Application intunewin files missing | Groups not getting created

[Tying3375]

Hello,

I have an issue when importing applications. I'm only getting the JSON and detection script from it but no intunewin file. The folder for packages is empty.

In the log I found an error: Failed to invoke MS Graph with URL https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/4bddcdf4-2e09-44e4-a23a-ecc39d9743c2/microsoft.graph.win32LobApp/contentVersions//files (Request ID: c6083d3d-2558-43af-b310-e137e4873665). Status code: BadRequest. Response message: . Response message: Invalid content version id: 'files'. - Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 - Activity ID: f7f42119-65f1-49f9-a528-82dff0e8cf63 - Url: https://fef.amsub0502.manage.microsoft.com/AppLifecycle_2507/StatelessAppMetadataFEService/deviceAppManagement/mobileApps('4bddcdf4-2e09-44e4-a23a-ecc39d9743c2')/microsoft.management.services.api.win32LobApp/contentVersions('files')?api-version=5025-03-28 Exception: The remote server returned an error: (400) Bad Request.

Here is a list of all of my permissions:

Another issue that I have is a group creation. I'm testing the script on a single tenant and when exporting it exports all the groups into Groups folder and creates a MigrationTable.json. But when I delete the group from my tenant and I try to import a policy that was assigned to that group it doesn't create a new one.

In the logs I found a warning: Could not find migration table.
In Intune it looks like it tried to assign a group but couldn't.

Export setting:

Import settings:

[Micke-K]

Hello,

Importing policies to the same tenant will not re-create any groups. Groups are only created with cross-tenant import. If you delete a group and reimport a policy with that group, it will keep the assignment but the guid will point to a group that does not exist.

This is expected behaviour.

There is a trick you can do if you really want to re-create the groups. You can change the tenant id in the Migration Table. It would then see it as two different tenants and should then re-create the group. This might re-create any other group as well. I would suggest cleaning up the exported folder and only have the json for the policy and the group (in the folders) + the migration file.

Cheers!

[Micke-K]

Regarding the intunwin files. It will import intunewin files if the original files are in the App Packages folder (In Settings) or the same folder as the json. Note: This must be the original .intunewin files.

You can save encryption files for .intune win files if the apps were imported by the the tool. You can also export the encryption info from existing file with the Export-ExcryptionKeys.ps1..

The script cannot export .intunwin files without the encryption files. This is not allowed by any API. The script can export .intunewin files if the encryption file is found in the App Download folder. This only works for the same file that was uploaded. It will not work if another version was uploaded. Note, the downloaded .intunewin fille cannot be reused as is. This is simply a zip file without the encryption info in it. The file must be renamed to .zip, extracted and then repackaged.

Cheers!