Intune – Win32 App Deployment failed with error code 0x80070643

The Win32 app in Microsoft Intune offers enhanced control over application deployment. However, deployment failures can occur, and understanding the troubleshooting steps for Intune Win32 apps is essential. One common issue is the error code 0x80070643, which indicates a fatal error during installation. This error can stem from various causes—some are easy to identify, while others require deeper investigation. In such cases, generating a verbose installation log becomes crucial to pinpoint the root cause. In this guide, we’ll explore the reasons behind error 0x80070643 and walk through effective strategies to resolve it.

TL;DR – Intune Win32 App Deployment Error 0x80070643

Deployment of Win32 apps via Microsoft Intune may fail with error 0x80070643, often due to issues with SYSTEM account permissions, MSI installation parameters, or missing dependencies. The blog walks through troubleshooting steps, including:

Using verbose logging (/L*v) to diagnose installation failures
Ensuring the SYSTEM account has access to the required files
Correcting MSI command-line syntax
Reviewing log files with tools like CMTrace

A real-world example involving WinZip deployment illustrates how improper access or command formatting can trigger this error. Fixing the root cause typically resolves the issue.

Issue – Error 0x80070643

The Win32 App deployment failed with the following error in Microsoft Intune.

Error code: 0x80070643 : Fatal error during installation

Suggested remediation: A Microsoft Windows Installer failure occurred. Enable Windows Installer verbose logging. Then retry the installation to capture the error details.

The deployment error can be checked from Microsoft Intune Admin Center > Apps > Windows Apps blade.

fatal error during installation (0x80070643)

Understanding Error 0x80070643: What Causes the Fatal Installation Failure

Error 0x80070643 is a generic error message, and finding the root cause of the issue is not straightforward. You may receive this error message under the following conditions:

The folder that you are trying to install the Windows Installer package to is encrypted.
The drive that contains the folder which you are trying to install the Windows Installer package to is accessed as a substitute drive.
The drive that contains the folder which you are trying to install the Windows Installer package to is a CD / DVD drive.
Windows Installer is attempting to install an app that is already installed on your PC.
The SYSTEM account does not have Full Control permissions on the folder that you are trying to install the Windows Installer package to. You notice the error message because the Windows Installer service uses the SYSTEM account to install software.
Unknown Cause: The Verbose logging can be used to capture detailed logs during installation. Reviewing these logs provides more information on why the installation failed.

Solution

To resolve the issue, you need to do any of the following, depending on the cause of the problem:

Install the package to a drive that is not a CD/DVD drive or not accessed as a substitute drive.
Install the package in a folder that is not encrypted.
Check if the app is already installed on the PC. If so, uninstall and reinstall the app.
Grant full control permission to the SYSTEM account on the target folder where you are trying to install the application.
Generate a verbose log to identify the possible issues. Continue below to learn about verbose logging.

Verbose Logging

Microsoft Installer handles the installation through MSIExec.exe. The logging option offered by this tool allows you to capture detailed information about the installation in a log file. The most used logging command line option is /L*V.

Here is a complete MSI command line. This command will create a log file App1.log in the provided path and capture detailed information about the installation in the logs. You can analyze the log file in Notepad or CMtrace to identify failure reasons.

msiexec /i <MSI PATH> /L*V <LOG FILE>

Open the command prompt
Run the below command from the command prompt

msiexec /i “C:\Temp\App1.msi” /L*V “C:\log\App1.log”

Troubleshooting scenarios

We have captured the details from different scenarios when encountering the fatal Error issue during the application installation.

The target folder was a CD/ DVD Drive

The Winzip installation failed with error 0x80070643. The command line below was used.

msiexec /i winzip260-64.msi /qn INSTALLDIR="D:\Program Files\WinZip26" ALLUSERS=1

By looking into IntuneManagementExtension.log, you can understand that the command line was trying to install the application in the D: drive and then failed with a 1603 error. We looked into the problematic computer and found that the Hard Disk had only one partition, and the D: drive letter was assigned to a CD / DVD drive, which was the reason behind the failure.

Subscribe to Techuisitive Newsletter

Be the first to know about our new blog posts. Get our newsletters directly in your inbox and stay up to date about Modern Desktop Management technologies & news.