In this blog post I want to put a spotlight on the troubleshooting of Windows Phone 8.1 enrollment in Microsoft Intune (with or without ConfigMgr integration). The problem with Windows Phone enrollment was that there was little to no log information about the enrollment process, but that has changed with Windows Phone 8.1. Before Windows Phone 8.1 there were only some log files (like the dmpdownloader) when the integration with ConfigMgr was used, but in most occasions they wouldn’t show helpful information.
Starting with Windows Phone 8.1 this has changed and there is the ability to get some logging of the mobile device. It’s not an easy process, and probably not an option in every situation, but it will help to verify the health of the environment. Starting with Windows Phone 8.1 it’s possible to get logging during the device enrollment, during the certificate enrollment and during the VPN configuration. The minor detail is that the Windows Phone needs to be an emulator image, or a developer unlocked retail device.
Before I will start with the steps to collect and view the logging of a Windows Phone device, it is important to have the following prerequisites in place:
- Download and install the Windows Phone 8.1 SDK. The Windows Phone 8.1 SDK is available here: http://www.microsoft.com/en-us/download/details.aspx?id=43719
- Download and install the Windows Performance Analyzer (WPA). The WPA is part of the Windows ADK 8, which is available here: http://www.microsoft.com/en-US/download/details.aspx?id=39982
Step 1: Collect the Enterprise Management logging
The first step in troubleshooting, starting with Windows Phone 8.1, is to collect the logging of the device. Since Windows Phone 8.1 and the Windows Phone Developer Power Tools 8.1 it is possible to get some logging when the mobile device is connected to the desktop, or laptop, running the tools. To collect the logging, perform the following steps:
- Start the Windows Phone Developer Power Tools 8.1;
- Select Device and click Connect;
- Select the Performance Recorder –tab, navigate to Extras and select Enterprise Management;
- Click Start to start the collecting of the logging;
- Perform the Windows Phone 8.1 enrollment;
- Click Stop to stop the collection of the logging and save the collected logging locally.
Step 2: View the Enterprise Management logging
The second step in troubleshooting, starting with Windows Phones 8.1, is to view the logging of the device. The captured logging is saved in an ETL format and can be opened with the Windows Performance Analyzer (WPA). To view the logging, perform the following steps:
- Start the Windows Performance Analyzer and open the collected logging.
- In the Graph Explorer, expand System Activity and double-click Generic Events.
- In the Analysis –tab, click Open View Editor ().
- In the Generic Events View Editor, select at least Message and click Apply.
- Back in the Analysis –tab, the Message column will provide the detailed (error) information per provider.
- For device enrollment the logged information will be available in the provider named Microsoft-WindowsPhone-Enrollment-API-Provider.
Note: For troubleshooting SCEP certificate enrollment the provider will be named Microsofot-WindowsPhone-SCEP-Provider and for troubleshooting VPN configuration the provider will be named Microsoft-WindowsPhone-CmCspVpnPlus.
The following picture will show an example of the logging collected of a Windows Phone 8.1 device, while enrolling the device in Microsoft Intune/ ConfigMgr. The error message 0x80090016 pointed me straight to certificate issues. The only “variable” certificates that are being used during the enrollment are used to sign the company portal. After resigning my company portal the problem was solved. This was a lot easier troubleshooting then the default message on a Windows Phone mobile device.
This information an much more can be found in the Windows Phone 8.1 management bible, which can be downloaded here: http://go.microsoft.com/fwlink/?LinkID=279003