CopyAccountCert: failed hr 0x80070005 During Intune Install

 

Very recently my colleague Nick Moseley over at www.t3chn1ck.com encountered the following error during the installation of Intune on a Windows 7 workstation.

Process: C:\Users\<username>\Desktop\Microsoft_Intune_Setup.exe
CopyAccountCertificate(): Attempting to copy account certificate from C:\Users\<username>\Desktop\MicrosoftIntune.AccountCert
FATAL: CopyAccountCert: failed hr 0x80070005

We weren’t able to find many leads on the error for Intune, but I was able to find a related error related to Windows Updates https://support.microsoft.com/kb/968003. We were logged in as an Administrator, so we could nix that issue. While not directly applicable to Intune, it did point us in the direction of checking the Access Control Lists (ACL). During our testing, were able to confirm that creating a new users on the system and installing from that account resolved the issue.

Root cause: Windows ACLs were corrupted

Fix: Rebuild user account or if you cannot do that, use the following the steps:

  1. Download the SubInACL tool and install it in the %windir%\system32 folder. The %windir% placeholder represents the Windows operating system folder. For example, C:\Windows.
  2. Start Notepad, and then copy and paste the following commands:

  3. Save the file as Reset.cmd.
  4. Right-click the Reset.cmd file in File Explorer (in Windows 8.1 and Windows 8) or Windows Explorer (in Windows 7 and Windows Vista), and then click Run as administrator. In Windows XP, double-click the file in Windows Explorer.
  5. Wait until the execution finishes, and then try to install the update again.

Note If you receive errors when you run SubInAcl, see the following Microsoft blog: Notes about a couple of possible issues while using the SubInAcl tool.