Issue with Windows Cast (WUDFHost)

Question

Hi

I have a user, Which is not Allowed to screen cast using win + k. The issue is persistent for the user across all our devices.

If another user is first loggen on to the PC, windows does a little while after the login :

Create URL group 0xFE00000720000005. Status 0x0. Process Id 0x312C Executable path \Device\HarddiskVolume3\Windows\System32\WUDFHost.exe, User LOCAL SERVICE

Create URL group 0xFD00000720000005. Status 0x0. Process Id 0x312C Executable path \Device\HarddiskVolume3\Windows\System32\WUDFHost.exe, User LOCAL SERVICE

Create URL group 0xFC00000720000005. Status 0x0. Process Id 0x312C Executable path \Device\HarddiskVolume3\Windows\System32\WUDFHost.exe, User LOCAL SERVICE

After these events, the user is now able to screen cast.

If the user logsout, and the user with the issue logs in, the user is able to screen cast until windows runs these commands:

Delete URL group 0xFE00000720000005. Status 0x0. Process Id 0x312C Executable path \Device\HarddiskVolume3\Windows\System32\WUDFHost.exe, User LOCAL SERVICE

Delete URL group 0xFD00000720000005. Status 0x0. Process Id 0x312C Executable path \Device\HarddiskVolume3\Windows\System32\WUDFHost.exe, User LOCAL SERVICE

Delete URL group 0xFC00000720000005. Status 0x0. Process Id 0x312C Executable path \Device\HarddiskVolume3\Windows\System32\WUDFHost.exe, User LOCAL SERVICE

I can't find anything on google on how to figure out why this is run..

Some time ago, we have removed our old Active directory and are relying on our Azure Ad (Entra)

The laptops are enrolled using Intune.

The problem is also both on Lenovo and Dell. There is currently only one user there is impacted.

Can anybody help me on how to figure out why windows does these delete groups ?

Answer 1

@Rasmus Andersen, Thanks for posting in Q&A. To clarify if the issue is related with Intune or on windows side.

Please choose one working device, then enroll the device and see if the issue occurs. If yes, then go to Intune portal, find the affected device, check the configuration policies and script it applied and see if any setting may block this.

Please try the suggestion and if there's any update, feel free to let us know.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.