Intune Enrollment status page (ESP) is new to some of us. Enrollment status page policy is a global policy and once enabled it’s applicable for all the users. I hope Microsoft will give us options to deploy different enrollment status screen policies to a different set of users. In this post, we will see the troubleshooting options of Enrollment status page and application deployments.
TL;DR
What is Intune Enrollment Status Page (ESP)?
Enrollment page is status update screen available for end users during Windows 10 setup. The Intune enrollment status page displays installation status information. This status screen gives a status update about the subset of applications, profiles, and certificates might not be fully installed by the time a user is enrolled.
This enrollment status page gives an idea about the progress of the installation of some applications, profiles, and certificates. This screen is used to get the real-time progress of enrollment process while the user waits for his or her device.
Video Tutorial – Enrollment Status Page Application Deployment Troubleshooting
How to Setup Intune Enrollment Status Page?
I have explained how to setup the Intune enrollment status page (ESP) in my autopilot end to end guide. I would recommend reading the autopilot post to have more details.
End User Experience – Intune Enrollment Status Page
Intune enrollment status page has 3 (three) parts.
- Device Preparation
- Device Setup
- User Account Setup
Support ability of Windows Enrollment Status Page
Do you know all the application installation status, profile status displayed in enrollment status screen or page? I don’t think all the statuses can be tracked with enrollment status page. You also need to remember this page is still in “Preview“.
Device Setup Tracking
- Security policies
- One configuration service provider (CSP) for all enrollments.
- Actual CSPs configured by Intune are not tracked here.
- Applications
- Per machine Line-of-business (LoB) MSI apps.
- LoB store apps with installation context = Device.
- Offline store and LoB store apps with installation context = Device.
- Connectivity profiles (VPN & Wi-Fi) are not tracked yet, so these will say “0 of 0”.
- Certificates are not tracked yet, so these will always say “0 of 0”.
User Account Setup Tracking
- Security policies
- One CSP for all enrollments.
- Actual CSPs configured by Intune are not tracked here.
- Applications
- Per user LoB MSI apps that are assigned to All Devices, All Users, or a user group in which the user enrolling the device is a member.
- Per machine LoB MSI apps that are assigned to All Users or a user group in which the user enrolling device is a member.
- LoB store apps that are assigned to All Devices, All Users, or a user group in which the user enrolling the device is a member with installation context = User.
- Online store apps that are assigned to All Devices, All Users, or a user group in which the user enrolling device is a member with installation context = User.
- Offline store apps that are assigned to All Devices, All Users, or a user group in which the user enrolling device is a member with installation context = User.
- Connectivity profiles
- VPN or Wi-Fi profiles that are assigned to All Users or a user group in which the user enrolling the device is a member.
- Certificates
- Certificate profiles that are assigned to All Users or a user group in which the user enrolling the device is a member.
Intune enrollment status page supports only selected scenarios. Those scenarios are documented in the Microsoft documentation here.
How to Troubleshoot the Intune Enrollment Status Page for Windows?
The status screen or page troubleshooting options will get changed depending on the configuration on the settings page. This setup of Windows enrollment status page is already discussed in the above section. I would recommend reading Microsoft doc to get more details about tracking of enrollment status page.
I have done the following setup for Enrollment status page for Windows. Check out the setting of your enrollment status page policy if you get different options. Just remember that this is a global setting and all the devices and users will get impacted by these changes.
Show app and profile installation progress – Yes
Block device use until all apps and profiles are installed – Yes
Allow users to reset device if installation error occurs – Yes
Allow users to use device if installation error occurs – Yes
Show error when installation takes longer than specified number of minutes – 60 Minutes
Show custom message when an error occurs – Yes
Allow users to collect logs about installation errors – Yes
Following are the troubleshooting options which you will get if you have a policy setting like above.
- CONTINUE – This is the best option for System Admins. The end user should not have this option. Click this button to continue troubleshooting with failed apps or configuration.
- COLLECT LOGS – This is the best option for end user to collect the logs. Collected logs can be sent to the system admin to troubleshoot further.
- RESET DEVICE – This is the option to restart the process from scratch. This will reset the Windows and remove all the setting and reinstall the Windows. I have seen the device is prompting for admin account or local user & password then click on RESET button.
- RETRY – This is an option to retry the failed application or Configurations. This option won’t help us to re-install the previously installed apps/configurations. This won’t go back to previously completed stages.
How to Troubleshoot Windows 10 Intune Application & Security Deployment?
When you get a Failed message in Windows Enrollment status page, then you can give a try again with “RETRY” option. The next option is to click on the Continue button. Login to the Windows 10 device and troubleshoot to find out the reason for the failure.
I have explained a way to troubleshoot Windows 10 devices using event logs, registry settings, and WMI explorer in the previous post. I would recommend reading the Windows 10 troubleshooting guide post to get more details. Following are the topics covered in that post.
Understand Windows 10 MDM Architecture
Video Tutorial – Windows 10 MDM Troubleshooting
Troubleshoot with Windows 10 Event Logs
Troubleshoot Windows 10 with WMI Explorer
Troubleshoot Windows 10 with Registry Entries
Troubleshoot Windows 10 with MDMDiagReport