Use the following reports in the Microsoft Intune admin center to monitor and troubleshoot issues with enrollment restrictions and enrollment status page assignments:
Enrollment failures report
Troubleshooting + support page
Device enrollment page
This article describes each report and how to access them in the admin center.
Enrollment failures report
Use the enrollment failures report to view enrollment failures for all users or for select users. This report shows each failed enrollment attempt along with the date it occurred, reason for failure, OS, OS version, username, and enrollment method.
Use the enrollment failures report on the Troubleshooting + support page to view enrollment failures for a select user. This report shows every failed enrollment attempt the user encountered along with the date it occurred, reason for failure, OS, OS version, username, and enrollment method. You can also view other data about the user on this page, including all assignments, devices, and app protection statuses they're associated with.
In the admin center, go to Troubleshooting + support.
Search for the user by name or email address.
Select the Enrollment failures metric for more information about detected failures and recommended remediation steps.
Device enrollment page
The device enrollment page shows the enrollment policies (both enrollment restriction and enrollment status page policies) applied to a device when it was first enrolled in Microsoft Intune. Use this report to help pinpoint the source of the failure, such as an unexpected policy, target, or filter. Data is available for iOS/iPadOS, macOS, and Windows devices, and includes:
Profile name
User principal name
Profile type (either enrollment status page or device type enrollment restriction)
Priority
Target (either user or device)
Filters, with a link to the filter evaluation results (only available if the enrollment policy was assigned using an assignment filter)
Select an enrolled iOS/iPadOS, macOS, or Windows device.
From the Monitor options, select Enrollment.
Review the report data.
Note
Report data is only available for devices enrolled after the Microsoft Intune 2112 service release. No results are available for devices enrolled prior to that release.
Intune Enrollment Logs: Intune generates logs related to enrollment and device configuration. This log is located in the Event Viewer under the “Applications and Services LogsMicrosoftWindowsDeviceManagement-Enterprise-Diagnostics-Provider” folder.
Click on Access work or school and look for one of these: This means that your computer is joined to Azure AD and enrolled in Intune. Click on it, and then click on Info. Scroll down and look for "The sync was successful" in the Device sync status section.
Sign in to the Microsoft Intune admin center. Select Reports > Device compliance > Reports tab > Device compliance. Select the Compliance status, OS, and Ownership filters to refine your report. Select Generate report (or Generate again) to retrieve current data.
Microsoft Intune provides an 'Online reports' feature within the Intune console for accessing reports on device enrollments, app protection policies, compliance policies, and device configuration policies, although Microsoft Power BI can also be used for more advanced reporting by connecting to Intune data.
Intune log file location is C:\ProgramData\Microsoft\IntuneManagementExtension\Logs. For detailed debugging check IntuneManagementExtension. log. Search for package name / Application ID.
Click on the Start button in the bottom left corner of your screen and search for "cmd" or "command prompt". Start Command Prompt. Type "dsregcmd /status" in the command prompt and click enter. If it says AzureAdJoined:YES as shown in the picture above, then you have an Intune device.
The enrollment status page (ESP) displays the provisioning status to people enrolling Windows devices and signing in for the first time. You can configure the ESP to block device use until all required policies and applications are installed.
Your device enrolls in Microsoft Intune, a mobile device management provider, and registers with your organization. This step ensures that you're authorized to access your organization's email, apps, and Wi-Fi.
By default, a user can enroll up to 15 devices in Intune, but this limit can be adjusted as needed, ranging from 1 to 15, in the admin center. To set a device limit restriction, follow these steps: Sign in to the Microsoft Intune admin center. Navigate to Devices > Enrollment restrictions.
On the Create tab, in the Reports group, click Report. Access builds the report and displays it in Layout view. For more about viewing and printing your report, see the section View, print, or send your report as an e-mail message.
From these sources, Intune collects information that falls into the following two categories: required, optional. Each category is divided into customer data, personal data, diagnostic data, and service-generated data. We do not sell any data collected by our service to any third parties for any reason.
Go to the Microsoft Intune admin center.Navigate to Reports > Windows Autopatch > Windows quality updates.Select the Reports tab.Select Quality update status.
Microsoft Report Viewer is a software that enables applications that run on the Microsoft .NET Framework to display reports designed using the Microsoft reporting technology.
On your managed device, go to Settings > Accounts > Access work or school.Select your work or school account, then select Info.At the bottom of the Settings page, select Create report. A window opens that shows the path to the log files.
The first log file to investigate is the event log, on the target Windows device. To collect Event Viewer logs: Open Event Viewer. Navigate to Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostic-Provider > Admin.
You can find information about policies Intune is applying to the device at: HKLM\Software\Microsoft\PolicyManager\Providers. From there, you can find policies that are being applied using these keys: For device policies: HKLM\Software\Microsoft\PolicyManager\Providers\default\Device.
Introduction: My name is Nicola Considine CPA, I am a determined, witty, powerful, brainy, open, smiling, proud person who loves writing and wants to share my knowledge and understanding with you.
We notice you're using an ad blocker
Without advertising income, we can't keep making this site awesome for you.
