Kategori arşivi: Windows intune

windows intune 0x80CF401C or 0x800b0109 error

Windows Intune agent yüklemelerinde bu iki hata ve benzer hatalar alıyorsanız bunun pek çok nedeni olabilir. Bu konuda tavsiyem aşağıdaki ip uçlarını kontrol etmenizdir

https://www.cozumpark.com/forums/thread/266912.aspx

Ancak bu kadar zaman harcamak yerine bu ve benzeri sorunlar %99 internet erişiminden kaynaklanmaktadır. Hemen hemen her şirkette firewall/proxy olduğu için aşağıdaki yöntemleri deneyerek sorunu çözebilirsiniz

https://www.cozumpark.com/forums/thread/266909.aspx

özetle bu adreslere tüm makineler için izin vermediğiniz sürece başarılı bir kurulum yapma şansınız yoktur.

 

Windows Intune Deployment Error Yükleme Sorunları

Windows intune ürünü temelde çok basit bir yükleme ara yüzüne sahiptir. Size özel hesap üzerinden indireceğiniz bir yükleme paketine çift tıklamanız yeterlidir. Ancak bu yüklemelerde zaman zaman sorunlar yaşanabilir. Desteklenmeyen işletim sistemleri, firewall ve port sorunları vb.

Bunlar hakkındaki detaylı bilgileri aşağıdaki tabloda bulabilirsiniz

 

Error Code Possible Problem Suggested Resolution
0x80CF0437 The clock on the client computer is not set to the correct time. Make sure that the clock and the time zone on the client computer are set to the correct time and time zone.
0x80240438, 0x80CF0438, 0x80CF402C Cannot connect to the Windows Intune service. Check the client proxy settings. Verify that the proxy configuration on the client computer is supported by Windows Intune, and that the client computer has Internet access. For more information about supported proxy configurations, see Appendix B: Firewall and Proxy Server Settings for Client Computers.
0x80240438, 0x80CF0438 Proxy settings in Internet Explorer and Local System are not configured. Cannot connect to the Windows Intune service. Check the client proxy settings and confirm that the proxy configuration on the client computer is supported by Windows Intune, and that the client computer has Internet access. For more information about supported proxy configurations, see Appendix B: Firewall and Proxy Server Settings for Client Computers.
0x80043001, 0x80CF3001, 0x80043004, 0x80CF3004 Enrollment package is out of date. Download and install the current client software package from the Administration workspace. For instructions, see Download the Client Software.
0x80043002, 0x80CF3002 Account is in maintenance mode. You cannot enroll new client computers when the account is in maintenance mode. To view your account settings, sign in to your account in the Microsoft Online Services Portal.
0x80043003, 0x80CF3003 Account is deleted. Verify that your account and subscription to Windows Intune is still active. To view your account settings, sign in to your account in the Microsoft Online Services Portal.
0x80043005, 0x80CF3005 The client computer has been retired. Wait a few hours, remove any older versions of the client software from the computer, and then retry the client software installation. For instructions, see Remove the Client Software.
0x80043006, 0x80CF3006 The maximum number of seats allowed for the account has been reached. Your organization must purchase additional seats before you can enroll more client computers in the service.
0x80043007, 0x80CF3007 Could not find the certificate file in the same folder as the installer program. Extract all files before you start the installation. Do not rename or relocate any of the extracted files: all files must exist in the same folder or the installation will fail. For more information, see Download the Client Software.
0x8024D015, 0x00240005, 0x80070BC2, 0x80070BC9, 0x80CFD015 The software cannot be installed because a restart of the client computer is pending. Restart the computer and then retry the client software installation.
0x80070032 One or more prerequisites for installing the client software were not found on the client computer. Make sure that all required updates are installed on the client computer and then retry the client software installation. For more information about prerequisites for installing the client software, see Deploying the Windows Intune Client Software.
0x80043008, 0x80CF3008 Failed to start the Microsoft Online Management Updates service. Contact Support.
0x80043009, 0x80CF3009 The client computer is already enrolled into the service. You must retire the client computer before you can re-enroll it in the service. For instructions, see Retire a Computer.
0x8004300B, 0x80CF300B The client software installation package cannot run because the version of Windows that is running on the client is not supported. Windows Intune does not support the version of Windows that is running on the client computer. For a list of supported operating systems, see Client Software Requirements.
0xAB2 The Windows Installer could not access VBScript run time for a custom action. This error is caused by a custom action that is based on Dynamic-Link Libraries (DLLs). When troubleshooting the DLL, you might have to use the tools that are described in Microsoft Support KB198038: Useful Tools for Package and Deployment Issues.

 

Eğer bunlar size çözüm olmadı ise bu durumda aşağıdaki logların içeriğini kontrol edebilirsiniz

%programfiles%\Microsoft\OnlineManagement\Logs\Enrollment.log

%windir%\windowsupdate.log

Windows Intune Firewall Ports

Windows intune yüklenmiş bir istemcinin internet ortamından yönetimi için gerekli olan temel portlar 80 ve 443′ tür. Eğer bu portları her site için açmak istemiyorsanızda bu durumda aşağıdaki siteler için özellikle açabilirsiniz

Dokümantasyon, online yardım ve destek için

Domain Ports
*.livemeeting.com 80 and 443
*.microsoftonline.com 80
onlinehelp.microsoft.com 80
*.social.technet.microsoft.com 80
blogs.technet.com 80
go.microsoft.com 80
www.microsoft.com 80

 

Microsoft Update servisleri için

 

Domain Ports
*.update.microsoft.com 80 and 443
download.microsoft.com 80 and 443
update.microsoft.com 80 and 443

 

Windows Intune ve ilişkili servisler için

 

Domain Ports
*.manage.microsoft.com 80 and 443
*.spynet2.microsoft.com 443
manage.microsoft.com 80 and 443
wustat.microsoft.com 80 and 443

 

Windows Update servisleri için

Domain Ports
*.download.windowsupdate.com 80 and 443
*.windowsupdate.com 80 and 443
download.windowsupdate.com 80 and 443
ntservicepack.microsoft.com 80 and 443
windowsupdate.microsoft.com 80 and 443

 

 Eğer ortamda proxy server var ise, proxy server üzerinde kullanıcı hesabı yerine bilgisayar hesabı için izin verilmesi gerekmektedir. ( Intune istemci servisi localsystem hesabı ile çalıştığı için kullanıcı hesabı ile değil bilgisayar hesabı için izin verilmesi gerekmektedir.)