Hi All- we have been trying to get Cisco Secure Client VPN and Cisco Umbrella installed on Windows 11 devices for weeks. We followed the instructions in the Cisco documentation below, and they work beautifully on Windows 10 devices with no issues. However, the app install fails on all Windows 11 devices, throwing the 0x800700FF error code. At first, we thought it was the test device, but nope. We wiped it and installed fresh W11 Enterprise on the Surface Laptop. We created a Win32 app for each, with an OS version of W11 as the minimum. All other Win32 apps are installed without a problem, but this Cisco app drives us bonkers.
We have been working with Cisco on this, and they confirmed it works on their Windows 10 and 11 devices. They recently updated their instructions after we brought our issues up to them.
Even after all this, the app continues to fail during installation. We checked the logs and searched for that error code in the MDM Diagnostics and Intune Extention Logs, but still nothing.
Do you have any ideas? Should we now loop in Microsoft and deal with their amazing support? (Please no.)
Does this install work when using the same install command without intune on your Windows 11 devices?
We install the core vpn web deploy version with /qn switch using intune with no issues on Windows 11.
What does event viewer show? Windows Logs > Application. As you are running an msi you will have msi installer events showing install started, finished, and any errors etc. Unfortunately, Intune error codes are garbage, and you need the actual MSI return code 1603 for example.
Your command is the exact same as ours and ours deploy with 100% success… but we deploy version 5.1.4.74 and let it upgrade after. We have installation time required to 60 minutes, system install behavior and minimum operating as Windows 11, 21H2.
For the umbrella module, which is a separate “app” in Intune, everything’s the same except of course it’s the umbrella pre-deployment msi and the anyconnect VPN app is a dependency.
I assume you put the config profile in the Win32 bundle for Umbrella?
After struggling with a bunch of issues with LOB deployments during ESP, I’ve switched to packaging everything as Win32 and that has cleared up the reboot problems. We’re small enough that we can show people the company portal as well, so they can sort of pick and choose additional apps if they like.
I just noticed you said you’re deploying on a Surface Laptop… possibly dumb question but that is an Intel processor and not ARM, right? ARM has its own msi… emulation did not work in our case.
Thank you for your quick reply and support. Yes, it’s a Win32 app; we also did the Intel vs ARM; it’s an Intel MSI with an Intel surface. We have built the win32 and intune apps with three Cisco engineers on a Webex, and it’s still failing. They are scratching their heads, too. Ugh.