question

Not a fan of me tooing but we are having the exact same issue across multiple intune tenants - the only commonality being Intune itself.

We removed Intune from one of our, now many, affected devices - this has resolved the issue until we can identify the exact cause. We havent adjusted policies in weeks within Intune which signals a concern that something on Microsoft's end has gone wrong. It would, as always, be great to hear from them on this matter but I won't hold my breath.

anonymous userMoody-3398

Does this issue occur on other Office applications like Word?

Please try to open Excel in safe mode eliminate interference from add-ins and startup items.
Press Win+R, type excel /safe, Enter.

If you can open Excel successfully in safe mode:
- Move the files in C:\Users\<User Name>\AppData\Roaming\Microsoft\Excel\XLSTART to other location temporarily, then check if the issue still exists.
- If it doesn't work, go to File>Options>Add-Ins. Towards the bottom of the window, where it says Manage, click the Go button. In the dialog box, uncheck the add-ins to disable them.

We recently rolled out Intune and it seems this may be the cause.

<< Do you mean that you enrolled your device in Intune to manage?
If yes, please add the Enterprise Context column to the Details tab of the Task Manager.

You could also try to un-enroll your device from Intune to check the issue.

Besides, to better help you, it is recommended to add a tag related to Intune like “mem-intune-enrollment”.

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

The fix provided above worked for us, however some users are experiencing issues when using formula's =SUM(A1:A7) and excel crashes.

unsure if its related, however EventID shows

Log Name: Application
Source: Application Error
Date: 12/10/2020 10:19:54 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: xxx
Description:
Faulting application name: EXCEL.EXE, version: 16.0.13127.20910, time stamp: 0x5fcbbcd1
Faulting module name: PayloadRestrictions.dll, version: 10.0.19041.1, time stamp: 0xe257489f
Exception code: 0xc0000409
Fault offset: 0x0006e6d6
Faulting process id: 0x232c
Faulting application start time: 0x01d6ce81bba7b4d8
Faulting application path: C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE
Faulting module path: C:\WINDOWS\SYSTEM32\PayloadRestrictions.dll
Report Id: 2656bb9d-2038-4f3b-8a33-dec13b73cb3a

anonymous userMoody-3398

Thanks for sharing the workaround.

According to your description, I invite my Intune colleague to help me do the test, but could not reproduce this issue.
Our test environment is as below screenshots:




The configuration information in Intune are all default.

In order to check if we could totally reproduce this issue.
We may need more information of your environment:

• Windows version
  

• Office version
  

• Configuration information in Intune

If you have any updates, please post back and we will do more test for you.

Thanks for your understanding.

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Hi,

We solved the issue by using the above workaround from the Reddit post. I have checked your settings and they all seem fine however it is more the Exploit Guard that needs to be looked into. We are happy to continue without it until a time when it is fixed.

Kyle

Hi all

Just to add some more info on this for anybody who is interested or still having issues, you might have noticed that Exploit Guard settings are no longer pushed out via the baselines as they have been removed since the December 2020 ones were published. This in itself of course won't removed any of the settings affecting Office, however it seems that any of the entries added are being removed through Office updates so if anybody is having ongoing problems hopefully updating your baseline to the latest version and updating Office will sort this out.

If you can't update for whatever reason, a Quick Repair via the Add\Remove Programs Control Panel applet (or search the Start Menu for Add or Remove Programs) should sort things :)

For reference, Exploit Guard settings can be configured in Intune via Endpoint security>Attack surface reduction and creating a new Exploit Protection policy.