How to Troubleshooting Microsoft Intune Extensions

Thanks to the blog :-

Validating Connectivity With Windows Intune

1. Download PSTools, see 2. Open an elevated admin CMD window 3. Change directory to the folder that contains PSexec (unless psexec is in a folder in your PATH already). Type the following line. (-i is for interactive, -s is to run as system) psexec -i -s cmd.exe hit ENTER 4. Another CMD opens after hitting “Enter” above. Verify you are now running as the system by typing whoami. The reply should be “nt authority\system” 5. Launch IExplore.exe and go to If the connection fails, the system account has been blocked. Hereby you can rule out Proxy/Firewall issue(s) here.
The following table lists the log files that contain information related to Extensions and applies to Configuration Manager 2012 R2. AdminUI.ExtensionInstaller.log
Records information about the download of extensions from Microsoft, and the installation and uninstallation of all extensions.
The computer that runs the Configuration Manager console FeatureExtensionInstaller.log
Records information about the installation and removal of individual extensions when they are enabled or disabled in the Configuration Manager console.
The computer that runs the Configuration Manager console SmsAdminUI.log
Records Configuration Manager console activity.
The computer that runs the Configuration Manager console Dmpdownloader.log
Records details on downloads from Windows Intune.
Computer with the Windows Intune connector Dmpuploader.log
Records details for uploading database changes to Windows Intune.
Computer with the Windows Intune connector outgoingcontentmanager.log
Records content uploaded to Windows Intune.
Computer with the Windows Intune connector
To repair your local installed extensions you can use the following commando on your (site)system. This applies to (site)systems where you’ve installed a Configuration Manager admin console:
.\adminconsole\adminui.extensioninstaller.exe SiteServerName=<ServerName> /repair
Certificate Thumbprint ID
Make sure your Certificate or thumbprint ID for both the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\SMS_DMP_CONNECTOR and Machine certificate assigned under the Machine\My Certificate store match. If they do not match re-install the Windows Intune Connector site system role. image image
Query Extensions State
The following SQL query can be used to determine what the Microsoft Intune extension state is of your Configuration Manager instance:
select L.Name, F.FeatureID, F.StateID,S.FeatureStateName,F.Flag, F.Error from MDMCFDFeature F join CFDLocalizedMetaData L on F.FeatureID=L.FeatureID join CFDFeatureState S on F.StateID=S.FeatureStateID where L.LocaleID=1033
Don’t forget to change the LocaleID to the appropriate ID corresponding you local/region. You can skip this entry to list all extensions by all locales. image StateID
FeatureStateName 0
Unknown 2
Enabled 3
PreflightInProgress 5
ScriptInProgress 20
Ready 33
UninstallSuceeded 34

Post a Comment