排查 Microsoft Intune 中的客户端安装问题Troubleshoot client setup in Microsoft Intune

适用于:经典控制台中的 IntuneApplies to: Intune in the classic console
正在查找有关 Azure 中的 Intune 的文档?Looking for documentation about Intune on Azure? 请转到此处Go here.

使用以下信息有助于排除常见的客户端安装程序问题。Use the following information to help you troubleshoot common client setup problems. 如果此信息未解决你的问题,请参阅如何获取对 Microsoft Intune 的支持,了解更多获得帮助的方法。If this information does not solve your problem, see How to get support for Microsoft Intune to find more ways to get help.

客户端安装失败Client installation fails

  • 如果 Microsoft Intune 管理员控制台中未显示计算机的客户端软件部署警报,请检查计算机的网络连接和代理配置,并确保计算机能够与服务 URL https://manage.microsoft.com 通信。If no client software deployment alerts for the computer are displayed in the Microsoft Intune administration console check the computer’s Internet connectivity and proxy configuration and make sure that the computer can communicate with the service URL, https://manage.microsoft.com. 然后重新安装客户端软件。Then retry the client software installation.

  • 当出现客户端软件部署故障警报时,你可以通过在 “管理员”工作区中配置通知规则向选中的收件人发送邮件。You can have an email sent to selected recipients when a client software deployment failure alert occurs by configuring a notification rule in the Admin workspace. 有关详细信息,请参阅通过 Microsoft Intune 警报获取通知For more information, see Get notified by Microsoft Intune alerts.

  • 如果客户端软件部署失败,Intune 会显示重要警报“客户端软件部署故障”。Intune displays the critical alert Client Software Deployment Failure if the client software fails to deploy. 这将显示在“系统概述”页面和 Microsoft Intune 管理员控制台的“警报”页面。This will display in the System Overview page and Alerts pages of the Microsoft Intune administration console. 下面介绍了如何检查警报:Here's how to check for alerts:

  1. Microsoft Intune 管理控制台中,选择警报 > 概述In the Microsoft Intune administration console, choose Alerts > Overview.

  2. 在“警报概述”页面, 你可以查看以下信息:On the Alerts overview page, you can review the following information:

    • 前三个警报,可按日期、类别或严重性对这些警报排序The top three alerts, which can be sorted by date, category, or severity

    • 活动警报的总数The total number of active alerts

  3. 选择所有警报,以在警报页面显示以下信息。Choose All Alerts to display the following information on the Alerts page. 首先显示重要警报:Critical alerts are displayed first:

    • 名称 – 生成警报的警报类型的名称。Name – The name of the alert type that generated the alert.

    • – 指向警报的源的链接。Source – A link to the source of the alert. 如果将警报类型的显示阈值设置为“全部” ,则此链接将显示单个受影响的设备。If the display threshold of the alert type is set to All, then this link will display a single affected device. 如果将警报类型的显示阈值设置为一个值,则此链接将显示受此警报影响的所有设备的列表。If the display threshold of the alert type is set to a value, then this link will display a list of all the devices that are affected by this alert.

    • 上次更新时间 – 此项指明上次修改警报的时间。Last Updated – This indicates the time when the alert was last modified. 如果警报已关闭,则显示警报关闭时的时间。If an alert is closed, the time when the alert was closed is displayed.

    • “严重程度”– 表示警报的严重程度Severity – This indicates the severity of the alert

计算机注册包未下载Computer enrollment package doesn't download

问题:尝试注册计算机时遇到以下问题:Issue: While trying to enroll a computer you experience the following:

  • 注册包下载失败The enrollment package fails to download
  • 出现下载对话框但超时The download dialog appears but times out

解决方法:在下载使用的浏览器上,确保已在下载进行期间启用了下载,且加密文件可以保存到本地磁盘。Resolution: On the browser you're using for the download, for the period when the download takes place, ensure that downloads are enabled, and that encrypted files can be saved to your local disc.

客户端安装挂起,错误代码 0x80040154Client installation hangs with error code 0x80040154

问题:Issue:

  • 注册挂起期间的客户端安装。Client installation during enrollment hangs

  • 无法注册设备Unable to enroll device

  • WindowsUpdate.log 中的错误 0x80040154Error 0x80040154 in WindowsUpdate.log

原因可能是电脑上缺少关键软件更新。This may be caused by the absence of critical software updates on the PC.

解决方法:确保你的软件更新策略启用了关键更新的安装,如在 Microsoft Intune 中利用软件更新使 Windows 电脑保持最新版本中所述Resolution: Ensure that your software update policy enables installation of critical updates, as described in Keep Windows PCs up to date with software updates in Microsoft Intune

对于非 MDM Windows 设备,policyplatform.log 文件中的策略错误可能是因设备上 Windows 用户帐户控制 (UAC) 中的非默认设置导致的。For non-MDM Windows devices, policy errors in the policyplatform.log file may be the result of non-default settings in the Windows User Account Control (UAC) on the device. 某些非默认 UAC 设置会影响 Microsoft Intune 客户端安装和策略执行。Some non-default UAC settings can affect Microsoft Intune client installations and policy execution.

解决 UAC 问题To resolve UAC issues

  1. 停用计算机,如从 Microsoft Intune 管理停用数据和设备中所述。Retire the computer, as described in Retire data and devices from Microsoft Intune management.

  2. 等待 20 分钟,以便删除客户端软件。Wait 20 minutes for the client software to be removed.

    备注

    请勿尝试从“程序和功能”中删除客户端。Do not attempt to remove the client from Programs and Features.

  3. 在开始菜单上,键入 UAC 以打开用户帐户控制设置。On the start menu type UAC to open the User Account Control settings.

  4. 将通知滑块移动到默认设置。Move the notification slider to the default setting.

如果客户端无法从 Microsoft Intune 管理员控制台卸载怎么办What to do if the client will not uninstall from the Microsoft Intune administrator console

使用 Microsoft Intune 命令行工具删除客户端软件To remove the client software by using the Microsoft Intune command line tool

  1. 在管理员模式中打开命令提示符。Open a command prompt in administrator mode.

  2. 转到文件夹 %programfiles%\Microsoft\OnlineManagement\CommonGo to the folder %programfiles%\Microsoft\OnlineManagement\Common

  3. 运行以下命令 ProvisioningUtil.exe /UninstallAgents /MicrosoftIntuneRun the following command ProvisioningUtil.exe /UninstallAgents /MicrosoftIntune

客户端安装错误代码Client installation error codes

下表描述了在客户端软件安装失败的情况下显示在“警报” 中的错误代码。The following table describes error codes that are displayed in Alerts if client software installation fails. 其中包括用于解决每个错误代码所代表的问题的建议。It includes suggestions for resolving the problem that is represented by each error code.

错误代码Error code 可能的问题Possible problem 建议的解决方法Suggested resolution
0x80CF04370x80CF0437 未将客户端计算机上的时钟设置为正确的时间。The clock on the client computer is not set to the correct time. 确保将客户端计算机上的时钟和时区设置为正确的时间和时区。Make sure that the clock and the time zone on the client computer are set to the correct time and time zone.
“0x80240438”、“0x80CF0438” 、“0x80CF401B” 0x80240438, 0x80CF0438, 0x80CF401B 无法连接到 Intune 服务。Cannot connect to the Intune service. 检查客户端代理设置。Check the client proxy settings. 验证 Intune 是否支持客户端计算机上的代理配置,以及客户端计算机是否能够访问 Internet。Verify that the proxy configuration on the client computer is supported by Intune, and that the client computer has Internet access. 若要深入了解受支持的代理配置,请参阅使用适用于 Microsoft Intune 的 Endpoint Protection 帮助保障 Windows 电脑的安全For more information about supported proxy configurations, see Help secure Windows PCs with Endpoint Protection for Microsoft Intune.
0x80CF402C0x80CF402C 无法连接到 Intune 服务。Cannot connect to the Intune service. 检查网络连接。Check network connectivity. 验证计算机是否具有网络连接。Verify the computer has network connectivity. 确保网络电缆保持连接状态或启用了无线网络。Ensure the network cable is connected or wireless network is on.
0x80240438, 0x80CF04380x80240438, 0x80CF0438 未配置 Internet Explorer 和本地系统中的代理设置。Proxy settings in Internet Explorer and Local System are not configured. 检查客户端代理设置,确认客户端计算机的代理配置受 Intune 支持,且客户端计算机拥有 Internet 访问。Check the client proxy settings and confirm that the proxy configuration on the client computer is supported by Intune, and that the client computer has Internet access. 若要深入了解受支持的代理配置,请参阅使用适用于 Microsoft Intune 的 Endpoint Protection 帮助保障 Windows 电脑的安全For more information about supported proxy configurations, see Help secure Windows PCs with Endpoint Protection for Microsoft Intune.
0x800430010x80043001 注册程序包过期。Enrollment package is out of date. 从“管理员” 工作区中下载并安装最新的客户端软件包。Download and install the current client software package from the Admin workspace. 相关说明,请参阅使用 Microsoft Intune 安装 Windows 电脑客户端主题。For instructions, see the Install the Windows PC client with Microsoft Intune topic.
0x800430040x80043004 订阅不存在或被禁用。Subscription does not exist, or is disabled. 验证你的帐户和 Intune 订阅是否仍处于活动状态。Verify that your account and subscription to Intune is still active. 若要查看帐户设置,请在 Office 365 管理中心中登录你的帐户。To view your account settings, sign in to your account in the Office 365 admin center.
0x800430020x80043002 帐户处于维护模式。Account is in maintenance mode. 当帐户处于维护模式时,你无法注册新客户端计算机。You cannot enroll new client computers when the account is in maintenance mode. 若要查看帐户设置,请在 Office 365 管理中心中登录你的帐户。To view your account settings, sign in to your account in the Office 365 admin center.
0x800430030x80043003 帐户被删除。Account is deleted. 验证你的帐户和 Intune 订阅是否仍处于活动状态。Verify that your account and subscription to Intune is still active. 若要查看帐户设置,请登录到你的帐户。To view your account settings, sign in to your account.
0x800430050x80043005 客户端计算机被停用。The client computer is retired. 等几个小时并从计算机中删除任何较旧版本的客户端软件,然后重试客户端软件安装。Wait a few hours, remove any older versions of the client software from the computer, and then retry the client software installation. 有关说明,请参阅以上如果客户端无法从 Microsoft Intune 管理员控制台卸载怎么办For instructions, see What to do if the client will not uninstall from the Microsoft Intune administrator console, above.
0x800430060x80043006 达到帐户所允许的最大座位数。The maximum number of seats allowed for the account is reached. 贵组织必须购买附加的座位,你才能在服务中注册更多客户端计算机。Your organization must purchase additional seats before you can enroll more client computers in the service.
0x800430070x80043007 在安装程序所在的文件夹中找不到证书文件。Could not find the certificate file in the same folder as the installer program. 在开始安装之前提取所有文件。Extract all files before you start the installation. 请不要重命名或重新定位任何提取的文件:所有文件必须位于同一文件夹中,否则安装将失败。Do not rename or relocate any of the extracted files: all files must exist in the same folder or the installation will fail. 有关详细信息,请参阅使用 Microsoft Intune 安装 Windows 电脑客户端For more information, see Install the Windows PC client with Microsoft Intune.
“0x8024D015”、“0x00240005”、“0x80070BC2”、“0x80070BC9”、“0x80CFD015”0x8024D015, 0x00240005, 0x80070BC2, 0x80070BC9, 0x80CFD015 无法安装软件,因为客户端计算机的重启处于挂起状态。The software cannot be installed because a restart of the client computer is pending. 重启计算机,然后重试客户端软件安装。Restart the computer and then retry the client software installation.
0x800700320x80070032 在客户端计算机上未找到用于安装客户端软件的一个或多个先决条件。One or more prerequisites for installing the client software were not found on the client computer. 确保所有必需的更新都已安装在客户端计算机上,然后重试客户端软件安装。Make sure that all required updates are installed on the client computer and then retry the client software installation. 若要深入了解用于安装客户端软件的先决条件,请参阅 Microsoft Intune 的网络基础结构要求For more information about prerequisites for installing the client software, see Network infrastructure requirements for Microsoft Intune.
0x800430080x80043008 无法启动 Microsoft Online Management 更新服务。Could not start the Microsoft Online Management Updates service. 请联系支持部门,如如何获取对 Microsoft Intune 的支持中所述。Contact Support as described in How to get support for Microsoft Intune.
0x800430090x80043009 已在服务中注册客户端计算机。The client computer is already enrolled into the service. 你必须先停用客户端计算机,然后才能在服务中重新注册该客户端计算机。You must retire the client computer before you can re-enroll it in the service. 相关说明,请参阅从 Microsoft Intune 管理停用设备For instructions, see Retire devices from Microsoft Intune management.
0x8004300A0x8004300A (阶段 21)注册包部署到 GPO 以安装在用户范围(而不是计算机范围)时出错。(Stage 21) Error occurs when the enrollment package is deployed to the GPO to be installed at user scope and not machine scope. 确保在计算机范围内通过 GPSI 将 GPO 正确设定为目标。Make sure the GPO is targeted correctly via GPSI at machine scope. 若要查看有关该主题的论坛帖子,请访问 TechNet 论坛To see forum postings on this subject, see this TechNet Forum.
0x8004300B0x8004300B 无法运行客户端软件安装包,因为不支持客户端上运行的 Windows 的版本。The client software installation package cannot run because the version of Windows that is running on the client is not supported. Intune 不支持客户端计算机上运行的 Windows 的版本。Intune does not support the version of Windows that is running on the client computer. 有关受支持的操作系统的列表,请参阅 Microsoft Intune 的网络基础结构要求For a list of supported operating systems, see Network infrastructure requirements for Microsoft Intune.
0xAB20xAB2 Windows Installer 无法针对自定义操作访问 VBScript 运行时。The Windows Installer could not access VBScript run time for a custom action. 此错误是由基于动态链接库 (DLL) 的自定义操作引起的。This error is caused by a custom action that is based on Dynamic-Link Libraries (DLLs). 对 DLL 进行疑难解答时,可能必须使用 Microsoft 支持 KB198038:用于打包和部署问题的有用工具中描述的工具。When troubleshooting the DLL, you might have to use the tools that are described in Microsoft Support KB198038: Useful Tools for Package and Deployment Issues.
0x8004300f0x8004300f 软件无法安装,是因为已安装了 System Center Configuration Manager 客户端。The software cannot be installed because the System Center Configuration Manager client is already installed. 删除 Configuration Manager 客户端,然后重试客户端软件安装。Remove the Configuration Manager client and then retry the client software installation.
0x800430100x80043010 无法安装此软件,因为已经安装了开放移动联盟设备管理 (OMADM) 客户端。The software cannot be installed because the Open Mobile Alliance Device Management (OMADM) client is already installed. 注销 OMADM 客户端,然后重试客户端软件安装。Un-enroll the OMADM client and then retry the client software installation.

如果安装问题仍然存在,请联系支持部门,如如何获取对 Microsoft Intune 的支持中所述。If installation problems persist, contact Support as described in How to get support for Microsoft Intune. 使客户端计算机注册日志(位于 %programfiles%\Microsoft\OnlineManagement\Logs\Enrollment.log 和 %userprofile%\AppData\Local\Microsoft\OnlineManagement\Logs\Enrollement.log 中)和 Windows 更新日志 (%windir%\windowsupdate.log)可对支持工程师显示。Have the client computer enrollment log (located in %programfiles%\Microsoft\OnlineManagement\Logs\Enrollment.log and %userprofile%\AppData\Local\Microsoft\OnlineManagement\Logs\Enrollement.log) and Windows Update log (%windir%\windowsupdate.log) available to show to support engineers.

如果卸载客户端时未卸载 Endpoint Protection,应执行什么操作What to do if Endpoint Protection is not uninstalled when you uninstall the client

运行上述命令后,有时可能会遗留主机保护 (Endpoint Protection) 代理。Sometimes the Host Protection (Endpoint Protection) agent may be left after you run the above commands. 如果发生这种情况,请从提升的提示符处运行以下命令:If that happens, run this command from an elevated prompt:

```
"C:\Program Files\Managed Defender\Setup.exe" /x /q /s
```

后续步骤Next steps

如果此疑难解答信息没有帮助到你,请联系 Microsoft 支持部门,如如何获取对 Microsoft Intune 的支持中所述。If this troubleshooting information didn't help you, contact Microsoft Support as described in How to get support for Microsoft Intune.

要提交产品反馈,请访问 Intune Feedback