Troubleshooting Intune Deployment Failures

Question

Hello, I need help with Intune deployment failures for Autopilot/ESP. Since August 22, our deployments have been failing. They fail on Apps(Identifying).

UPDATE 9/11: We determined (Shout out @Rudy Ooms ), that only the T480 devices are affected. On the same network, was able to deploy T460 and T14 with no issues same deployment). Seems to be something with T480 model.

The devices are starting from OOBE state with Windows 11. The issue started right around when we received 2408 release wave, we are in North America 0602 region.

Example of failed logs indicate firewall blocking traffic, however I've tested on multiple networks including hotspot, same issue. Deployments only go through when NOT using a Lenovo T480 model. Unfortunately, we use the T480 for our main devices.

Let me know any questions or suggestions please - need help getting this resolved. Ticket in with MS but slow movement.

Example of failed logs = intunemanagementextension.log

FIRST: [IsWebExceptionRetryable] web exception status = SecureChannelFailure

NEXT: [SendWebRequestInternal] Web Exception occurs when sending network request, non-retryable, the exception is System.Net.WebException: The request was aborted: Could not create SSL/TLS secure channel.

at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)

at System.Threading.Tasks.TaskFactory1.FromAsyncCoreLogic(IAsyncResult iar, Func2 endFunction, Action1 endAction, Task1 promise, Boolean requiresSynchronization)

--- End of stack trace from previous location where exception was thrown ---

at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd(Task task)

at Microsoft.Management.Services.IntuneWindowsAgent.AgentCommon.EmsServiceBase.

Answer 1

Hi Josh Kennedy,
Intune is currently not supported in the Q&A forums, the supported products are listed over here https://learn.microsoft.com/en-us/answers/products (more to be added later on).

You can ask the experts in the dedicated Intune forum over here: https://techcommunity.microsoft.com/t5/microsoft-intune/bd-p/Microsoft-Intune

Please don't forget to Accept answer and close this thread.
Thank you.

Answer 2

Are you only deploying W365 machines or also physical? On physical devices I would recommend to rely on this script first:

https://oofhours.com/2023/12/27/use-the-new-community-modules-for-autopilot/

Answer 3

@Josh Kennedy,Thanks for posting in Q&A.

From your description, I know you have trouble in Intune Autopilot Deployment.

To clarify this issue, could you share with us what kind of device failed deployment? Windows 365 device or physical device? If it is physical device, please check the following.

1.What kind of Autopilot deployment mode have you configure?

2.Check whether the device meet the requirements mentioned in the link.

https://learn.microsoft.com/en-us/autopilot/requirements?tabs=networking

3.Please share with us if there is some error message during ESP stage.

4.Check if there exist relate error in Event Viewer at Application and Services Logs -> Microsoft -> Windows -> ModernDeployment-Diagnostics-Provider -> Autopilot.

https://learn.microsoft.com/en-us/autopilot/troubleshooting-faq#what-do-the-different-event-ids-mean-in-the-windows-autopilot-event-log-entries-in-event-viewer-

5.Check the registry key to see if the device revived Autopilot profile settings at HKLM\SOFTWARE\Microsoft\Provisioning\Diagnostics\Autopilot.

https://learn.microsoft.com/en-us/autopilot/troubleshooting-faq#where-are-the-windows-autopilot-profile-settings-received-from-the-windows-autopilot-deployment-service-stored-

And there are some links about troubleshooting Autopilot deployment failure you can refer.

https://www.anoopcnair.com/windows-autopilot-troubleshooting-guide/

https://oofhours.com/2020/07/12/windows-autopilot-diagnostics-digging-deeper/

Non-official, just for reference.

If there is any update, feel free to let me know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

Use the shift f10 option to get a command prompt and troubleshoot the network issue for the device after the failure.

Are you deploying any Windows firewall configuration or rules to the device?
If you have a configuration that says enable block outbound by default turned on and the firewall rules you are applying are not on the device it will start to block traffic. We have seen this in the past cause issues.
Check your firewall config.