ConfigMgr / MECMdecimal -2016410847
Fix Intune Error 0x87D00321: The install did not finish inside the "Maximum allowed run time", so Configuration Manager timed it out and failed the deployment.
Open the log below first. It is the quickest way to confirm which of the causes applies before you change anything.
AppEnforce.log
Folder: C:\Windows\CCM\Logs\
Also check: execmgr.log · AppDiscovery.log
Root causes
- The configured maximum run time is shorter than the installer really needs.
- The installer is waiting on a hidden prompt, a locked file, or a user who is not there, so it never finishes.
- The maintenance window on the client is shorter than the app run time, so the install is cut off.
- A slow or throttled content download runs inside the allowed time.
Step-by-step remediation
- In AppEnforce.log find the line showing the command started and the later timeout. Compare the elapsed time with the configured limit.
- Run the install command as SYSTEM (psexec -s -i cmd) and time it. If it waits for input, fix the silent switches.
- Raise "Maximum allowed run time (minutes)" on the deployment type to a realistic value, and keep it below the maintenance window length.
- Check the client maintenance windows are long enough, and that the client received the policy.
- Redeploy to a pilot device and confirm the exit code is returned before the limit.
For the full diagnosis around this error, read ConfigMgr app failing: content or detection?.
Keep patching failures out of the queue
Repeat update and client failures are cheaper to prevent than to chase. Compare the options that take app packaging and upkeep off your task list, from Enterprise App Management to PSADT.
Compare Win32 packaging toolsRelated Error Codes in This Category
Other ConfigMgr / MECM errors with their own runbooks.
- 0x87D00607The client could not find the application content on any distribution point it can reach (content not found).
- 0x8004100EA WMI namespace the client needs is missing (WBEM_E_INVALID_NAMESPACE), typically root\ccm, so the ConfigMgr client is broken.
- 0x87D00692A higher authority, normally a domain Group Policy, overrides the Windows Update settings ConfigMgr tries to apply, so software update scans fail.