Troubleshooting Common Intune Errors

Even in the best-configured environments, issues arise. When Intune policies don't apply or apps fail to install, knowing how to troubleshoot is a superpower. This guide covers common errors and how to fix them.

General Troubleshooting Steps

Before diving into logs, always check the basics:

1. Is the device connected to the internet?
2. Is the device enrolled? Check Settings > Accounts > Access work or school.
3. When did it last sync? Force a sync from the device or the Intune console.
4. Is the license valid? Ensure the user has an Intune license assigned.

Common Issues & Fixes

1. Device Sync Failures (0x80072f8f, 0x80190190)

These errors often point to network or time issues.

• Fix: Check that the device's date and time are correct.
• Fix: Ensure firewalls/proxies aren't blocking Microsoft endpoints.

2. App Installation Errors (0x80070643)

This generic error usually means "Fatal error during installation."

• Cause: Often caused by the detection rule failing, even if the app installed correctly.
• Fix: Verify your Detection Rules in Intune. Does the file/registry key exist exactly where you said it would?
• Fix: Manually try installing the app on a test machine using the SYSTEM account (use psexec -i -s cmd.exe) to see the real error message.

3. Policy Conflicts

When two policies try to set the same setting to different values, Intune reports a "Conflict."

• Fix: In the Intune portal, go to the device's Device configuration tab. Click on the conflict policy to see which other policy is conflicting.
• Tip: "Compliance Policies" often conflict with "Configuration Profiles" (e.g., Password length). Ensure they match.

Tools for Troubleshooting

1. Company Portal App

On the device, open Company Portal > Settings > Diagnostics > Send logs. This zips up relevant logs. You can also view "Management Policy" status here.

2. Event Viewer (Windows)

The holy grail of Intune logs:

• Location: Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider.
• Admin: Shows high-level errors.
• Debug: Shows detailed processing steps (enable "Show Analytic and Debug Logs").

3. Intune Management Extension (IME) Logs

For Win32 app deployment issues:

• Location: C:\ProgramData\Microsoft\IntuneManagementExtension\Logs.
• File: IntuneManagementExtension.log.
• Tool: Use CMTrace (from SCCM tools) to read these logs easily. Look for "Error" or the App ID.

Conclusion

Troubleshooting Intune requires patience and a systematic approach. Start with the console status, move to the device event logs, and finally dive into the IME logs for app issues. Understanding the "why" behind an error is the key to a stable environment.