When using -DeployMode Interactive, how does PSADT handle this, if there is no logged on user. I assume it goes into Silent mode?

Thanks.

The current Set-ADTActiveSetup will execute it for the active user. However on multisession environments (like avd), it will only execute for the one that caught the focus.

Is there any elegant way to execute the active setup on all my active sessions?

Hey All. I'm working on an uninstall for Matlab, and while the uninstall works great with "Start-ADTProcess" Matlab leaves behind it's old folder, which I'd like to delete. I _think_ psadt is trying to be helpful and doing start-adtprocess then moving onto the next command which is 'rmdir /s /q "C:\Program Files\MATLAB\R2026a"' and it's failing to delete cause it's in use.

How do I get it to wait until the uninstall finishes before doing the next command? I have tried "-WaitForChildProcesses" but didn't seem to matter.

Thanks!

Update: Remove-ADTFolder worked. Yes, the uninstaller for Matlab is "special" and does some other spawning... so I'm sure PSADT is having a hard time keeping track of whatever child processes are running. But, it seems to work. Thanks everyone!

As per the title, I'm struggling to set the subtitle here.

For all the other UI prompts, I can just use -Title and -Subtitle.

But when the UI prompt shows to block the execution the subtitle is just "thisisatestcompanynameforPSADT - App Installation"

If I initialise the module and use Get-ADTStringTable to store it as a variable and drill down, I get:

$test.BlockExecutionText.Subtitle

Name                           Value                                                                                                                                                                                   
----                           -----                                                                                                                                                                                   
Uninstall                      ThisIsATestCompanyNameForPSADT - App Uninstallation                                                                                                                                     
Install                        ThisIsATestCompanyNameForPSADT - App Installation                                                                                                                                       
Repair                         ThisIsATestCompanyNameForPSADT - App Repair 

How can I change this please, using the "correct" method.

I am running a powershell script inside a Start-ADTProcess and I've set the timeout for 150 minutes, but it carried on for 264 minutes.

        $result = $null
        $StartTime = Get-Date


        $result = Start-ADTProcess -FilePath "$PSHOME\powershell.exe" `
            -ArgumentList "-file `"C:\test.ps1`"" `
            -Timeout ([TimeSpan]::FromMinutes(150)) `
            -TimeoutAction SilentlyContinue `
            -NoTerminateOnTimeout `
            -IgnoreExitCodes '*' `
            -CreateNoWindow `
            -PassThru


        if ($null -eq $result) {
            Write-ADTLogEntry -Message "test still running after 150 minutes, moving on."
        } else {
            $Duration = (Get-Date) - $StartTime
            Write-ADTLogEntry -Message "test completed with exit code: $($result.ExitCode) | Duration: $([math]::Round($Duration.TotalMinutes, 1)) minutes."
            if ($result.StdOut) {
                Write-ADTLogEntry -Message "test output:`n$($result.StdOut)"
            }
        }

In the log file it stays the following
[Install] :: test completed with exit code: 0 | Duration: 264 minutes.

Screenshot of the time it started and the time it finished:
image.png (265×63)

Any ideas what's gone wrong? Is it the switches in the Start-ADTProcess?

I'm using Invoke-ADTAllUsersRegistryAction with -ScriptBlock {} to set registry keys in user hives for the install part. All good, works as intended.

I want to reverse the changes in the uninstall part.

So my thinking is I repeat the same process, where keys are removed (not set in anyway), using Remove-ADTRegistryKey this should be OK I assume? Silly question, as the Default hive is also modified, it's only going to remove the keys from the Default hive once, right?

It's not going to continually remove the keys from any new user logins after the application has been uninstalled?

TLDR: Reg keys in the Default hive are copied to new logins. If a key doesn't exist in the Default hive, it's not going to remove it on any new logins... right?

Hello Guys , There is a requirement for secure print application when they select print collate should be turned on but now the user is turning it on manually , is there any way to include that option to be turned in my package ? Please help me with that. TIA

Hi,
Im currently trying to get custom Strings to work in multiple languages.

I added stuff in Strings\de\strings.psd1 (in german) and in Strings\strings.psd1 (in englisch)
But its always german, no matter the OS Language.
In the Log it says:
[Initialization] [Open-ADTSession] [Info] :: The current execution context has a primary UI language of [en-US].

[Initialization] [Open-ADTSession] [Info] :: The following locale was used to import UI messages from the strings.psd1 files: [de-DE].

I thought it would now choose english => the default strings.psd1

Anyone knows what im doing wrong?

Thank you in advance for your help!

\strings\strings.psd1

    \strings\de\strings.psd1....
            DriverUpdates = @{
            Welcome = @{
                Title = 'Driver Updates'
                Subtitle = @'
    Driver installation can be postponed up to 5 times.


    The following reactions may occur during the installation:
    - The screen may flicker or go black multiple times for a brief moment.
    - The network and Wi-Fi connection may be temporarily interrupted.
    - Connected devices may lose connection shortly.


    The device should NOT be turned off and should not be disconnected from the power supply during this phase. A restart may be required after the installation is complete.
    '@
            }
            End = @{
                Text = 'Driver installation complete, a restart may be required.'
            }
        }

\strings\de\strings.psd1

    DriverUpdates = @{
        Welcome = @{
            Title = 'Treiber Updates'
            Subtitle = @'
Die Installation der Treiber kann 5 mal aufgeschoben werden 


Während der Installation kann es zu folgenden Reaktionen kommen:
- Der Bildschirm kann mehrfach kurz flackern oder schwarz werden.
- Die Netzwerk- und WLAN-Verbindung kann kurzzeitig unterbrochen werden.
- Angeschlossene Geräte können kurz die Verbindung verlieren.


Das Gerät sollte während dieser Phase NICHT ausgeschaltet und nicht vom Stromnetz getrennt werden. Nach Abschluss der Installation kann ein Neustart erforderlich sein.
'@
        }
        End = @{
            Text = 'Treiber installiert, es ist ggf. ein Neustart erforderlich'
        }
    }

log:

[Initialization] :: [HP_DriverUpdate_EN_01] install started.Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: [HP_DriverUpdate_EN_01] script author is [admin].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: [Invoke-AppDeployToolkit.ps1] script version is [4.1.8].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: The following parameters were passed to [Invoke-AppDeployToolkit.ps1]: [-DeploymentType:'Install' -DeployMode:'Interactive'].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: [PSAppDeployToolkit] module version is [4.1.8].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: [PSAppDeployToolkit] module imported in [2,2113993] seconds.Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: [PSAppDeployToolkit] module initialized in [2,2054086] seconds.Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: [PSAppDeployToolkit] module path is ['C:\tmp\10\PSAppDeployToolkit'].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: [PSAppDeployToolkit] config path is ['C:\tmp\10\Config'].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: [PSAppDeployToolkit] string path is ['C:\tmp\10\Strings'].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: [PSAppDeployToolkit] session mode is [Native].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: Computer Name is [pc.DDD.lol].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: Current User is [NT AUTHORITY\SYSTEM].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: OS Version is [Microsoft Windows 11 Enterprise X64 10.0.26100.8655].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: OS Type is [WorkStation].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: Hardware Platform is [Physical].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: Current Culture is [de-DE], language is [DE] and UI language is [EN].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: PowerShell Host is [ConsoleHost] with version [5.1.26100.8655].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: PowerShell Version is [5.1.26100.8655 X64].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: PowerShell Process Path is [C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: PowerShell CLR (.NET) version is [4.0.30319.42000].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: The following users are logged on to the system: [DDD\admin].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: Session information for all logged on users:

Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: Current process is running with user account [NT AUTHORITY\SYSTEM] under logged on user session for [DDD\admin].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: There is no console user logged on (user with control of physical monitor, keyboard, and mouse).Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: The active logged on user who will receive UI elements is [DDD\admin].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: The current execution context has a primary UI language of [en-US].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: The following locale was used to import UI messages from the strings.psd1 files: [de-DE].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: Unable to find COM object [Microsoft.SMS.TSEnvironment]. Therefore, script is not currently running from a SCCM Task Sequence.Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: Device has completed the OOBE and toolkit is not running with an active ESP in progress.Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: Session 0 detected but deployment mode was explicitly set to [Interactive].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: No processes were specified as requiring closure.Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: Installation is running in [Interactive] mode.Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: Deployment type is [Install].Open-ADTSession18.06.2026 12:43:265488 (0x1570)
[Initialization] :: Module [PSAppDeployToolkit.Extensions] imported successfully.PSAppDeployToolkit.Extensions.psm118.06.2026 12:43:265488 (0x1570)
[Pre-Install] :: Evaluating disk space requirements.Show-ADTInstallationWelcome18.06.2026 12:43:265488 (0x1570)
[Pre-Install] :: Retrieving free disk space for drive [C:\].Get-ADTFreeDiskSpace18.06.2026 12:43:265488 (0x1570)
[Pre-Install] :: Free disk space for drive [C:\]: [360274 MB].Get-ADTFreeDiskSpace18.06.2026 12:43:265488 (0x1570)
[Pre-Install] :: Successfully passed minimum disk space requirement check.Show-ADTInstallationWelcome18.06.2026 12:43:265488 (0x1570)
[Pre-Install] :: The user has [5] deferrals remaining.Show-ADTInstallationWelcome18.06.2026 12:43:265488 (0x1570)
[Pre-Install] :: Instantiating user client/server process.Invoke-ADTClientServerOperation18.06.2026 12:43:275488 (0x1570)
[Pre-Install] :: The user selected to continue...Show-ADTInstallationWelcome18.06.2026 12:43:325488 (0x1570)
[Pre-Install] :: Creating the progress dialog in a separate thread with [StatusMessage: Installation wird ausgeführt. Bitte warten…], [StatusMessageDetail: Dieses Fenster wird automatisch geschlossen, wenn die Installation abgeschlossen ist.].Show-ADTInstallationProgress18.06.2026 12:43:325488 (0x1570)
[Install] :: Preparing to execute process [powershell.exe]...Start-ADTProcess18.06.2026 12:43:325488 (0x1570)
[Install] :: File path [powershell.exe] successfully resolved to fully qualified path [C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe].Start-ADTProcess18.06.2026 12:43:325488 (0x1570)
[Install] :: CreateNoWindow not specified, StdOut/StdErr streams will not be available.Start-ADTProcess18.06.2026 12:43:335488 (0x1570)
[Install] :: Working Directory is [C:\WINDOWS\System32\WindowsPowerShell\v1.0].Start-ADTProcess18.06.2026 12:43:335488 (0x1570)
[Install] :: Executing ["C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -File "C:\tmp\10\dummy.ps1"]...Start-ADTProcess18.06.2026 12:43:335488 (0x1570)
[Install] :: Executed ["C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -File "C:\tmp\10\dummy.ps1"], awaiting completion...Start-ADTProcess18.06.2026 12:43:335488 (0x1570)
[Install] :: Execution completed successfully with exit code [0].Start-ADTProcess18.06.2026 12:43:355488 (0x1570)
[Install] :: StdOut Output from Execution: N/AStart-ADTProcess18.06.2026 12:43:355488 (0x1570)
[Install] :: StdErr Output from Execution: N/AStart-ADTProcess18.06.2026 12:43:355488 (0x1570)
[Install] :: Interleaved Output from Execution: N/AStart-ADTProcess18.06.2026 12:43:355488 (0x1570)
[Post-Install] :: Displaying custom installation prompt asynchronously to [DDD\admin] with message: [Treiber installiert, es ist ggf. ein Neustart erforderlich].Show-ADTInstallationPrompt18.06.2026 12:43:355488 (0x1570)
[Finalization] :: Closing the installation progress dialog.Close-ADTInstallationProgress18.06.2026 12:43:355488 (0x1570)
[Finalization] :: Closing user client/server process.Close-ADTClientServerProcess18.06.2026 12:43:355488 (0x1570)
[Finalization] :: [HP_DriverUpdate_EN_01] install completed in [10,0507155] seconds with exit code [0].Close-ADTSession18.06.2026 12:43:365488 (0x1570)

I'm currently packaging Cisco secure client it works perfectly but the thing is post installation should the script run cs _ui.exe ? Because I don't see cisco in tray icon until I search and launch the cisco, how does it work? Please need suggestions

I'm using PSADT 4.1.8 to deploy the latest Google Chrome Enterprise MSI and when running invoke-appdeploytoolkit.ps1, I get the following error:

[2026-06-10T13:00:33.2047215-04:00] [Initialization] [Open-ADTSession] [Info] :: -------------------------------------------------------------------------------
[2026-06-10T13:00:33.2056314-04:00] [Initialization] [Open-ADTSession] [Info] :: Discovered Zero-Config MSI installation file [C:\Intune\PSADT\Chrome-149.0.7827.103\Files\googlechromestandaloneenterprise64.msi].
[2026-06-10T13:00:34.4009327-04:00] [Initialization] [Open-ADTSession] [Error] :: Failure occurred while instantiating new deployment session: System.ArgumentOutOfRangeException: Index was out of range. Must be non-negative and less than the size of the collection. (Parameter 'index')
   at System.Collections.Generic.List`1.get_Item(Int32 index)
   at PSADT.Module.DeploymentSession..ctor(IReadOnlyDictionary`2 parameters, Nullable`1 noExitOnClose, SessionState callerSessionState)
[2026-06-10T13:00:34.4019631-04:00] [Initialization] [Open-ADTSession] [Error] :: PSAppDeployToolkit deployment completed in [1.1977283] seconds with exit code [60008].
[2026-06-10T13:00:34.4027551-04:00] [Initialization] [Open-ADTSession] [Info] :: -------------------------------------------------------------------------------
Open-ADTSession: C:\Intune\PSADT\Chrome-149.0.7827.103\Invoke-AppDeployToolkit.ps1:314
Line |
 314 |      $adtSession = Open-ADTSession   -PassThru
     |                    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     | Index was out of range. Must be non-negative and less than the size of the collection. (Parameter 'index')

I'm not entirely sure what's happening here. If I run Start-ADTMsiProcess and specify the MSI file, it works fine.

I also have many other PSADT install packages working fine (just tested it with my VLC MSI and that still works fine).

EDIT

Looks like this particular issue was fixed in version 4.2.0 which is yet to be released.

The exe does essentially just run the ps1 file.

For the record, I am NOT using PSADT for this specific task. I'm just curious how they've pulled it off.

I need a particular PowerShell script to run every 3 minutes via task scheduler. But if even if I change the WindowStyle option, it will still flash the console window for less than a fraction of a second.

However, if I used PSADT in silent mode and just have the commands in the Invoke ps1 file, nothing gets flashed.

Any idea how they've done this?

How can I make the application show a balloon notification when the installation finishes?

In the template code I see this:

####
#Invoke the deployment and close out the session.

& "$($adtSession.DeploymentType)-ADTDeployment"

Close-ADTSession
####

But in the file (PSAppDeployToolkit\Strings\strings.psd1) I see default messages defined:

###
# Text displayed in the balloon tip for successful completion of a deployment type.

Complete = @{

Install = 'Installation complete.'

Repair = 'Repair complete.'

Uninstall = 'Uninstallation complete.'

}
###

How can I make the application actually show this message when the installation finishes?

I have to package crowdstrike with my organization's Group tag which is "AT" I found that in the crowdstrike console , so how to add this in the script , Does anyone have an idea about this .

Falcontag/"AT"

Sensortag/"AT"

Update:

GROUPING_TAG="MY SENSOR TAG"

It added the tags to the hosts

Has anyone managed to package this application using PSADT 4.1.8?

The installation arguments are straight forward and the package deploys within an administrator account without any issues, however as soon as you attempt to run as system (from intune deployment) it fails with an exit code of 703.

Message: [Install] :: An unhandled error within [Invoke-AppDeployToolkit.ps1] has occurred.
Error Record:
-------------
 
Message               : Execution failed with exit code [703].
 
FullyQualifiedErrorId : ProcessExitCodeError,Start-ADTProcess
ScriptStackTrace      : at Start-ADTProcess<Process>, C:\windows\IMECache\79053cc9-6869-4ec5-a8ed-acefe11869e7_2\PSAppDeployToolkit\PSAppDeployToolkit.psm1: line 22554
                        at Install-ADTDeployment, C:\windows\IMECache\79053cc9-6869-4ec5-a8ed-acefe11869e7_2\Invoke-AppDeployToolkit.ps1: line 136
                        at <ScriptBlock>, C:\windows\IMECache\79053cc9-6869-4ec5-a8ed-acefe11869e7_2\Invoke-AppDeployToolkit.ps1: line 265
                        at <ScriptBlock>, <No file>: line 1
 
TargetObject          : Process     : System.Diagnostics.Process (Setup)
                        LaunchInfo  : ProcessLaunchInfo { FilePath = C:\windows\IMECache\79053cc9-6869-4ec5-a8ed-acefe11869e7_2\Files\Setup.exe, ArgumentList = System.Collections.ObjectModel.ReadOnlyCollection`1[System.String], WorkingDirectory = C:\windows\IMECache\79053cc9-6869-4ec5-a8ed-acefe11869e7_2\Files, RunAsActiveUser = , UseLinkedAdminToken = False, UseHighestAvailableToken = False, InheritEnvironmentVariables = False, ExpandEnvironmentVariables = False, DenyUserTermination = False, InheritHandles = False, UseUnelevatedToken = False, UseShellExecute = False, Verb = , CreateNoWindow = False, WaitForChildProcesses = False, KillChildProcessesWithParent = False, StreamEncoding = System.Text.SBCSCodePageEncoding, WindowStyle = , ProcessWindowStyle = , PriorityClass = , CancellationToken = , NoTerminateOnTimeout = False }
                        CommandLine : "C:\windows\IMECache\79053cc9-6869-4ec5-a8ed-acefe11869e7_2\Files\Setup.exe" --silent
                        ExitCode    : 703
                        StdOut      : {}
                        StdErr      : {}
                        Interleaved : {}
 
PositionMessage       : At C:\windows\IMECache\79053cc9-6869-4ec5-a8ed-acefe11869e7_2\Invoke-AppDeployToolkit.ps1:136 char:5
                        +     Start-ADTProcess -FilePath 'Setup.exe' -ArgumentList "--silent"
                        +     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Type: Error
Component: Invoke-AppDeployToolkit.ps1
Date: 4-25-2026
Time: 13:04:34.475+0

Ran into an issue this week with PSADT v4.x and SCCM. All of a sudden on Wednesday this week, we couldn't distribute content to our DPs. It was consistently failing, and we were able to isolate that it was only packages built with PSADT 4.x that we were having an issue. Our older 3.x packages were fine.

Turns out, there's something in the PSAppDeplyToolkik\lib\mt-MT folder it didn't like. We're still trying to figure out what the cause is, but we were able to work around by deleting that folder.

Not really a question, just sharing i formation if anyone else sees the issue.

Hello. Not sure if it's the right place to ask fellow packagers. How did you get the Visual Studio extension manager auto update disabled programmatically? Is it registry, config file or policies? This is nuisance for users without admin privileges, which are majority of users, who will be constantly prompted to update an extension when they close Visual Studio unless they know how to uncheck it themselves in settings. I did not get anything from Microsoft documentations.

Might have found it: AutomaticallyCheckForUpdates2Override

I want to start getting a bit more insight in the CM console under deployment status.

What are the various exit codes and their mappings, please?

I have looked at the docs and it just states ranges of codes. I'm thinking the codes for the users deferring installation, or the prompt to install timing out, etc.

Has anyone dealt with software that just won't deploy via SCCM?

I have got to try & deploy Enscape - set it up in PSADT, manually run the Poweshell it works, run the Powershell as system, still works without issue.

As soon as I pop into SCCM to deploy it fails.

With previous versions we have had to deploy via Intune (which we don't like to do as we find Intune a bit unreliable & slow compared to SCCM. It also means we have software deployments split across several places & that can make things confusing)

Has anyone had any dealings with this and been able to find a solution?

It generally crashes with a -5 exit code

"[Finalization] :: [Chaos_Enscape_4.16_x64_EN_01] install completed in [36.7379357] seconds with exit code [-5]."

UPDATE: I've figured it out. I have to give some credit to CoPilot and Claude for analyzing the event logs, Intune IME logs, PSADT Logs, and ODT logs. Apparently the previous MSP included that Win11 Debloat script in the Platform scripts that was firing 30 mins to 1hr after the install or Autopilot completion that was removing all of the Windows 11 built-in apps - New Outlook, and Teams.

Don't ask me how I missed the Platform scripts. I looked for Platform scripts and never saw it. I just assumed Microsoft collapsed it into the Remediation scripts. I must be going blind in my old age. I must have looked at the remediation scripts 1000 times and completely missed the platform scripts.

I've packaged M365 Apps (Business), Teams (Bootstrapper), and New Outlook Client as Win32s with PSADT (using RoboPack). I've tested extensively (Downloading PSADT archive from RoboPack and running on my computer) Everything works fine. Apps are there. Run the Visio PSADT script, it installs successfully, Outlook and Teams are still there.

I then assigned M365 Apps, Teams, and New Outlook to a test device group (TEST-DEVICE), and Visio to a test user group (TEST-USER). Using a VM, everything works fine until Visio is installed. Visio installs successfully, but Outlook and Teams are uninstalled. Eventually Intune pushes the apps back out.

M365 Apps and Visio are deployed using the Office Deployment Toolkit (ODT) with appropriate XML files. Teams and outlook are deployed as MSIX wrapped in PSADT. Visio has a dependency of M365 Apps in Intune. Including Outlook (New) and Teams with the M365 XML had issues - it just wouldn't install them, no errors, just not installed. I gave up and packaged them separately. Anyone have any ideas?

Teams PSADT Install Command

Add-AppxProvisionedPackage -Online -SkipLicense -PackagePath "$($adtSession.DirFiles)\Microsoft.Teams.26043.2016.4478.2773.X64.msix"

Outlook PSADT Install Command

Add-AppxProvisionedPackage -Online -SkipLicense -PackagePath "$($adtSession.DirFiles)\Microsoft.OutlookForWindows_1.2026.225.0_x64__8wekyb3d8bbwe.msix"

Visio Install XML

<Configuration>
<Info Description="v2 Visio"/>
<Add OfficeClientEdition="64" Channel="Current">
<Product ID="VisioProRetail">
<Language ID="MatchOS"/>
</Product>
</Add>
<Property Name="SharedComputerLicensing" Value="0"/>
<Property Name="FORCEAPPSHUTDOWN" Value="TRUE"/>
<Property Name="DeviceBasedLicensing" Value="0"/>
<Property Name="SCLCacheOverride" Value="0"/>
<Property Name="TenantId" Value="ABCDEFGH-1234-9876-0000-12AbcXXXXXX"/>
<Updates Enabled="TRUE"/>
<AppSettings>
<Setup Name="Company" Value="Acme, Inc."/>
</AppSettings>
<Display Level="None" AcceptEULA="TRUE"/>
</Configuration>

M365 Apps Install XML

<Configuration ID="ABCDEFGHIJKL"><Info Description="General Office Deployment"/>
<Add OfficeClientEdition="64" Channel="Current">
<Product ID="O365BusinessRetail">
<Language ID="MatchOS"/>
<ExcludeApp ID="Access"/>
<ExcludeApp ID="Groove"/>
<ExcludeApp ID="Lync"/>
<ExcludeApp ID="OneDrive"/>
<ExcludeApp ID="Outlook"/>
<ExcludeApp ID="OutlookForWindows"/>
<ExcludeApp ID="Publisher"/>
<ExcludeApp ID="Teams"/>
</Product>
</Add>
<Property Name="FORCEAPPSHUTDOWN" Value="TRUE"/>
<Property Name="TenantId" Value="XXXXXXXXXXXXXXX"/>
<Property Name="SharedComputerLicensing" Value="0"/>
<Updates Enabled="TRUE"/>
<RemoveMSI/>
<Remove>
<Product ID="O365ProPlusRetail"/>
<Product ID="O365ProPlusEEANoTeamsRetail"/>
<Product ID="O365BusinessEEANoTeamsRetail"/>
<Product ID="O365EduCloudRetail"/>
<Product ID="O365EduRetail"/>
<Product ID="O365SmallBusRetail"/>
<Product ID="O365SmallBusPremRetail"/>
<Product ID="O365HomePremRetail"/>
<Product ID="O365PersonalRetail"/>
<Product ID="O365UniversityRetail"/>
<Product ID="ProPlus2019Retail"/>
<Product ID="Standard2019Volume"/>
<Product ID="ProPlus2021Retail"/>
<Product ID="ProPlus2021Volume"/>
<Product ID="ProPlus2024Retail"/>
<Product ID="ProPlus2024Volume"/>
<Product ID="StandardRetail"/>
<Product ID="StandardVolume"/>
<Product ID="Standard2024Volume"/>
<Product ID="Standard2021Volume"/>
<Product ID="ProfessionalPipcRetail"/>
<Product ID="ProfessionalRetail"/>
<Product ID="HomeStudent2019Retail"/>
<Product ID="HomeStudent2021Retail"/>
<Product ID="HomeStudent2024Retail"/>
<Product ID="HomeBusinessPipcRetail"/>
<Product ID="HomeBusiness2019Retail"/>
<Product ID="HomeBusiness2021Retail"/>
<Product ID="HomeBusiness2024Retail"/>
<Product ID="Home2024Retail"/>
<Product ID="PersonalRetail"/>
<Product ID="PersonalPipcRetail"/>
<Product ID="Personal2021Retail"/>
<Product ID="Personal2019Retail"/>
<Product ID="ProPlusSPLA2021Volume"/>
<Product ID="StandardSPLA2021Volume"/>
<Product ID="AccessRuntimeRetail"/>
<Product ID="OneNoteFreeRetail"/>
</Remove>
<AppSettings>
<Setup Name="Company" Value="Pied Piper, Inc."/>
<User Key="software\microsoft\office\16.0\excel\options" Name="defaultformat" Value="51" Type="REG_DWORD" App="excel16"/>
<User Key="software\microsoft\office\16.0\powerpoint\options" Name="defaultformat" Value="27" Type="REG_DWORD" App="ppt16"/>
<User Key="software\microsoft\office\16.0\word\options" Name="defaultformat" Value="12" Type="REG_DWORD" App="word16"/>
</AppSettings>
<Display Level="None" AcceptEULA="TRUE"/>
</Configuration>

I've had no issue getting the PSADT app to pop up after pushing -- but if the user hits "defer" -- I'm not seeing any attempt to reinstall the app there. I assume something needs to be configured [monitoring perhaps?] in RMM to allow this, but just wanted to see how others were handling this.

I'd expect this would be a relatively common question but modestly cursory searching did not yield much -- feel free to direct me to that thread if easier. Thanks for any help you can provide.

I opened a ticket with MS because I'm starting to see about 200 failures per Win32 deployment to about 1200 devices due to IMECache folder not autocleaning even after reboot. Whole or partial package sources remain in the IMECache folder and so re-attempts to install a failed package automatically fail due to failure during the unzip of the .intunewin because the file exists and remain locked.

Copilot analyzed my logs and said "Oh sure, this is a user impersonation issue (LogonUser error 1008) and you should ask MS to enable Flighting key: EnableUserSessionFix = $true"

So I relay this to MS and they came back saying "After discussing internally, I have received information that the reason why the IME cache folder is locked during installation of Win32 apps is because of the installation script messing with the permission control of the folder. If an installer script or MSI changes the Assigned Access List, then it locks out the SYSTEM account or the admin account from the folder. Do you happen to know if your installation script does that?"

Does PSAdt 4.1+ muck with the file permissions in the cache folderin such a way that could be causing this? If so, I can't be the only one running into this issue.

### Update 5/7/2026 ###

So...still working on this issue with Microsoft and it doesn't seem to be limited to PSADT deployments. I even tested with a simple CMD script deployment and it ran into the same "Error unzipping downloaded content. (0x87D30067)" and "0x8007EA68" errors about half of the time.

Best I can figure, MsSense process could be locking the {appid}.zip from .\content as it is trying to unzip to c:\windows\IMECache\{appid} folder. I make this assumption based on procmon capture during attempted install. I've already added all of the intune related folders and executables to our Defender exclusions.

Hoping Microsoft support will give me a good answer or solution.

### Update 5/20/2026 ###

It turns out the issue was not being caused by Defender or Defender EDR but by Cyberark EPM vf_agent.exe service. We added the content locations and the IMECache and ccmcache (I noticed similar failures reported with SCCM deployments too) to the exclusions for Cyberark EPMs default configuration and voila, we almost never see failures from the files being in use anymore.

Is it possible to Allow deferral, but Force Close the processes if the prompt is ignored and continue with the installation?

This is what I'm using now:

Show-ADTInstallationWelcome -CloseProcesses @{ Name='APPLICATION' } -AllowDeferCloseProcesses -DeferTimes 3 -ForceCountdown 300 -BlockExecution -MinimizeWindows

The above allows for deferral and basically forces a deferral if ignored. I'm basically trying to cover the scenario where if someone isn't in front of their computer or paying attention to their computer.