Powershell failed adding Windows Defender Features

Question

Hello,

I am deploying Windows_Defender_Feature_Restart.cmd

===========================================================

@Echo off
pushd "%~dp0"
PowerShell.exe -nologo -noprofile -ExecutionPolicy bypass -file "Installation Windows Defender Feature-Restart.ps1"

===========================================================

containing this "Installation Windows Defender Feature-Restart.ps1"

===========================================================

Get-WindowsOptionalFeature -Online -FeatureName "Windows-Defender*" | Format-Table
Enable-WindowsOptionalFeature -Online -FeatureName "Windows-Defender-Features"
Enable-WindowsOptionalFeature -Online -FeatureName "Windows-Defender"
Get-WindowsOptionalFeature -Online -FeatureName "Windows-Defender*" | Format-Table

===========================================================

through

I am getting an error:

If I run the command file by itself locally it works.
If I run the powershell file by itself locally it work.

Thanks,
Dom

Answer 1

Hi,

As you have tested that the command works fine outside of ConfigMgr, the detections may have issue.

If the application has reboot requires to complete the installation, the application will ask reboot prompt and user has privilege to defer the reboot, this error may also occur, we could view execmgr.log to see if there is any related information.

Similar threads for your reference:
ERROR 0X87D01106 - DEPLOYING MS PROJECT 2013 PRO
Error code - 0x87d01106. Program will not retry

Thanks for your time. Have a nice day.

Best regards,
Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

0x87d01106 - Failed to verify the executable file is valid or to construct the associated command line.

It's saying that Configmgr did not recognize the '***.cmd', can be a syntax error. What about if you rename the .cmd to a .bat as I always using a bat.

Another recommended way is using 'Running script function' which is straightforward an simple.
https://learn.microsoft.com/en-us/mem/configmgr/apps/deploy-use/create-deploy-scripts

Answer 3

trying another option with the baseline...

https://www.petervanderwoude.nl/post/installing-windows-features-via-compliance-settings-in-configmgr-2012/comment-page-1/?unapproved=153277&moderation-hash=baaac865b7a7fa582d22261c3527f9b0#comment-153277

Thanks,
Dom