Deploy WAU 2.5.0 in Intune using msi file (.intunewin via Win32) - Fatal error during installation (0x80070643)

[clicerioneto]

I have created .intunewin file from WAU.msi for deploy in Intune (Win32 app).

Install command msiexec /i "Winget_AutoUpdate_2.5.0.msi" /qn /l*v "%ProgramData%\WingetAutoUpdateInstall.log"
Uninstall command
msiexec /x "{22D424EC-CDDB-49F2-B4ED-50CB5B1E2CA5}" /qn

However, I have verified the error Fatal error during installation (0x80070643)

Analising the log WingetAutoUpdateInstall.log, after installation, I have found the error related to WixQuietExec

MSI (s) (B8:48) [12:49:22:949]: Executing op: CustomActionSchedule(Action=CA_PowerShell_Install,ActionType=3073,Source=BinaryData,Target=WixQuietExec,CustomActionData="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NonInteractive -NoProfile -ExecutionPolicy Bypass -File "C:\Program Files\Winget-AutoUpdate\config\WAU-MSI_Actions.ps1" "" -InstallPath "C:\Program Files\Winget-AutoUpdate\" -CurrentDir "C:\WINDOWS\IMECache\327eb534-45dd-4b66-bbe6-fe4c2d95f11c_1")
MSI (s) (B8:58) [12:49:22:957]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSID6D2.tmp, Entrypoint: WixQuietExec
MSI (s) (B8:08) [12:49:22:958]: Generating random cookie.
MSI (s) (B8:08) [12:49:22:971]: Created Custom Action Server with PID 8760 (0x2238).
MSI (s) (B8:F0) [12:49:23:041]: Running as a service.
MSI (s) (B8:00) [12:49:23:050]: Hello, I'm your 64bit Elevated Non-remapped custom action server.
WixQuietExec: Error 0x80070005: Command failed to execute.
WixQuietExec: Error 0x80070005: QuietExec Failed
WixQuietExec: Error 0x80070005: Failed in ExecCommon method
CustomAction CA_PowerShell_Install returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (B8:48) [12:49:23:111]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (B8:48) [12:49:23:112]: User policy value 'DisableRollback' is 0
MSI (s) (B8:48) [12:49:23:112]: Machine policy value 'DisableRollback' is 0
Action ended 12:49:23: InstallFinalize. Return value 3.
MSI (s) (B8:48) [12:49:23:115]: Note: 1: 2318 2:

Does anyone have any idea what might be causing this issue?

[AndrewDemski-ad-gmail-com]

IlHi, That 0x80070005 is some access denied. You can catch it using procmon, or by going through event log. Hopefully it will be there. ..00643 is usually linked to WU error seen during recent failures. I have no idea why it is there. Good luck AD

…

________________________________ From: clicerioneto ***@***.***> Sent: 21 May 2025 19:21 To: Romanitho/Winget-AutoUpdate ***@***.***> Cc: Subscribed ***@***.***> Subject: [Romanitho/Winget-AutoUpdate] Deploy WAU 2.5.0 in Intune using msi file (.intunewin via Win32) - Fatal error during installation (0x80070643) (Discussion #948) I have created .intunewin file from WAU.msi for deploy in Intune (Win32 app). Install command msiexec /i "Winget_AutoUpdate_2.5.0.msi" /qn /l*v "%ProgramData%\WingetAutoUpdateInstall.log" Uninstall command msiexec /x "{22D424EC-CDDB-49F2-B4ED-50CB5B1E2CA5}" /qn image.png (view on web)<https://github.com/user-attachments/assets/5513226f-da40-4c91-b52f-1a84f7091e66> However, I have verified the error Fatal error during installation (0x80070643) image.png (view on web)<https://github.com/user-attachments/assets/43b1388e-d0ec-4906-a771-28150eb8dc56> Analising the log WingetAutoUpdateInstall.log, after installation, I have found the error related to WixQuietExec MSI (s) (B8:48) [12:49:22:949]: Executing op: CustomActionSchedule(Action=CA_PowerShell_Install,ActionType=3073,Source=BinaryData,Target=WixQuietExec,CustomActionData="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NonInteractive -NoProfile -ExecutionPolicy Bypass -File "C:\Program Files\Winget-AutoUpdate\config\WAU-MSI_Actions.ps1" "" -InstallPath "C:\Program Files\Winget-AutoUpdate\" -CurrentDir "C:\WINDOWS\IMECache\327eb534-45dd-4b66-bbe6-fe4c2d95f11c_1") MSI (s) (B8:58) [12:49:22:957]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSID6D2.tmp, Entrypoint: WixQuietExec MSI (s) (B8:08) [12:49:22:958]: Generating random cookie. MSI (s) (B8:08) [12:49:22:971]: Created Custom Action Server with PID 8760 (0x2238). MSI (s) (B8:F0) [12:49:23:041]: Running as a service. MSI (s) (B8:00) [12:49:23:050]: Hello, I'm your 64bit Elevated Non-remapped custom action server. WixQuietExec: Error 0x80070005: Command failed to execute. WixQuietExec: Error 0x80070005: QuietExec Failed WixQuietExec: Error 0x80070005: Failed in ExecCommon method CustomAction CA_PowerShell_Install returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox) MSI (s) (B8:48) [12:49:23:111]: Note: 1: 2265 2: 3: -2147287035 MSI (s) (B8:48) [12:49:23:112]: User policy value 'DisableRollback' is 0 MSI (s) (B8:48) [12:49:23:112]: Machine policy value 'DisableRollback' is 0 Action ended 12:49:23: InstallFinalize. Return value 3. MSI (s) (B8:48) [12:49:23:115]: Note: 1: 2318 2: Does anyone have any idea what might be causing this issue? — Reply to this email directly, view it on GitHub<#948>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ASAJCPVSFIECMYZZP4DN47D27SY3FAVCNFSM6AAAAAB5T4A37GVHI2DSMVQWIX3LMV43ERDJONRXK43TNFXW4OZYGM2TKNRSGM>. You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[clicerioneto]

Hi,

The issue was solved. The security endpoint was blocking the powershell execution during installation.

[AndrewDemski-ad-gmail-com]

Nice :) Could you share a description of how your whitelisting rule looks like? It could be useful to others when we put it in WAU documentation. GL HF AD