OS Version Spread & End-of-Support Exposure

The question it answers: How many managed devices run an operating system that no longer receives security updates, or will stop within six months?

How many managed devices run an operating system that no longer receives security updates, or will stop within six months. Windows dates follow Microsoft’s release information; Android is judged by the age of its security patch.

Note

Intune does not report the Windows edition, so both the Pro/Business and the Enterprise/Education end dates are shown. Apple publishes no end dates, so iOS and macOS are judged against the newest version in your own fleet.

At a glance

Where in the app	Intune › OS Version & End of Support
Workload	Intune
Kind	Table · dashboard tile
Data	Built from the tenant data IntensiveReports keeps in memory and refreshes in the background, so it opens at once.
Licence	Microsoft Intune.
Report id (API and MCP)	intune.devices.os-version-support

Columns

Column	Key	Type
Device	DeviceName	Link
User	UserPrincipalName	Text
Version	VersionLabel	Text
Status	SupportStatus	Status
Detail	Detail	Text
OS version	OsVersion	Text
Ownership	OwnerType	Text
Last sync	LastSyncDateTime	Date

Filters

Filter	Key (API)	On when the page opens
Only devices that are unsupported or at risk	problems	Yes

What it needs

Licence: Microsoft Intune.

Application permissions on the IntensiveReports app registration (all permissions):

Permission	API	What it allows	Note
DeviceManagementManagedDevices.Read.All	Microsoft Graph	Read Microsoft Intune devices

Data sources it reads

• GET /beta/deviceManagement/managedDevices

Through the API and MCP

GET /ir-api/v1/reports/intune.devices.os-version-support?size=100
GET /ir-api/v1/reports/intune.devices.os-version-support?filter=problems

An AI assistant reads it with the MCP tool get_report and the id intune.devices.os-version-support. The client needs the Read grant for Intune. See Using the API.