Work with reports
The Microsoft Intune admin center brings together reporting from several products into a single location to help you monitor, and investigate issues with your Microsoft Entra organization ("tenant") configuration and devices.
Microsoft Managed Desktop has a section in the Reports menu where you can find reports specific to Microsoft Managed Desktop's management of the registered devices. In several locations throughout the Microsoft Intune admin center, you can filter reports from other product groups. You can include or exclude devices that are managed by Microsoft Managed Desktop.
Device health reports
Device reliability reports (public preview)
Important
This feature is in public preview. This feature is being actively developed, and may not be complete. You can test and use these features in production environments and provide feedback.
| Report | Description |
|---|---|
| Device reliability historical trends report | This report provides aggregated device reliability (stop errors) information, over the past 28 days, for Microsoft Managed Desktop managed devices in the tenant. |
| Operating system stop error report | This report highlights details about the failure modules that caused an operating system stop error and impacted Microsoft Managed Desktop devices in the tenant. |
| Failure module drilldown report | Use this report to drill down further into the details to better understand the impact of the failure module. |
| Affected devices report | This report provides details about the devices that are affected by operating system stop errors. |
| Device crash drilldown report | Use this report to better understand the impact of the operating system stop error on the specified device. |
Managed devices reports
Microsoft Managed Desktop provides several reports and dashboards. IT admins, in your organization, can use these reports and dashboards to understand various aspects of your devices.
The following reports are available:
| Report | Description |
|---|---|
| Device inventory report | Download a comma-delimited file of the devices' serial number, name, manufacturer, etc. |
| Application usage report | This report provides information about typical app usage across your Microsoft Managed Desktop devices. For devices to provide data to this report, they must be set to the Optional diagnostic data level. |
| Service metrics report | This report provides straightforward summaries of key metrics for Microsoft Managed Desktop month over month. |
Windows quality update reports
The Windows quality update reports provide you with information about:
- Quality update device eligibility
- Device update health
- Device update trends
Together, these reports provide insight into the quality update state and compliance of Windows devices that are enrolled into Microsoft Managed Desktop.
The report types are organized into the following focus areas:
| Focus area | Description |
|---|---|
| Operational detail |
|
| Device trends |
|
Who can access the reports?
Users with the following permissions can access the reports:
- Global Administrator
- Intune Service Administrator
- Administrators assigned to an Intune role with read permissions
About data latency
The data source for these reports is the Windows diagnostic data. The data typically uploads from enrolled devices once per day. Then, the data is processed in batches before being made available in Microsoft Managed Desktop. The maximum end-to-end latency is approximately 24 hours.
Windows quality update statuses
The following statuses are used throughout the Microsoft Managed Desktop reporting suite to describe the quality update status for devices:
Each status has its own set of sub statuses to further describe the status.
Healthy devices
Healthy devices are devices that meet all of the following prerequisites:
Note
Healthy devices will remain with the In Progress status for the 21-day service level objective period. Devices which are Paused are also considered healthy.
| Sub status | Description |
|---|---|
| Up to Date | Devices are up to date with the latest quality update deployed through the Microsoft Managed Desktop release schedule |
| In Progress | Devices are currently installing the latest quality update deployed through the Microsoft Managed Desktop release schedule |
| Paused | Devices that are currently paused due to a Microsoft Managed Desktop pause. For more information, see update deployment. |
Not Up to Date (Microsoft Action)
Not Up to Date means a device isn’t up to date when the:
- Quality update is more than a month out of date, or the device is on last month’s quality update
- Device is more than 21 days overdue from the last release.
Note
Microsoft Action refers to the responsibility of the Microsoft Managed Desktop Operations Team to carry out the appropriate action to resolve the reported device state. Microsoft Managed Desktop aims to keep at least 95% of eligible devices on the latest Windows quality update 21 days after release.
| Sub status | Description |
|---|---|
| No Heartbeat | The Windows Update service hasn’t been able to connect to this device. The service can’t offer the update to that device. |
| Not Offered | The Windows Update service hasn’t offered the update to that device. |
| Policy Blocking Update | This device has a policy that is blocking the update, such as a deferral or pause policy. Devices are only in this state after the 21-day threshold. |
| In Progress—Stuck | This device has downloaded the update but is getting stuck in a loop during the install process. The update isn’t complete. |
| Other | This device isn't up to date and isn’t reporting back data from the client. |
Ineligible Devices (Customer Action)
Customer Action refers to the responsibility of the designated customer IT administrator to carry out the appropriate action to resolve the reported device sub status.
Within each 24-hour reporting period, devices that are ineligible are updated with one of the following sub statuses.
| Sub status | Description |
|---|---|
| Insufficient Usage | Devices must have at least six hours of usage, with at least two hours being continuous. |
| Low Connectivity | Devices must have a steady internet connection, and access to Windows update endpoints. |
| Out of Disk Space | Devices must have more than one GB (GigaBytes) of free storage space. |
| Not Deployed | Microsoft Managed Desktop doesn't update devices that haven't yet been deployed. |
| Not On Supported on Windows Edition | Devices must be on a Windows edition supported by Microsoft Managed Desktop. For more information, see prerequisites. |
| Not On Supported Windows Build | Devices must be on a Windows build supported by Microsoft Managed Desktop. For more information, see prerequisites. |
| Intune Sync Older Than 5 Days | Devices must have checked with Intune within the last five days. |
Data export
Select Export devices to export data for each report type.
Note
You can’t export Microsoft Managed Desktop report data using Microsoft Graph RESTful web API.
Endpoint analytics
Microsoft Managed Desktop is now integrated with Endpoint analytics. These reports give you insights for measuring how your organization is working and the quality of the experience delivered to your users. You can find Endpoint analytics in the Reports menu of the Microsoft Intune admin center. To pivot a score to only include devices being managed by Microsoft Managed Desktop, go to any report, select the Filter dropdown, and then select Microsoft Managed Desktop devices.
If Endpoint analytics weren't automatically configured for your Microsoft Entra organization ("tenant") during enrollment, you can do that yourself. For more information, see Onboard in the Endpoint analytics portal. You can enroll all of your devices, or, if you want to include only Microsoft Managed Desktop devices, select the modern workplace device groups for Test, First, Fast, and Broad. These reports might require different permissions. For more information, see Permissions to ensure you have roles appropriately assigned.
Note
To better respect user privacy, there must be more than 10 Microsoft Managed Desktop devices enrolled with Endpoint analytics to use this filter.
Intune reports
Microsoft Intune is one of the services we use to manage devices on your behalf.
In some cases, it can be helpful to use Intune reports to specifically monitor administration of your Microsoft Managed Desktop devices. You can exclude the devices we manage from the report you use to manage other devices. The following reports let you filter capability to include or exclude Microsoft Managed Desktop devices.
Note
Custom Microsoft Managed Desktop roles guarantee access only to the Microsoft Managed Desktop reports. To access other parts of the Microsoft Intune admin center, such as All devices, see Role-based access control with Microsoft Intune.