ServiceUI Error/Blocked?

[MattyD44]

Our test devices are failing to run the serviceui.exe element of the installation so no notifications are given to the users. I can't see that its being blocked by the tenant. Any ideas what the issue could be?

[Romanitho]

ServiceUI is not used to display notification, it's a user scheduled task.

[Romanitho]

I’ve never had any issues deploying our MSI through Intune.

[MattyD44]

I’ve never had any issues deploying our MSI through Intune.

Is the functionality likely to be affected by serviceui.exe being blocked? We have version 2.8.0.1980 deployed as a wrapped win32.

[KnifMelti]

This is how it runs, I'm not skilled enough to determine if it is affected or not (maybe you could delete ServiceUI.exe?) ...

#region CONTEXT
# Check if running account is system or interactive logon System(default) otherwise User
[bool]$Script:IsSystem = [System.Security.Principal.WindowsIdentity]::GetCurrent().IsSystem

# Check for current session ID (O = system without ServiceUI)
[Int32]$Script:SessionID = [System.Diagnostics.Process]::GetCurrentProcess().SessionId
#endregion CONTEXT

#region EXECUTION CONTEXT AND LOGGING
# Preparation to run in current context
if ($true -eq $IsSystem) {

    #If log file doesn't exist, force create it
    if (!(Test-Path -Path $LogFile)) {
        Write-ToLog "New log file created"
    }

    #Check if running with session ID 0
    if ($SessionID -eq 0) {
        #Check if ServiceUI exists
        [string]$ServiceUIexe = [System.IO.Path]::Combine($Script:WorkingDir, 'ServiceUI.exe')
        [bool]$IsServiceUI = Test-Path $ServiceUIexe -PathType Leaf
        if ($true -eq $IsServiceUI) {
            #Check if any connected user
            $explorerprocesses = @(Get-CimInstance -Query "SELECT * FROM Win32_Process WHERE Name='explorer.exe'" -ErrorAction SilentlyContinue)
            if ($explorerprocesses.Count -gt 0) {
                Write-ToLog "Rerun WAU in system context with ServiceUI"
                Start-Process `
                    -FilePath $ServiceUIexe `
                    -ArgumentList "-process:explorer.exe $env:windir\System32\conhost.exe --headless powershell.exe -NoProfile -ExecutionPolicy Bypass -File winget-upgrade.ps1" `
                    -WorkingDirectory $WorkingDir
                Wait-Process "ServiceUI" -ErrorAction SilentlyContinue
                Exit 0
            }
            else {
                Write-ToLog -LogMsg "CHECK FOR APP UPDATES (System context)" -IsHeader
            }
        }
        else {
            Write-ToLog -LogMsg "CHECK FOR APP UPDATES (System context - No ServiceUI)" -IsHeader
        }
    }
    else {
        Write-ToLog -LogMsg "CHECK FOR APP UPDATES (System context - Connected user)" -IsHeader
    }
}
else {
    Write-ToLog -LogMsg "CHECK FOR APP UPDATES (User context)" -IsHeader
}
#endregion EXECUTION CONTEXT AND LOGGING

[KnifMelti]

https://github.com/copilot/share/ca1e51b2-4800-8cb6-9913-9e0624a30055

[Romanitho]

serviceui.exe is called when run as system. If Servicui.exe is not detected, it is run without it. But if it is present but blocked, it will fail.