MD-102 Manage applications Practice Question
A user reports that a Microsoft 365 Apps for enterprise installation failed on their Windows 11 device managed by Intune. The Intune management extension logs show error code 0x80070005. The device is Microsoft Entra ID joined and compliant. What is the most likely cause?
⚠ Common exam trap
Watch out — candidates often confuse a compliance-related conditional access block (which would occur at sign-in) with a local installation permission error, overlooking that 0x80070005 specifically indicates an access-denied condition at the OS level, not a network or policy issue.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The user does not have local administrator privileges on the device
Error code 0x80070005 translates to 'Access Denied' (E_ACCESSDENIED). Microsoft 365 Apps for enterprise installation requires local administrator privileges to write to protected system paths (e.g., Program Files, registry). Since the device is Microsoft Entra ID joined and compliant, the most likely cause is that the user lacks local admin rights, which is a common Intune deployment prerequisite.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The user does not have local administrator privileges on the device
Why this is correct
Error 0x80070005 is Access Denied, which for Microsoft 365 Apps deployment via the Intune management extension typically reflects insufficient rights to write to protected locations. Because the app requires elevation and the user lacks local administrator privileges, the installation cannot complete.
- ✗
The device has insufficient disk space
Why it's wrong here
Insufficient disk space produces a disk-full or 0x80070070-style error, whereas 0x80070005 is access denied. It is tempting because storage exhaustion genuinely blocks Microsoft 365 Apps installation, but the logged code points to a permissions or context problem instead.
- ✗
The device does not have internet connectivity to the Microsoft CDN
Why it's wrong here
0x80070005 is access denied, not a network or download failure; CDN reachability would surface as a timeout or 0x80072ee2-style error. It is tempting because content download failures do occur during Intune Win32 app deployment, but connectivity is not what this code indicates.
- ✗
The device is not compliant with the conditional access policy
Why it's wrong here
The stem states the device is compliant, so conditional access is already satisfied; 0x80070005 is access denied, not a compliance block. It is tempting because non-compliance does halt Intune deployments, but that would appear as a distinct compliance error, not this code.
Go deeper
Related to this question
Learn chapter
Planning Deployment and Architecture
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
About these practice questions
This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.