Windows Enrollment Status Screen Troubleshooting

0
Intune Enrollment Status Screen

Intune Enrollment status screen (or page) is new to some of us. Enrollment status page policy is a global policy and once enabled it’s applicable for all the users. I hope Microsoft will give us options to deploy different enrollment status screen policies to a different set of users. In this post, we will see the troubleshooting options of Enrollment status page and application deployments.

Content:-

What is Intune Enrollment Status Screen?
Video Tutorial – Enrollment Status Screen Application Deployment Troubleshooting
How to Setup Intune Enrollment Status Page?
Supportability of Windows Enrollment Status Screen
     – Device Setup Tracking
     – User Account Setup Tracking
How to Troubleshoot Intune Enrollment Status Screen for Windows?
How to Troubleshoot Windows 10 the Intune Application & Security Deployment?

What is Intune Enrollment Status Screen? 

Enrollment screen is status update screen available for end users during device setup.  The Intune enrollment status page displays installation status information. This status screen gives a status update about the subset of applications, profiles, and certificates might not be fully installed by the time a user is enrolled.

This enrollment status screen gives an idea about the progress of the installation of some applications, profiles, and certificates. This screen is used to get the real-time progress of enrollment process while the user waits for his or her device.

Video Tutorial – Enrollment Status Screen Application Deployment Troubleshooting

How to Setup Intune Enrollment Status Page?

I have explained how to setup the Intune enrollment status page in my autopilot end to end guide. I would recommend reading the autopilot post to have more details.

End User Experience – Intune Enrollment Status Page

Intune enrollment status page has 3 (three) parts.

  1. Device Preparation
  2. Device Setup
  3. User Account Setup

Supportability of Windows Enrollment Status Screen

Do you know all the application installation status, profile status displayed in enrollment status screen or page? I don’t think all the statuses can be tracked with enrollment status page. You also need to remember this page is still in “Preview“.

Device Setup Tracking 

  • Security policies
    • One configuration service provider (CSP) for all enrollments.
    • Actual CSPs configured by Intune are not tracked here.
  • Applications
    • Per machine Line-of-business (LoB) MSI apps.
    • LoB store apps with installation context = Device.
    • Offline store and LoB store apps with installation context = Device.
  • Connectivity profiles (VPN & Wi-Fi) are not tracked yet, so these will say “0 of 0”.
  • Certificates are not tracked yet, so these will always say “0 of 0”.

Intune Enrollment Status Screen

User Account Setup Tracking 

  • Security policies
    • One CSP for all enrollments.
    • Actual CSPs configured by Intune are not tracked here.
  • Applications
    • Per user LoB MSI apps that are assigned to All Devices, All Users, or a user group in which the user enrolling the device is a member.
    • Per machine LoB MSI apps that are assigned to All Users or a user group in which the user enrolling device is a member.
    • LoB store apps that are assigned to All Devices, All Users, or a user group in which the user enrolling the device is a member with installation context = User.
    • Online store apps that are assigned to All Devices, All Users, or a user group in which the user enrolling device is a member with installation context = User.
    • Offline store apps that are assigned to All Devices, All Users, or a user group in which the user enrolling device is a member with installation context = User.
  • Connectivity profiles
    • VPN or Wi-Fi profiles that are assigned to All Users or a user group in which the user enrolling the device is a member.
  • Certificates
    • Certificate profiles that are assigned to All Users or a user group in which the user enrolling the device is a member.

Intune enrollment status screen supports only selected scenarios. Those scenarios are documented in the Microsoft documentation here.

How to Troubleshoot the Intune Enrollment Status Screen for Windows?

The status screen or page troubleshooting options will get changed depending on the configuration on the settings page. This setup of Windows enrollment status page is already discussed in the above section. I would recommend reading Microsoft doc to get more details about tracking of enrollment status page. 

I have done the following setup for Enrollment status screen for Windows. Check out the setting of your enrollment status page policy if you get different options. Just remember that this is a global setting and all the devices and users will get impacted by these changes.

Show app and profile installation progress – Yes
Block device use until all apps and profiles are installed – Yes
Allow users to reset device if installation error occurs – Yes
Allow users to use device if installation error occurs – Yes
Show error when installation takes longer than specified number of minutes – 60 Minutes
Show custom message when an error occurs – Yes
Allow users to collect logs about installation errors – Yes

Enrollment Status Screen Troubleshooting

Following are the troubleshooting options which you will get if you have a policy setting like above.

  1. CONTINUE – This is the best option for System Admins. The end user should not have this option. Click this button to continue troubleshooting with failed apps or configuration.
  2. COLLECT LOGS – This is the best option for end user to collect the logs. Collected logs can be sent to the system admin to troubleshoot further.
  3. RESET DEVICE – This is the option to restart the process from scratch. This will reset the Windows and remove all the setting and reinstall the Windows. I have seen the device is prompting for admin account or local user & password then click on RESET button.
  4. RETRY – This is an option to retry the failed application or Configurations. This option won’t help us to re-install the previously installed apps/configurations. This won’t go back to previously completed stages.

How to Troubleshoot Windows 10 Intune Application & Security Deployment?

When you get a Failed message in Windows Enrollment status page, then you can give a try again with “RETRY” option. The next option is to click on the Continue button. Login to the Windows 10 device and troubleshoot to find out the reason for the failure.

I have explained a way to troubleshoot Windows 10 devices using event logs, registry settings, and WMI explorer in the previous post. I would recommend reading the Windows 10 troubleshooting guide post to get more details. Following are the topics covered in that post.

Understand Windows 10 MDM Architecture
Video Tutorial – Windows 10 MDM Troubleshooting
Troubleshoot with Windows 10 Event Logs
Troubleshoot Windows 10 with WMI Explorer
Troubleshoot Windows 10 with Registry Entries
Troubleshoot Windows 10 with MDMDiagReport

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.