[Bug]: Intune Management Extension deleting symlinked wau-updates.log file

[extremelychilldude]

The problem

Hi friends,

When I tried to collect diagnostics from Intune, expecting the WAU updates log to be there, I noticed that the ProxyPoller service was cleaning up my symlinked log file!

Here is proof of that happening:

<![LOG[[Proxy Poller] The file WAU-updates.log is a symbolic link]LOG]!><time="09:37:34.3058617" date="7-31-2025" component="IntuneManagementExtension" context="" type="1" thread="5" file="">

<![LOG[[ProxyPoller](RemoveAllSymLinksInLogFolder) {"Message":"The file WAU-updates.log is a symbolic link.Deleted the file","Colmetadata":"","Col1":"","Col2":"","Col3":"","Col4":"","Col5":"","Col6":""}]LOG]!><time="09:37:34.3081489" date="7-31-2025" component="IntuneManagementExtension" context="" type="1" thread="5" file="">

<![LOG[[Proxy Poller] File deleted successfully]LOG]!><time="09:37:34.3091577" date="7-31-2025" component="IntuneManagementExtension" context="" type="1" thread="5" file="">

<![LOG[[Proxy Poller] DetectAllSymLinksInLogFolder complete]LOG]!><time="09:37:34.3091577" date="7-31-2025" component="IntuneManagementExtension" context="" type="1" thread="5" file="">

Is there a possible work around for this? Maybe just directly copying into the folder?

What version of WAU has the issue?

2.6.1

What version of Windows are you using (ex. Windows 11 22H2)?

Windows 11 Enterprise 10.0.26120

What version of winget are you using?

v1.26.430.0

Log information

PS C:\Program Files\Winget-AutoUpdate> winget --info
Windows Package Manager v1.11.430
Copyright (c) Microsoft Corporation. All rights reserved.

Windows: Windows.Desktop v10.0.26120.5722
System Architecture: X64
Package: Microsoft.DesktopAppInstaller v1.26.430.0

Winget Directories
------------------------------------------------------------------------------------------------------------------------------
Logs                               %LOCALAPPDATA%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\DiagOutputD…
User Settings                      %LOCALAPPDATA%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\settings.js…
Portable Links Directory (User)    %LOCALAPPDATA%\Microsoft\WinGet\Links
Portable Links Directory (Machine) C:\Program Files\WinGet\Links
Portable Package Root (User)       %LOCALAPPDATA%\Microsoft\WinGet\Packages
Portable Package Root              C:\Program Files\WinGet\Packages
Portable Package Root (x86)        C:\Program Files (x86)\WinGet\Packages
Installer Downloads                %USERPROFILE%\Downloads
Configuration Modules              %LOCALAPPDATA%\Microsoft\WinGet\Configuration\Modules

Links
---------------------------------------------------------------------------
Privacy Statement   https://aka.ms/winget-privacy
License Agreement   https://aka.ms/winget-license
Third Party Notices https://aka.ms/winget-3rdPartyNotice
Homepage            https://aka.ms/winget
Windows Store Terms https://www.microsoft.com/en-us/storedocs/terms-of-sale

Admin Setting                             State
--------------------------------------------------
LocalManifestFiles                        Disabled
BypassCertificatePinningForMicrosoftStore Disabled
InstallerHashOverride                     Disabled
LocalArchiveMalwareScanOverride           Disabled
ProxyCommandLineOptions                   Disabled
DefaultProxy                              Disabled

Additional information

No response

[KnifMelti]

#921

[KnifMelti]

You can always rename _WAU-mods-postsys-template.ps1 to _WAU-mods-postsys.ps1 and in that define what you want.

<# Mods for WAU (postsys) - if Network is active/any Winget is installed/running as SYSTEM after SYSTEM updates
Winget-Upgrade.ps1 calls this script with the code:
[Write-ToLog "Running Mods (postsys) for WAU..." "Yellow"
& "$Mods\_WAU-mods-postsys.ps1"]
Make sure your Functions have unique names!
#>

<# FUNCTIONS #>
. $PSScriptRoot\_Mods-Functions.ps1


<# ARRAYS/VARIABLES #>
# Example:
# Beginning of Desktop Link Name to Remove - optional wildcard (*) after, without .lnk, multiple: "lnk1","lnk2"
# The function Remove-ModsLnk returns the number of removed links.
# $Lnk = @("Acrobat Read*","Bitwarden","calibre*")


<# MAIN #>
# Example:
# if ($Lnk) {
#     $removedCount = Remove-ModsLnk $Lnk
#     Write-ToLog "-> Removed $($removedCount) Public Desktop Links!" "Green"
# }

Write-ToLog "-> ...Mods (postsys) for WAU has nothing more to do!" "Green"

[KnifMelti]

#1020 Removing the SymLink creation from WAU