and has co-management pilot setup to pilot autopatch in Intune. All client devices are running Windows 10 22H2 with build 5.00.9122.1000 config manager client as minimum
We've become aware within the last month of an issue with the reporting of application deployments. A routine deployment of the latest version of Adobe Reader was showing in Monitoring | Deployments with a lot of installation errors. Around 700 devices were reporting error while 1600 were success
The errors show in Deployment Status as:
Category |
Status Type |
Error Code |
Error Description |
Already Compliant |
Error |
0x0 (0) |
Success |
Content Downloaded |
Error |
0x0 (0) |
Success |
In progress |
Error |
0x0 (0) |
Success |
Success |
Error |
0x0 (0) |
Success |
Waiting for content |
Error |
0x0 (0) |
Success |
Following an investigation I found that the app is successfully installed and running fine on the client devices. I tweaked the detection method on the app and the number assets reporting an error started to drop. However, the following week the errors started to move back up. I discovered that devices which previously reported an error, then reported as already compliant and are now reporting the error again.
Further investigation found that it wasn't just restricted to the one app; we've over 600 apps so I'm not gonna check them all, but indications are that most apps are giving a similar report. Even apps that have been installed on devices for several years are showing the errors. It is also affecting user deployments and device deployments.
I have scanned the following logs (I'm hiding the IDs for the apps and DTs):
AppDiscovery:
+++Evaluating expression to discover application....
+++Discovered application....
AppEnforce:
Performing detection of app deployment type ....... for system
+++Discovered application.....
++++++ App enforcement completed (65 seconds) for App DT ...... ++++++
AppIntentEval:
ScopeId_..... :-Current State = Compliant, Applicability = Applicable, Resolved State = Compliant, ConfigureState = NotNeeded, Title = ApplicationIntentPolicy
ExpressionSolver:
CExpressionSolver::SolvedExpression - Expression (ScopeId_.....) evaluated to TRUE
StateMessage:
Adding message with TopicType 1701:APP_CI_COMPLIANCE and TopicId ScopeId_..... to WMI
State message(State ID : 1:APP_CI_PRESENT) with TopicType 1701:APP_CI_COMPLIANCE and TopicId ScopeId_..... has been recorded for S-1-5-21-......, priority 5
State message with TopicType 1701:APP_CI_COMPLIANCE and TopicId ScopeId_..... has been updated
I have also used the Deployment Monitoring Tool to query a client. This is a summary of the Reporting tab:
Name |
Value |
_APP__CI_ASSIGNMENT_EVALUATION |
05/21/2021 10:19:13 |
ScopeID..../RequiredApplication...._APP_CI_COMPLIANCE_ERROR |
06/24/2024 11:17:20 |
ScopeId..../RequiredApplication...._APP_CI_COMPLIANCE_COMPLIANT |
06/24/2024 10:50:44 |
ScopeId..../RequiredApplication...._APP_CI_COMPLIANCE_ERROR |
06/24/2024 12:20:06 |
ScopeId..../DeploymentType....APP_CI_ENFORCEMENT_APP_CI_ENFORCEMENT_SUCCEEDED |
05/21/2024 10:19:18 |
ScopeId..../DeploymentType...._APP__CI_COMPLIANCE_CI_COMPLIANT |
06/24/2024 10:50:43 |
ScopeId..../DeploymentType....APP_CI_COMPLIANCE_COMPLIANT |
06/24/2024 09:47:35 |
Strangely, there doesn't seem to be a pattern with clients and apps. Some apps are fine on some clients; but the same clients have the issue with other apps. Fortunately, the clients aren't notifying their users of any issues, so the service desk isn't being slammed with calls.
Sorry for the long post but its go me confused and any help is appreciated