Intune Devices Overview Test

Administrators should keep an eye on the registration status of the devices on Microsoft Azure Intune, so that sudden/unexpected spikes in the count of registered/blocked devices can be detected and the reasons investigated. Also, by closely monitoring the registration status of these devices at regular intervals, administrators can identify the devices that continue to be a threat to the Microsoft Azure Intune environment and identify those devices for which the ban can be lifted. Also, the devices that are configured with errors too should be tracked at periodic intervals so that the reason for such errors can be identified proactively.

To perform all the aforesaid checks, the Intune Devices Overview test can be used! This test keeps tab on the devices enrolled on Microsoft Azure Intune at any given point in time, this test reports the count of company owned devices and personal devices. This test also reveals the number of devices that were registered, wiped, blocked, pending approval etc. This way, this test points to the current registration status of the devices on Microsoft Azure Intune. Moreover, the test reveals the number and names of devices that have been blocked or wiped, or were not registered, so that administrators can accurately identify those devices (if any) and can troubleshoot the issues and smoothly enroll those devices on Microsoft Azure Intune.

Target of the Test: Microsoft Azure Intune

Agent deploying the test: A remote agent

Output of the test: One set of results for the target Microsoft Azure Intune being monitored

Configurable parameters for the test
Parameters Description

Test Period

How often should the test be executed.

Host

The host for which the test is to be configured.

Tenant ID

Specify the Directory ID of the Azure AD tenant to which the target subscription belongs. To know how to determine the Directory ID, refer to Configuring the eG Agent to Monitor Microsoft Azure Intune Using Intune REST API.

Client ID, Client Password, and Confirm Password

To connect to the target subscription, the eG agent requires an Access token in the form of an Application ID and the client secret value. For this purpose, you should register a new application with the Azure AD tenant. To know how to create such an application and determine its Application ID and client secret, refer to Configuring the eG Agent to Monitor Microsoft Azure Intune Using Intune REST API. Specify the Application ID of the created Application in the Client ID text box and the client secret value in the Client Password text box. Confirm the Client Password by retyping it in the Confirm Password text box.

Proxy Host and Proxy Port

In some environments, all communication with the Azure cloud be routed through a proxy server. In such environments, you should make sure that the eG agent connects to the cloud via the proxy server and collects metrics. To enable metrics collection via a proxy, specify the IP address of the proxy server and the port at which the server listens against the Proxy Host and Proxy Port parameters. By default, these parameters are set to none, indicating that the eG agent is not configured to communicate via a proxy, by default.

Proxy Username, Proxy Password and Confirm Password

If the proxy server requires authentication, then, specify a valid proxy user name and password in the Proxy Username and Proxy Password parameters, respectively. Then, confirm the password by retyping it in the Confirm Password text box.

DD Frequency

Refers to the frequency with which detailed diagnosis measures are to be generated for this test. The default is 1:1. This indicates that, by default, detailed measures will be generated every time this test runs, and also every time the test detects a problem. You can modify this frequency, if you so desire. Also, if you intend to disable the detailed diagnosis capability for this test, you can do so by specifying none against DD frequency.

Detailed Diagnosis

To make diagnosis more efficient and accurate, the eG Enterprise embeds an optional detailed diagnostic capability. With this capability, the eG agents can be configured to run detailed, more elaborate tests as and when specific problems are detected. To enable the detailed diagnosis capability of this test for a particular server, choose the On option. To disable the capability, click on the Off option.

The option to selectively enable/disable the detailed diagnosis capability will be available only if the following conditions are fulfilled:

  • The eG manager license should allow the detailed diagnosis capability
  • Both the normal and abnormal frequencies configured for the detailed diagnosis measures should not be 0.

Measures reported by the test:

Measurement Description Measurement Unit Interpretation

Company devices

Indicates the number of corporate owned devices enrolled on Microsoft Azure Intune.

Number

 

Personal devices

Indicates the number of personal devices enrolled on Microsoft Azure Intune.

Number

The detailed diagnosis of this measure lists the name of the device, Operating system of the device, OS version, Owner type, Device type, UPN, whether the device is registered withe Microsoft Azure AD, Management Agent, Device Enrollment type, whether/not the device is encrypted, the subscriber carrier, Manufacturer of the device and the model of the device.

Unknown devices

Indicates the number of unknown devices enrolled on Microsoft Azure intune.

Number

The detailed diagnosis of this measure lists the name of the device, Operating system of the device, OS version, Owner type, Device type, UPN, whether the device is registered withe Microsoft Azure AD, Management Agent, Device Enrollment type, whether/not the device is encrypted, the subscriber carrier, Manufacturer of the device and the model of the device.

Not registered

Indicates the number of devices that are not registered on Microsoft Azure Intune.

Number

The detailed diagnosis of this measure lists the name of the device, Operating system of the device, OS version, Owner type, Device type, UPN, whether the device is registered withe Microsoft Azure AD, Management Agent, Device Enrollment type, whether/not the device is encrypted, the subscriber carrier, Manufacturer of the device and the model of the device.

Registered

Indicates the number of devices that were registered on Microsoft Azure Intune.

Number

The detailed diagnosis of this measure lists the name of the device, Operating system of the device, OS version, Owner type, Device type, UPN, whether the device is registered withe Microsoft Azure AD, Management Agent, Device Enrollment type, whether/not the device is encrypted, the subscriber carrier, Manufacturer of the device, model of the device, Intune Device ID and Azure AD Device ID.

Revoked

Indicates the number of devices that were blocked, wiped or retired from Microsoft Azure Intune.

Number

The detailed diagnosis of this measure lists the name of the device, Operating system of the device, OS version, Owner type, Device type, UPN, whether the device is registered withe Microsoft Azure AD, Management Agent, Device Enrollment type, whether/not the device is encrypted, the subscriber carrier, Manufacturer of the device and the model of the device.

Key conflict

Indicates the number of devices that have key conflict.

Number

The detailed diagnosis of this measure lists the name of the device, Operating system of the device, OS version, Owner type, Device type, UPN, whether the device is registered withe Microsoft Azure AD, Management Agent, Device Enrollment type, whether/not the device is encrypted, the subscriber carrier, Manufacturer of the device and the model of the device.

Approval pending

Indicates the number of devices that were pending approval.

Number

The detailed diagnosis of this measure lists the name of the device, Operating system of the device, OS version, Owner type, Device type, UPN, whether the device is registered withe Microsoft Azure AD, Management Agent, Device Enrollment type, whether/not the device is encrypted, the subscriber carrier, Manufacturer of the device and the model of the device.

Certificate reset

Indicates the number of devices on which device certificate was reset.

Number

The detailed diagnosis of this measure lists the name of the device, Operating system of the device, OS version, Owner type, Device type, UPN, whether the device is registered withe Microsoft Azure AD, Management Agent, Device Enrollment type, whether/not the device is encrypted, the subscriber carrier, Manufacturer of the device and the model of the device.

Not registered pending enrollment

Indicates the number of devices that are not registered and are pending enrollment.

Number

The detailed diagnosis of this measure lists the name of the device, Operating system of the device, OS version, Owner type, Device type, UPN, whether the device is registered withe Microsoft Azure AD, Management Agent, Device Enrollment type, whether/not the device is encrypted, the subscriber carrier, Manufacturer of the device and the model of the device.

Unknown

Indicates the number of devices whose device registration status is unknown.

Number

The detailed diagnosis of this measure lists the name of the device, Operating system of the device, OS version, Owner type, Device type, UPN, whether the device is registered withe Microsoft Azure AD, Management Agent, Device Enrollment type, whether/not the device is encrypted, the subscriber carrier, Manufacturer of the device and the model of the device.

Devices with errors

Indicates the number of devices that were configured with errors on the target Microsoft Azure Intune.

Number

 

Devices with conflicts

Indicates the number of devices that encountered conflicts during configuration on the target Microsoft Azure Intune.

Number

 

Device configuration status

Indicates the configuration status of the devices on the target Microsoft Azure Intune.

 

The values reported by this measure and its numeric equivalents are mentioned in the table below:

Measure Value Numeric Value
Error 1
OK 0

Note:

By default, this measure reports the Measure Values listed in the table above to indicate the configuration status of the devices. The graph of this measure however, is represented using the numeric equivalents only - 0 or 1.

The detailed diagnosis of this measure lists the name of the device, compliance status and the