Intune reports
64 reports belong to the Intune area. An API or MCP client sees them when it holds a grant for this area. Kind: a findings list rates each row by severity; a table lists objects. Data: Cached opens at once, On demand reads Microsoft 365 when first opened, Scan runs on request.
Intune
Section titled “Intune”| Report | The question it answers | Kind | Data |
|---|---|---|---|
| Device Encryption & TPM / Secure Boot Posture | Which managed devices are unencrypted, and which Windows devices lack TPM 2.0 or Secure Boot? | Table · dashboard tile | Cached |
| Devices Not Synced Recently | Which Intune devices have not synced for longer than the chosen number of days? | Table | Cached |
| Intune Compliance Posture | How compliant are the tenant’s Intune-managed devices, and which devices are not compliant? | Table | Cached |
| OS Version Spread & End-of-Support Exposure | How many managed devices run an operating system that no longer receives security updates, or will stop within six months? | Table · dashboard tile | Cached |
| TPM / Secure Boot Hardware Scan | Which TPM version and Secure Boot state does each managed Windows device report? | Table | Scan |
| Windows Patch Level | Which Windows devices are behind the newest monthly patch revision seen for their build in this fleet? | Table | Cached |
| Windows Update Compliance | Are the Windows Update rings set up so security updates actually land - no pause, a short deferral and an installation deadline? | Table | Cached |
Intune › Apps
Section titled “Intune › Apps”| Report | The question it answers | Kind | Data |
|---|---|---|---|
| All Intune Apps | Which apps are published in Intune, for which platform and of which type? | Table | Cached |
| All Intune Apps for Android | Which Android apps are published in Intune, and of which type? | Table | Cached |
| All Intune Apps for iOS | Which iOS and iPadOS apps are published in Intune, and of which type? | Table | Cached |
| All Intune Apps for Linux | Which Linux apps are published in Intune? | Table | Cached |
| All Intune Apps for MacOS | Which macOS apps are published in Intune, and of which type? | Table | Cached |
| All Intune Apps for Windows | Which Windows apps are published in Intune, and of which type? | Table | Cached |
Intune › Device Operations & Hardening
Section titled “Intune › Device Operations & Hardening”| Report | The question it answers | Kind | Data |
|---|---|---|---|
| Apple ADE Devices Never Enrolled | Which Apple devices from Apple Business Manager never enrolled in Intune, or have no enrolment profile? | Findings list · dashboard tile | On demand |
| Autopilot Deployment Time & Failures (30 days) | How long did Autopilot deployments take in the last 30 days, and which failed or timed out? | Findings list · dashboard tile | On demand |
| Compliance Policy Strength | Which compliance policies are too weak to trust - long grace periods, no password or encryption, no minimum OS? | Findings list · dashboard tile | On demand |
| Defender Antivirus & ASR Exclusions | Which Defender Antivirus and attack surface reduction exclusions are configured, and which are broad or risky? | Findings list · dashboard tile | On demand |
| Device Naming & Category Compliance | Which managed devices break the naming convention, and which have no device category or ownership? | Findings list · dashboard tile | On demand |
| Device Resource Pressure (CPU & Memory) | Which devices spend much of their time with CPU or memory saturated, and which models are most affected? | Findings list · dashboard tile | On demand |
| Endpoint Privilege Management Elevations (30 days) | Which apps did users run elevated through Endpoint Privilege Management in the last 30 days, and how often? | Findings list · dashboard tile | On demand |
| Endpoint Security Policy Posture | Are attack surface reduction rules enforced or only audited, are firewalls on, and are security baselines current? | Findings list · dashboard tile | On demand |
| Intune Assignment Hygiene | Which Intune profiles and apps apply to nobody because they are unassigned, target empty or deleted groups, or are only excluded? | Findings list · dashboard tile | On demand |
| Intune Connector & Integration Health | Are the Intune connectors and integrations - certificate connector, Mobile Threat Defence, Google Play, partner MDM, Autopilot sync - healthy? | Findings list · dashboard tile | On demand |
| Intune Device Certificates Expiring | Which SCEP and PKCS certificates issued through Intune expire soon or have already expired? | Findings list · dashboard tile | Scan |
| Intune Multi Admin Approval Coverage | Which high-impact Intune actions are protected by multi admin approval, and which are not? | Findings list · dashboard tile | On demand |
| Intune Primary User Mismatch (Windows) | Which Windows devices are used mostly by someone other than their Intune primary user? | Findings list · dashboard tile | On demand |
| Laptop Battery Health | Which laptops have a battery below 60 % of its design capacity, and which models are worst? | Findings list · dashboard tile | On demand |
| Local Administrator Assignments via Intune | Which users and groups do Intune policies add to the local Administrators group, on which devices? | Findings list · dashboard tile | On demand |
| Microsoft Tunnel Gateway Health | Are all Microsoft Tunnel Gateway sites and servers healthy and checking in? | Findings list · dashboard tile | On demand |
| Secure Boot Certificate Update Readiness | Which Windows devices have not received the 2023 Secure Boot certificates that replace the expired 2011 certificates? | Findings list · dashboard tile | On demand |
| Stuck Remote Actions (wipe, retire, lock) | Which wipe, retire and lock actions have not completed because the device never checked in? | Findings list · dashboard tile | On demand |
| Unassigned & Superseded Intune Apps | Which Intune apps are assigned to nobody, superseded but still assigned, or from the retired Microsoft Store for Business? | Findings list · dashboard tile | On demand |
Intune › Devices
Section titled “Intune › Devices”| Report | The question it answers | Kind | Data |
|---|---|---|---|
| All Intune Devices | Which devices does Intune manage, and are they compliant? | Table | Cached |
| Duplicate Devices Intune - PREVIEW | Which Intune devices share a serial number with another managed device? | Table | Cached |
| Intune Devices - Android | Which Android devices does Intune manage, and are they compliant? | Table | Cached |
| Intune Devices - iOS | Which iOS and iPadOS devices does Intune manage, and are they compliant? | Table | Cached |
| Intune Devices - Linux | Which Linux devices does Intune manage, and are they compliant? | Table | Cached |
| Intune Devices - macOS | Which macOS devices does Intune manage, and are they compliant? | Table | Cached |
| Intune Devices - Windows | Which Windows devices does Intune manage, and are they compliant? | Table | Cached |
| Match Devices From Entra to Intune to Autopilot | Which devices exist in Entra ID, Intune and Autopilot, and which are missing from one of them? | Table | Cached |
Intune › Endpoint Security
Section titled “Intune › Endpoint Security”| Report | The question it answers | Kind | Data |
|---|---|---|---|
| All Endpoint Security Policies | Which endpoint security policies exist, what kind are they, and which are not assigned to anything? | Findings list · dashboard tile | On demand |
Intune › Endpoint Security & Readiness
Section titled “Intune › Endpoint Security & Readiness”| Report | The question it answers | Kind | Data |
|---|---|---|---|
| Compliance Failures by Setting | Which compliance settings make devices non-compliant, and on how many devices? | Table | Cached |
| Configuration Profile Deployment Errors | Which configuration profiles error, fail or conflict on devices, and on what share of them? | Table | Cached |
| Defender Antivirus Health | Which Windows devices have Defender Antivirus off, real-time or tamper protection disabled, outdated signatures or a pending reboot? | Table · dashboard tile | Scan |
| Discovered Software & Outdated Apps | Which end-of-life products, remote-access tools and badly outdated apps are installed on managed devices? | Table | Cached |
| Mobile App Protection Coverage | Which users have mobile apps registered with Intune that received no app protection policy? | Table | Cached |
| Remediation & Platform Script Failures | Which remediations and platform scripts fail on devices, or fix issues that keep coming back? | Table | Cached |
| Startup Performance & App Reliability | Which devices boot slowly or crash, and which applications crash or hang most across the fleet? | Table | Cached |
| Windows 11 Hardware Readiness | Which devices can be upgraded to Windows 11, and which must be replaced because their hardware fails the requirements? | Table · dashboard tile | Cached |
| Windows Known Issues Affecting Our Builds | Which active Windows release-health known issues affect Windows versions running in the fleet? | Table | Cached |
| Windows LAPS & BitLocker Escrow Gaps | Which Windows devices have no BitLocker recovery key or Windows LAPS password backed up in Entra ID? | Table | Cached |
Intune › Reports
Section titled “Intune › Reports”| Report | The question it answers | Kind | Data |
|---|---|---|---|
| Policy Deployment Status | Which configuration profiles and compliance policies are assigned, and on how many devices did they succeed, fail or conflict? | Findings list · dashboard tile | On demand |
Intune › Service & Operations
Section titled “Intune › Service & Operations”| Report | The question it answers | Kind | Data |
|---|---|---|---|
| Android Device Administrator Leftovers | Which Android devices are still managed with the deprecated device administrator mode? | Table | Cached |
| Apple MDM Certificate & Token Expiry | When do the Apple push certificate and the DEP and VPP tokens expire? | Table · dashboard tile | Cached |
| Devices Still Assigned to Leavers | Which managed devices belong to a user who is disabled, deleted or past their leave date? | Table | Cached |
| Enrolment Failures (30 days) | Who failed to enrol a device in the last 30 days, on which platform, and why? | Table | Cached |
| Intune Admin Activity (30 days) | Which wipes, retires, deletes and policy changes were made in Intune in the last 30 days, and by whom? | Table | Cached |
| Intune RBAC & Scope | Which Intune role assignments let which admins wipe, retire or delete devices, and on which devices? | Table | Cached |
| Intune Tenant Hygiene | Does a device without a compliance policy count as compliant, how long does compliance last without check-in, and can personal devices enrol? | Findings list · dashboard tile | Cached |
| Jailbroken, Rooted & Threat-flagged Devices | Which managed devices are jailbroken, rooted or flagged by a Mobile Threat Defence partner? | Table | Cached |
| Low Disk Space & Hardware Age | Which managed devices are low on disk space or were enrolled more than four years ago? | Table | Cached |
| Unsupervised iOS / iPadOS Devices | Which corporate iPhones and iPads are not supervised? | Table | Cached |
| Windows 365 Cloud PC Inventory | Which Windows 365 Cloud PCs are assigned to leavers, in the grace period, never used or idle for a month? | Table | Cached |
| Windows 365 Connection Quality (7 days) | Which Cloud PCs had slow round trips, low bandwidth or slow sign-ins in the last 7 days, and which were not used? | Table · dashboard tile | Scan |