none
Windows Intune Center x64

    Question

  • I loaded the Intune client on one machine and it registered with the service and can see needed updates, so it appears to be checking in ok, however it doesnt allow the Windows Intune Center x64 update to install.  Not sure what the issue is, just reports a failure.  The provided KB id from the service, doesnt help too much either - http://support.microsoft.com/kb/982365

    I looked at the Windowsupdate.log from the machine and didnt see too much, although I am sure there is something in there that should stick out.

    Any chance anyone has seen this issue?


    Derek Schauland, MCSE | Microsoft MVP - File System Storage | Technology Addict
    Tuesday, March 29, 2011 2:02 PM

Answers

  • Hi Derek,

    We have reviewed your logs and as Mandar states above it appears there may be a permission issue writing to the below registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BEHAVIORS

    The logs state:

    2011-03-30 12:27:00:425 3776 ad8 Handler 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS 3: 5
    2011-03-30 12:27:00:425 3776 ad8 Handler : MSI transaction completed. MSI: 0x80070643, Handler: 0x80cf200b, Source: No, Reboot: 0
    2011-03-30 12:27:00:425 3776 ad8 Handler Updating status for update 0.
    2011-03-30 12:27:00:425 3776 ad8 Handler : WARNING: First failure for update {A8F17FE0-E1E6-4FB2-9FDB-773738FDD188}, transaction error = 0x80cf200b, MSI result = 0x80070643, MSI action = WriteRegistryValues

    When you have a moment could you please check the permissions of the registry or it's parent and confirm that SYSTEM and Administrators both have Full Control and Read permissions.  That is the default permissions for HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer and the rest underneath should be inheriting from that parent.

    Thanks,

    Frank, MSFT

    Friday, April 08, 2011 8:11 PM

All replies

  • Hi Derek,

    Would you mind opening a support ticket?  Support will request you gather logs and we can take a look at your issue:

    https://support.live.com/default.aspx?productkey=mocpscohome&brand=mocp

    Thanks,

    Jon, MSFT

    Tuesday, March 29, 2011 3:47 PM
  • Ticket submitted thanks Jon
    Derek Schauland, MCSE | Microsoft MVP - File System Storage | Technology Addict
    Tuesday, March 29, 2011 3:59 PM
  • Can you please share parts of %programfiles%\microsoft\onlinemanagement\logs\updates.log that may be relevant to the failure? It is formatted very similar to windowsupdate.log file. It wil have more information about the failing update.
    Wednesday, March 30, 2011 6:03 AM
  • Can you please share parts of %programfiles%\microsoft\onlinemanagement\logs\updates.log that may be relevant to the failure? It is formatted very similar to windowsupdate.log file. It wil have more information about the failing update.


    Sure.  Below is what appears to be one cycle of update checking and installation.

    2011-03-30 12:26:55:328 3776 ad8 Handler :::::::::::::
    2011-03-30 12:26:55:329 3776 ad8 Handler :: START ::  Handler: MSI Install
    2011-03-30 12:26:55:329 3776 ad8 Handler :::::::::
    2011-03-30 12:26:55:329 3776 ad8 Handler   : Updates to install = 1
    2011-03-30 12:26:55:330 3776 ad8 Handler MSI update {A8F17FE0-E1E6-4FB2-9FDB-773738FDD188}.108 using source image from 1 CABs.
    2011-03-30 12:26:56:620 3776 ad8 Handler   : Batch installing 1 updates
    2011-03-30 12:26:56:620 3776 ad8 Handler List of MSPs in transaction:
    2011-03-30 12:26:56:620 3776 ad8 Handler List of Transforms in transaction:
    2011-03-30 12:26:56:620 3776 ad8 Handler MSI final command line: AUTOUNINSTALL=0 ALLUSERS=1 MSIRESTARTMANAGERCONTROL=Disable REBOOT=REALLYSUPPRESS
    2011-03-30 12:27:00:425 3776 ad8 Handler MSP Error List:
    2011-03-30 12:27:00:425 3776 ad8 Handler 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS 3: 5
    2011-03-30 12:27:00:425 3776 ad8 Handler   : MSI transaction completed. MSI: 0x80070643, Handler: 0x80cf200b, Source: No, Reboot: 0
    2011-03-30 12:27:00:425 3776 ad8 Handler Updating status for update 0.
    2011-03-30 12:27:00:425 3776 ad8 Handler   : WARNING: First failure for update {A8F17FE0-E1E6-4FB2-9FDB-773738FDD188}, transaction error = 0x80cf200b, MSI result = 0x80070643, MSI action = WriteRegistryValues
    2011-03-30 12:27:00:425 3776 ad8 Handler Sending completion notification for update 0 ({A8F17FE0-E1E6-4FB2-9FDB-773738FDD188}.108).
    2011-03-30 12:27:00:425  268 102c AU >>##  RESUMED  ## AU: Installing update [UpdateId = {68931822-7847-447E-A82A-0C836B2FDE5A}]
    2011-03-30 12:27:00:425  268 102c AU   # WARNING: Install failed, error = 0x80070643 / 0x0000057A
    2011-03-30 12:27:00:426 3776 ad8 Handler Stopping on first error due to FailOptTerminate.
    2011-03-30 12:27:00:426 3776 ad8 Handler   : WARNING: Operation failed at update 0, Exit code = 0x80CF200B
    2011-03-30 12:27:00:426 3776 ad8 Handler :::::::::
    2011-03-30 12:27:00:426 3776 ad8 Handler ::  END  ::  Handler: MSI Install
    2011-03-30 12:27:00:426 3776 ad8 Handler :::::::::::::
    2011-03-30 12:27:00:449  268 1258 Agent WARNING: InstallWindowsUpdates found 1 updates to install
    2011-03-30 12:27:00:449  268 1258 Agent WARNING: InstallWindowsUpdates preparing batch for install
    2011-03-30 12:27:00:449  268 1258 Handler :::::::::::::
    2011-03-30 12:27:00:449  268 1258 Handler :: START ::  Handler: Windows Updates Install
    2011-03-30 12:27:00:449  268 1258 Handler :::::::::
    2011-03-30 12:27:00:449  268 1258 Handler   : Updates to install = 1
    2011-03-30 12:27:04:643  268 824 Report Reporter successfully uploaded 2 events. Status Code = StatusCodeAcknowledged
    2011-03-30 12:27:06:681  268 824 EP Obtained plugin IUpdateEndpointProvider on CLSID 3BF1D171-8D71-44C4-B234-302390EDD390
    2011-03-30 12:27:06:681  268 824 EP Obtained plugin IUpdateEndpointAuthProvider on CLSID 3BF1D171-8D71-44C4-B234-302390EDD390
    2011-03-30 12:27:06:682  268 824 EP SLS: Initializing for service ID 3DA21691-E39D-4DA6-8A4B-B43877BCB1B7
    2011-03-30 12:27:06:682  268 824 EP SLS: Reading from cache
    2011-03-30 12:27:06:682  268 824 EP SLS: Successfully read service endpoints from cache.
    2011-03-30 12:27:06:683  268 824 EP Got service Windows Intune plugin Reporting preferred token types: 0x00000001
    2011-03-30 12:27:06:684  268 824 EP Got service Windows Intune plugin Reporting URL: "https://msu1a.manage.microsoft.com/EventWebService/EventWebService.svc"
    2011-03-30 12:27:06:686  268 824 EP Got service Windows Intune plugin Reporting auth token of type 0x00000001
    2011-03-30 12:27:06:686  268 824 Report Uploading 3 events, reporting URL = https://msu1a.manage.microsoft.com/EventWebService/EventWebService.svc
    2011-03-30 12:27:07:198  268 824 Report Reporter successfully uploaded 3 events. Status Code = StatusCodeAcknowledged
    2011-03-30 12:27:07:200  268 824 EP Obtained plugin IUpdateEndpointProvider on CLSID 3BF1D171-8D71-44C4-B234-302390EDD390
    2011-03-30 12:27:07:200  268 824 EP Obtained plugin IUpdateEndpointAuthProvider on CLSID 3BF1D171-8D71-44C4-B234-302390EDD390
    2011-03-30 12:27:07:200  268 824 EP SLS: Initializing for service ID 3DA21691-E39D-4DA6-8A4B-B43877BCB1B7
    2011-03-30 12:27:07:200  268 824 EP SLS: Reading from cache
    2011-03-30 12:27:07:200  268 824 EP SLS: Successfully read service endpoints from cache.
    2011-03-30 12:27:07:201  268 824 EP Got service Windows Intune plugin Reporting preferred token types: 0x00000001
    2011-03-30 12:27:07:201  268 824 EP Got service Windows Intune plugin Reporting URL: "https://msu1a.manage.microsoft.com/EventWebService/EventWebService.svc"
    2011-03-30 12:27:07:202  268 824 EP Got service Windows Intune plugin Reporting auth token of type 0x00000001
    2011-03-30 12:27:07:203  268 824 Report Uploading 1 events, reporting URL = https://msu1a.manage.microsoft.com/EventWebService/EventWebService.svc
    2011-03-30 12:27:08:374  268 824 Report Reporter successfully uploaded 1 events. Status Code = StatusCodeAcknowledged
    2011-03-30 12:27:10:152  268 824 EP Obtained plugin IUpdateEndpointProvider on CLSID 3BF1D171-8D71-44C4-B234-302390EDD390
    2011-03-30 12:27:10:153  268 824 EP Obtained plugin IUpdateEndpointAuthProvider on CLSID 3BF1D171-8D71-44C4-B234-302390EDD390
    2011-03-30 12:27:10:153  268 824 EP SLS: Initializing for service ID 3DA21691-E39D-4DA6-8A4B-B43877BCB1B7
    2011-03-30 12:27:10:153  268 824 EP SLS: Reading from cache
    2011-03-30 12:27:10:153  268 824 EP SLS: Successfully read service endpoints from cache.
    2011-03-30 12:27:10:154  268 824 EP Got service Windows Intune plugin Reporting preferred token types: 0x00000001
    2011-03-30 12:27:10:154  268 824 EP Got service Windows Intune plugin Reporting URL: "https://msu1a.manage.microsoft.com/EventWebService/EventWebService.svc"
    2011-03-30 12:27:10:155  268 824 EP Got service Windows Intune plugin Reporting auth token of type 0x00000001
    2011-03-30 12:27:10:155  268 824 Report Uploading 2 events, reporting URL = https://msu1a.manage.microsoft.com/EventWebService/EventWebService.svc
    2011-03-30 12:27:10:613  268 824 Report Reporter successfully uploaded 2 events. Status Code = StatusCodeAcknowledged
    2011-03-30 12:27:10:614  268 824 Report REPORT EVENT: {BE8CDFBC-E45B-4540-A6C5-014AC1B6F072} 2011-03-30 12:26:48:714-0500 1 188 [AU_SCHEDULED_INSTALL_READY] 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on ‎Wednesday, ‎March ‎30, ‎2011 at 12:26 PM:  - Windows Intune Center (x64) - Windows 7 Service Pack 1 for x64-based Systems (KB976932)
    2011-03-30 12:27:10:614  268 824 Report REPORT EVENT: {A3E504A3-4F6C-4FA0-86E1-2F7FC488AE2C} 2011-03-30 12:26:48:718-0500 1 188 [AU_SCHEDULED_INSTALL_READY] 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on ‎Wednesday, ‎March ‎30, ‎2011 at 12:36 PM:  - Windows Intune Center (x64) - Windows 7 Service Pack 1 for x64-based Systems (KB976932)
    2011-03-30 12:27:10:615  268 824 Report REPORT EVENT: {F71FCF08-8D9E-4367-8C97-E288CE63C64D} 2011-03-30 12:27:00:427-0500 1 182 [AGENT_INSTALLING_FAILED] 101 {68931822-7847-447E-A82A-0C836B2FDE5A} 109 80070643 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070643: Windows Intune Center (x64).
    2011-03-30 12:27:47:723  268 1258 Handler WUI: Dispatching install complete for update {32A81956-9386-41F9-91D4-6F7485F597D0}.103: result = Fail, status = 0x80070643, reboot required = No
    2011-03-30 12:27:47:724  268 102c AU >>##  RESUMED  ## AU: Installing update [UpdateId = {32A81956-9386-41F9-91D4-6F7485F597D0}]
    2011-03-30 12:27:47:724  268 102c AU   # WARNING: Install failed, error = 0x80070643 / 0x00000000
    2011-03-30 12:27:47:724  268 824 Report REPORT EVENT: {F3BABE95-0480-4F60-82E0-5B684399354F} 2011-03-30 12:27:47:723-0500 1 182 [AGENT_INSTALLING_FAILED] 101 {32A81956-9386-41F9-91D4-6F7485F597D0} 103 80070643 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070643: Windows 7 Service Pack 1 for x64-based Systems (KB976932).
    2011-03-30 12:27:47:734  268 1258 Handler :::::::::
    2011-03-30 12:27:47:734  268 1258 Handler ::  END  ::  Handler: Windows Update Install
    2011-03-30 12:27:47:734  268 1258 Handler :::::::::::::
    2011-03-30 12:27:47:734  268 1258 Agent WARNING: InstallWindowsUpdates completed batch, hr = 0x00000000
    2011-03-30 12:27:47:738  268 1258 Agent *********
    2011-03-30 12:27:47:738  268 1258 Agent **  END  **  Agent: Installing updates [CallerId = AutomaticUpdates]
    2011-03-30 12:27:47:738  268 1258 Agent *************
    2011-03-30 12:27:47:738  268 102c AU Install call completed.
    2011-03-30 12:27:47:738  268 102c AU   # WARNING: Install call completed, reboot required = No, error = 0x00000000
    2011-03-30 12:27:47:738  268 102c AU #########
    2011-03-30 12:27:47:738  268 102c AU ##  END  ##  AU: Installing updates [CallId = {7000B621-8D7D-4BC8-8D91-F722C3DC801B}]
    2011-03-30 12:27:47:738  268 102c AU #############
    2011-03-30 12:27:47:738  268 102c AU Install complete for all calls, reboot NOT needed
    2011-03-30 12:27:47:738  268 102c AU Setting AU scheduled install time to 2011-03-31 08:00:00
    2011-03-30 12:35:24:697  268 824 EP Obtained plugin IUpdateEndpointProvider on CLSID 3BF1D171-8D71-44C4-B234-302390EDD390
    2011-03-30 12:35:24:697  268 824 EP Obtained plugin IUpdateEndpointAuthProvider on CLSID 3BF1D171-8D71-44C4-B234-302390EDD390
    2011-03-30 12:35:24:697  268 824 EP SLS: Initializing for service ID 3DA21691-E39D-4DA6-8A4B-B43877BCB1B7
    2011-03-30 12:35:24:697  268 824 EP SLS: Reading from cache
    2011-03-30 12:35:24:697  268 824 EP SLS: Successfully read service endpoints from cache.
    2011-03-30 12:35:24:699  268 824 EP Got service Windows Intune plugin Reporting preferred token types: 0x00000001
    2011-03-30 12:35:24:699  268 824 EP Got service Windows Intune plugin Reporting URL: "https://msu1a.manage.microsoft.com/EventWebService/EventWebService.svc"
    2011-03-30 12:35:24:701  268 824 EP Got service Windows Intune plugin Reporting auth token of type 0x00000001
    2011-03-30 12:35:24:701  268 824 Report Uploading 5 events, reporting URL = https://msu1a.manage.microsoft.com/EventWebService/EventWebService.svc
    2011-03-30 12:35:25:393  268 824 Report Reporter successfully uploaded 5 events. Status Code = StatusCodeAcknowledged
    2011-03-30 12:41:37:088  268 5a8 AU UpdateDownloadProperties: 0 download(s) are still in progress.
    2011-03-30 12:41:37:090  268 5a8 AU Triggering Offline detection (non-interactive)
    2011-03-30 12:41:37:090  268 5a8 AU AU setting pending client directive to 'Install Complete Ux'
    2011-03-30 12:41:37:090  268 5a8 AU Changing existing AU client directive from 'Progress Ux' to 'Install Complete Ux', session id = 0x3


    Derek Schauland, MCSE | Microsoft MVP - File System Storage | Technology Addict
    Wednesday, March 30, 2011 6:00 PM
  • Seems like there is an error when installing anMSI

    2011-03-30 12:27:00:425 3776 ad8 Handler 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS 3: 5
    2011-03-30 12:27:00:425 3776 ad8 Handler   : MSI transaction completed. MSI: 0x80070643, Handler: 0x80cf200b, Source: No, Reboot: 0
    2011-03-30 12:27:00:425 3776 ad8 Handler Updating status for update 0.
    2011-03-30 12:27:00:425 3776 ad8 Handler   : WARNING: First failure for update {A8F17FE0-E1E6-4FB2-9FDB-773738FDD188}, transaction error = 0x80cf200b, MSI result = 0x80070643, MSI action = WriteRegistryValues

    Its in the WOW6432 location of the key. Is it possible that the registry location cannot be written to? May be some ACL changes? Can you pl. check what permissions are available for this key?

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BEHAVIORS

    Friday, April 01, 2011 12:38 AM
  • One more data point. It may be also good to see if there is an MSI log under %windir%\temp\msi*log around the time stamp 2011-03-30 12:27. It may contain some traces which may get us more information.
    Friday, April 01, 2011 6:34 PM
  • Hi Derek,

    We have reviewed your logs and as Mandar states above it appears there may be a permission issue writing to the below registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BEHAVIORS

    The logs state:

    2011-03-30 12:27:00:425 3776 ad8 Handler 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS 3: 5
    2011-03-30 12:27:00:425 3776 ad8 Handler : MSI transaction completed. MSI: 0x80070643, Handler: 0x80cf200b, Source: No, Reboot: 0
    2011-03-30 12:27:00:425 3776 ad8 Handler Updating status for update 0.
    2011-03-30 12:27:00:425 3776 ad8 Handler : WARNING: First failure for update {A8F17FE0-E1E6-4FB2-9FDB-773738FDD188}, transaction error = 0x80cf200b, MSI result = 0x80070643, MSI action = WriteRegistryValues

    When you have a moment could you please check the permissions of the registry or it's parent and confirm that SYSTEM and Administrators both have Full Control and Read permissions.  That is the default permissions for HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer and the rest underneath should be inheriting from that parent.

    Thanks,

    Frank, MSFT

    Friday, April 08, 2011 8:11 PM
  • Hello, I have the same issue I think, im trying to install Windows Intune in Windows 8 Consumer Preview x64

    It seems that the Windows Intune Center x64 is imposible to install under that OS or maybe I just screwed up something but I've tried lots of things and nothing seems to let me install that specific update.

    Friday, March 02, 2012 9:28 PM