Several computers on our network are failing every Intune app installation almost immediately, often before anything appears to download. The affected devices can still sync successfully from the Intune portal or Company Portal, and they can browse the web, but app deployments repeatedly fail while other computers at the same site work normally.
I initially suspected malware or a problem with specific download traffic, but the IntuneManagementExtension.log does not show a useful error code. It repeatedly contains entries such as:
`[Win32App][Win32AppDownloadExecutor] Execution completed with action status: Failed, enforcement state: InProgressPendingManagedInstaller, error code: , and download running in background: False.`
The log also shows successful requests to the Intune service, successful throttling updates, and an available MDM certificate. What does the `InProgressPendingManagedInstaller` state mean, and what should I check to troubleshoot these failed installations?
2 Answers
The blank error code is probably not the main issue. The important part is `InProgressPendingManagedInstaller`. That usually means the Intune Management Extension is waiting for the Managed Installer configuration to be applied before it will install Win32 apps.
Check whether Managed Installer was enabled in your Intune configuration. If it is enabled intentionally, verify that the related AppLocker or application-control policy actually reached the affected device. You can run `Get-AppLockerPolicy -Effective -Xml` and look for the expected managed-installer rules. Also check that the `AppIDSvc` service is running and review the AppLocker logs under Event Viewer → Applications and Services Logs → Microsoft → Windows → AppLocker.
The successful web request and MDM certificate entries suggest that basic connectivity and device check-in are working. After correcting the policy, force a device sync or restart the Microsoft Intune Management Extension service so it can reevaluate the deployment.
This points more toward a policy or permissions problem than malware or blocked download traffic. If Managed Installer is turned on but its policy is missing or failed on a device, Win32 app deployments can remain stuck in this pending state. Check the policy status on one affected computer, correct or remove the configuration, and then restart the Intune Management Extension or trigger another sync.
That matched what we found. The Managed Installer policy had failed on one of the affected computers, and reversing that setting resolved the installation failures.
Managed Installer had been enabled, but the WDAC policy was never fully deployed. One affected computer showed that the Managed Installer policy had failed to apply. I disabled Intune as a Managed Installer, then synced the device, and the app installations started working again.