Search This Blog

Tuesday, November 16, 2021

Microsoft Intune MDM PolicyManager - Unknown Win32 Error code 0x86000011

Introduction

I recently configured some custom profiles in Microsoft Intune, and it turned out that one of the policies failed hard on all devices. I had not seen this error before and went to search on the big internet for the error code to understand more about the return code.

I went to this website and the error says “the requested command is not allowed on the target”

All right, so I must have configured something wrong in my policy…

Let’s have a look!

 

Debug time

This is how the error looks like in Intune.

clip_image002

 

If we deep dive into the client’s event log we can better see what happens

(The event log can be found in Applications and Services Logs -> Microsoft -> Windows -> DeviceManagement-Enterprise-Diagnostics-Provider -> Admin)

clip_image004

MDM PolicyManager: Set policy int, Policy: (AllowTelemetry), Area: (System), EnrollmentID requesting set: (CAB662A0-E788-4DE5-B203-2240C4006957), Current User: (Device), Int: (0x2AFE388), Enrollment Type: (0x6), Scope: (0x0), Result:(0x86000011) Unknown Win32 Error code: 0x86000011.


We have discovered the problem. Now to the configuration in Microsoft Intune to see what we configured.

clip_image006

I have configured AllowTelemetry and set the Data type to a string.


To troubleshoot further I went to the registry of a device and searched for “AllowTelemetry” until I found this

clip_image008

Did you notice what I missed?

Yes, I had by accident set the custom profile to a “String” and not an “integer”, that's why the policy cannot apply to the client.

 

I went back to Microsoft Intune and into the policy with error.

Deleted the old row and changed the data type to “Integer” and saved it.

clip_image010

 

Manually synced a client with the policy assigned and THEN the policy applied as supposed.

clip_image012

clip_image014

Jobs done!


This article was created to show how to debug such error.
To configure telemetry going forward you should use the Settings Catalog.


Summary

Microsoft Intune is very good at reporting back; however, it could have been a better error message to easier understand the issue without too much searching around.

Hope this helped you along with your troubleshooting.

No comments:

Post a Comment