Where Are Intune Management Extension Logs Located for Win32 App Troubleshooting?

Question

A critical Win32 application deployed via Intune is failing to install on a remote user's device, but the Intune cloud console only provides a generic error code 0x80070002. What is the exact local folder directory path on the Windows 11 client where the raw IntuneManagementExtension.log files are located for manual inspection?

Answer 1

The Intune Management Extension logs are stored locally on the client in the following directory:

C:\ProgramData\Microsoft\IntuneManagementExtension\Logs

The specific file you’re looking for is IntuneManagementExtension.log, along with related logs like AgentExecutor.log depending on the failure stage. If you don’t see the folder, verify that the Intune Management Extension service (IntuneManagementExtension) is installed and running, as it is only deployed after the first Win32 app assignment. Since ProgramData is a hidden system directory, ensure hidden items are enabled in File Explorer or access it directly via the path bar. This log provides detailed install command execution, detection rule evaluation, and exact error output beyond the generic 0x80070002 reported in the console. If the error persists, correlate timestamps in this log with the device’s Event Viewer under Applications and Services Logs\Microsoft\Windows\DeviceManagement-Enterprise-Diagnostics-Provider\Admin for deeper context.

Hope it helps!