Troubleshooting Intune Deployment Failures

Josh Kennedy 0 Reputation points
2024-09-09T11:58:51.48+00:00

Hello, I need help with Intune deployment failures for Autopilot/ESP. Since August 22, our deployments have been failing. They fail on Apps(Identifying).

UPDATE 9/11: We determined (Shout out @Rudy Ooms ), that only the T480 devices are affected. On the same network, was able to deploy T460 and T14 with no issues same deployment). Seems to be something with T480 model.

The devices are starting from OOBE state with Windows 11. The issue started right around when we received 2408 release wave, we are in North America 0602 region.

Example of failed logs indicate firewall blocking traffic, however I've tested on multiple networks including hotspot, same issue. Deployments only go through when NOT using a Lenovo T480 model. Unfortunately, we use the T480 for our main devices.

Let me know any questions or suggestions please - need help getting this resolved. Ticket in with MS but slow movement.

Example of failed logs = intunemanagementextension.log

FIRST: [IsWebExceptionRetryable] web exception status = SecureChannelFailure

NEXT: [SendWebRequestInternal] Web Exception occurs when sending network request, non-retryable, the exception is System.Net.WebException: The request was aborted: Could not create SSL/TLS secure channel.

at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)

at System.Threading.Tasks.TaskFactory1.FromAsyncCoreLogic(IAsyncResult iar, Func2 endFunction, Action1 endAction, Task1 promise, Boolean requiresSynchronization)

--- End of stack trace from previous location where exception was thrown ---

at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd(Task task)

at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.EmsServiceBase.

Windows Autopilot
Windows Autopilot
A collection of Microsoft technologies used to set up and pre-configure new devices and to reset, repurpose, and recover devices.
468 questions
Not Monitored
Not Monitored
Tag not monitored by Microsoft.
39,234 questions
Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,364 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,082 questions
{count} votes

4 answers

Sort by: Most helpful
  1. VarunTha 8,705 Reputation points Microsoft Vendor
    2024-09-09T15:39:05.9166667+00:00

    Hi Josh Kennedy,
    Intune is currently not supported in the Q&A forums, the supported products are listed over here https://learn.microsoft.com/en-us/answers/products (more to be added later on).

    You can ask the experts in the dedicated Intune forum over here: https://techcommunity.microsoft.com/t5/microsoft-intune/bd-p/Microsoft-Intune

    Please don't forget to Accept answer and close this thread.
    Thank you.


  2. Pavel yannara Mirochnitchenko 12,586 Reputation points MVP
    2024-09-09T20:45:27.61+00:00

    Are you only deploying W365 machines or also physical? On physical devices I would recommend to rely on this script first:

    https://oofhours.com/2023/12/27/use-the-new-community-modules-for-autopilot/


  3. ZhoumingDuan-MSFT 13,075 Reputation points Microsoft Vendor
    2024-09-10T02:23:53.7666667+00:00

    @Josh Kennedy,Thanks for posting in Q&A.

    From your description, I know you have trouble in Intune Autopilot Deployment.

    To clarify this issue, could you share with us what kind of device failed deployment? Windows 365 device or physical device? If it is physical device, please check the following.

    1.What kind of Autopilot deployment mode have you configure?

    2.Check whether the device meet the requirements mentioned in the link.

    https://learn.microsoft.com/en-us/autopilot/requirements?tabs=networking

    3.Please share with us if there is some error message during ESP stage.

    4.Check if there exist relate error in Event Viewer at Application and Services Logs -> Microsoft -> Windows -> ModernDeployment-Diagnostics-Provider -> Autopilot.

    https://learn.microsoft.com/en-us/autopilot/troubleshooting-faq#what-do-the-different-event-ids-mean-in-the-windows-autopilot-event-log-entries-in-event-viewer-

    5.Check the registry key to see if the device revived Autopilot profile settings at HKLM\SOFTWARE\Microsoft\Provisioning\Diagnostics\Autopilot.

    https://learn.microsoft.com/en-us/autopilot/troubleshooting-faq#where-are-the-windows-autopilot-profile-settings-received-from-the-windows-autopilot-deployment-service-stored-

    And there are some links about troubleshooting Autopilot deployment failure you can refer.

    https://www.anoopcnair.com/windows-autopilot-troubleshooting-guide/

    https://oofhours.com/2020/07/12/windows-autopilot-diagnostics-digging-deeper/

    Non-official, just for reference.

    If there is any update, feel free to let me know.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


  4. Nick Eckermann 591 Reputation points
    2024-09-10T20:37:45.1766667+00:00

    Use the shift f10 option to get a command prompt and troubleshoot the network issue for the device after the failure.

    Are you deploying any Windows firewall configuration or rules to the device?
    If you have a configuration that says enable block outbound by default turned on and the firewall rules you are applying are not on the device it will start to block traffic. We have seen this in the past cause issues.
    Check your firewall config.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.