Fix Error Code 0x87d1fde8 Remediation Failed Intune Configuration Profiles | Chrome | Setting Error

Let’s learn how to fix Intune Configuration profile deployment Error Code 0x87d1fde8 Remediation Failed (The system cannot find the file specified). The error and solution details are explained in this post.

The following text formatting can be dangerous in some scenarios. I have seen many issues because of text formatting issues like the following one. You might be able to notice this in the event logs and in the actual OMA URIs. I recommend using text comparison tools like https://www.diffchecker.com/diff to avoid any text formatting issues.

Fix Error Code 0x87d1fde8 Remediation Failed Intune Configuration Profiles | Chrome | Setting Error 1
Fix Error Code 0x87d1fde8 Remediation Failed Intune Configuration Profiles | Chrome | Setting Error 7
Fix Error Code 0x87d1fde8 Remediation Failed Intune Configuration Profiles | Chrome | Setting Error 2
Fix Error Code 0x87d1fde8 Remediation Failed Intune Configuration Profiles | Chrome | Setting Error 8

Issue

I tried to deploy Google Chrome ADMX related policies on Windows 10 devices. The main challenge was to find out the correct OMA-URI for Chrome policy which I wanted to deploy. I tried to use the following URI from here.

./Device/Vendor/MSFT/Policy/Config/GoogleChrome~Policy~googlechrome/ShowHomeButton 

Intune Portal

In the portal, you can check the status of the policy deployment. I could see the following Remediation Failed error under device status.

Navigate >> Home – Devices – Windows | Configuration profiles – Chrome Enable HomeButton | Device status.

Setting error - SETTING - ShowHomeButton [./Device/Vendor/MSFT/Policy/Config/GoogleChrome~Policy~googlechrome/ShowHomeButton]
STATE -Error
SOURCE PROFILES - Source Profile -Chrome Enable HomeButton
ERROR CODE - 0x87d1fde8
ERROR DETAILS - Remediation failed
Error Code 0x87d1fde8 Remediation Failed Intune
Error Code 0x87d1fde8 Remediation Failed Intune

Windows 10 Event Logs

  • Windows 10 Event Logs – Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
MDM ConfigurationManager: Command failure status. Configuration Source ID: (AAB267BF-EBF2-4649-822C-74511A4CC253), Enrollment Name: (MDMDeviceWithAAD), Provider Name: (Policy), Command Type: (Add: from Replace or Add), CSP URI: (./Device/Vendor/MSFT/Policy/Config/GoogleChrome~Policy~googlechrome/ShowHomeButton), Result: (The system cannot find the file specified.).
Error Code 0x87d1fde8 Remediation Failed Intune
Error Code 0x87d1fde8 Remediation Failed Intune

Analysis

I noticed an error “The system cannot find the file specified” in event logs on Windows 10 device. The Event ID for the system cannot find the file specified error is 404.

CSP URI Error ./Device/Vendor/MSFT/Policy/Config/GoogleChrome~Policy~googlechrome/ShowHomeButton

I started checking registry entry GoogleChrome~Policy~googlechrome on Windows 10 device after injecting Chrome ADMX. The error is system can’t find the file. I think the missing file is GoogleChrome~Policy~googlechrome.

You can check the following registry entries under \SOFTWARE\Microsoft\PolicyManager\AdmxDefault and I couldn’t find GoogleChrome~Policy~googlechrome there. The following are only entries available on Windows 10.

Chrome~Policy~googlechrome
Chrome~Policy~googlechrome_recommended
Chrome~Policy~googlechrome_recommended~ContentSettings_recommended
Chrome~Policy~googlechrome_recommended~DeprecatedPolicies_recommended
Chrome~Policy~googlechrome_recommended~PasswordManager_recommended
Chrome~Policy~googlechrome_recommended~Printing_recommended
Chrome~Policy~googlechrome_recommended~Startup_recommended
Chrome~Policy~googlechrome~BrowserSwitcher
Chrome~Policy~googlechrome~ContentSettings
Chrome~Policy~googlechrome~DefaultSearchProvider
Chrome~Policy~googlechrome~DeprecatedPolicies
Chrome~Policy~googlechrome~Extensions
Chrome~Policy~googlechrome~GoogleCast
Chrome~Policy~googlechrome~HTTPAuthentication
Chrome~Policy~googlechrome~NativeMessaging
Chrome~Policy~googlechrome~PasswordManager
Chrome~Policy~googlechrome~Printing
Chrome~Policy~googlechrome~Proxy
Chrome~Policy~googlechrome~RemoteAccess
Chrome~Policy~googlechrome~SafeBrowsing
Chrome~Policy~googlechrome~Startup
Error Code 0x87d1fde8 Remediation Failed Intune
Error Code 0x87d1fde8 Remediation Failed Intune

Solution Fix – Error Code 0x87d1fde8 Remediation Failed

  • The OMA-URI used in the above-mentioned policy is not correct.
  • Use the correct OMA-URI to fix the Error Code 0x87d1fde8 Remediation Failed issue,

Let’s find the correct OMA-URI. To find out you need to refer back to the ADMX Injection post registry entry – Check the following registry entries to find out the actual structure. You can get this registry entry details from any of the Windows 10 devices which have Google Chrome ADMX installed or applied.

  • Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\AdmxDefault
  • Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\AdmxDefault\AAB267BF-EBF2-4649-822C-74511A4CC253\Chrome~Policy~googlechrome~Startup\ShowHomeButton
✅✅✅Correct OMA-URI
./Device/Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome~Startup/ShowHomeButton

After changing the OMA-URI, the chrome admx policy got deployed successfully. More details Deploy Chrome ShowHomeButton Enable Policy Using Intune.

Error Code 0x87d1fde8 Remediation Failed Intune
Error Code 0x87d1fde8 Remediation Failed Intune

Resources

7 thoughts on “Fix Error Code 0x87d1fde8 Remediation Failed Intune Configuration Profiles | Chrome | Setting Error”

  1. Boa noite man, tudo bem.
    Estou enfrentando o mesmo problema ao aplicar a politica de HomePageLocation no chrome pelo Intune.
    Já corrigi a OMA-URI – ./Device/Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome~Startup/HomepageLocation
    E também a Value

    Não apresenta erro de aplicação, aparece no regedit, porém não funciona.

    Poderia dar um help.
    Att
    Cleber Oliveira

    Reply
  2. What makes this directory the same Reg key name for all devices? I do not see it referenced in the ADMX. Yours was “AAB267BF-EBF2-4649-822C-74511A4CC253”, mine is now “22F09329-25BC-4DE6-BBC8-E7E8BF0773F0”. Is this something derived via Intune on creation of the ADMX ingestion?

    Reply
  3. I am facing the same issue for “device compliance” @Billocker, Can you guide how we can fix this ?

    Settings : Require encryption of data storage on device.
    State : Error
    State details : -2016281112 (Remediation failed)
    Error Code : 0x87d1fde8
    Error Details : Remediation failed

    Reply

Leave a Comment