2,093 questions
Intune VPN XML parse errors with Windows 11 22H2
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(176, 35%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ET%3C/text%3E%3C/svg%3E)
Trial_and_error
6
Reputation points
Does anyone else have any problems deploying VPN configuration profiles with Intune lately?
No matter what configuration I try to deploy, my W11 22H2 PCs refuse to apply the configuration complaining about not being able to parse XML (event ID 404). Intune assignment status shows an error 0x87d1fde8 .
I am configuring a standard VPN IKEv2 profile with an EAP xml and no matter how many examples I've tried or how many XML parsers I use to verify that the format is correct, every time I get the XML parse error on the client. Even if configured with machine cert option (which does not require to enter any xml data manually), I still get the same error. Prior to the 22H2 update I had a problem where only part of the VPN configuration was passed to the client and I needed to manually delete the VPN profile and let it sync again to get a working configuration. Feels like something is broken here.
Microsoft Security Intune Configuration
{count} vote
-
Lu Dai-MSFT 28,496 Reputation points2022-09-28T05:29:06.21+00:00 @Trial_and_error Thanks for posting in our Q&A.
This error code is very general and it is not enough to confirm the root cause. It is needed to check more logs. With Q&A limitation, Q&A is not the good channel for such log analysis issue. So, it is suggested to create an online support ticket to get more help. Here is the support link:
https://learn.microsoft.com/en-us/mem/get-supportHope everything goes well with you.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 23%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
Jos 106 Reputation points2023-08-11T15:26:38.0233333+00:00 We tried to export it via this command
(Get-VpnConnection -Name "IKEv2").EapConfigXmlStream.InnerXml | Set-ClipboardWhen formatting this output it looks like this, so to me nothing strange
<EapHostConfig xmlns="http://www.microsoft.com/provisioning/EapHostConfig"> <EapMethod> <Type xmlns="http://www.microsoft.com/provisioning/EapCommon">26</Type> <VendorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorId> <VendorType xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorType> <AuthorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</AuthorId> </EapMethod> <Config xmlns="http://www.microsoft.com/provisioning/EapHostConfig"> <Eap xmlns="http://www.microsoft.com/provisioning/BaseEapConnectionPropertiesV1"> <Type>26</Type> <EapType xmlns="http://www.microsoft.com/provisioning/MsChapV2ConnectionPropertiesV1"> <UseWinLogonCredentials>false</UseWinLogonCredentials> </EapType> </Eap> </Config> </EapHostConfig>But when looking at the event log, we also receive a 404 error.
CSP URI: ./Device/Vendor/MSFT/VPNv2/IKEv2 Result: Windows was unable to parse the requested XML data (at least ours is in dutch, so looked up a similar version in English)But I'm not sure if it is refering to this particular EAP xml or that the configuration itself is a XML which Microsoft tries to process. But we are using the regular "VPN" version of Configuration Profiles.
Anyone any suggestions?
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 85%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEC%3C/text%3E%3C/svg%3E)
Eshaq Choudhury 5 Reputation points2023-09-15T20:09:22.6166667+00:00 We have this same issue.
We are deploying a VPN(IKEv2) profile via Intune and it works perfectly on Windows 10. However on Windows 11, it comes back with an error. Intune gives the error:
0x87d1fde8
The client side gives the error in event viewer:
MDM ConfigurationManager: Command failure status. Configuration Source ID: (0DA44594-A1F2-46F2-B2F6-BC308C0901CE), Enrollment Name: (MDMDeviceWithAAD), Provider Name: (VPNv2), Command Type: (Add: from Replace or Add), CSP URI: (./User/Vendor/MSFT/VPNv2/VPN), Result: (Windows was unable to parse the requested XML data.).
No matter what setting or combination of settings i try, i get the same error. I've tried updating to the latest build of windows 11 and its still the same.
Hoping someone has some idea.
Sign in to comment
Sign in to answer