Export (0) Print
Expand All

Prepare for monitoring and reporting in Windows Intune

Updated: April 1, 2014

Applies To: Windows Intune

Use this topic to learn the basics about using alerts and reports to monitor Windows Intune operations in your organization:

You can use alerts in multiple ways including:

  • View all recent alerts to obtain a broad picture of device health.

  • Use alerts to investigate specific issues that are occurring to members of specific device groups or specific workspaces, like Endpoint Protection in Windows Intune.

  • Use alert filters to view all alerts of a specific severity level, or alerts that are active or closed.

To ensure that the appropriate people are notified about alerts, you can set up rules to send email notifications about new alerts to specific recipients.

When working with alerts, it is important to understand the difference between alerts and alert types:

 

Alert Type

A predefined rule that monitors and responds to a specific system or software state. Windows Intune comes with a set of default alert types that you can customize.

Alert

A single alert, of any type, that displays when the requirements of the alert type are met. Multiple alerts can be generated from a single alert type.

Alert types are grouped into the following categories:

 

Category More information

Endpoint Protection

Informs you when computers have malware warnings, are not protected, or have malware that requires action. These alerts also notify you when malware was seen for the first time or was recently resolved.

Monitoring

Informs you when a service is stopped, disk space is too low, or disk fragmentation is high.

Notices

Informs you about configuration tasks that need to be performed (such as configuring automatic approvals for updates) and service announcements that display on the Notice Board on the System Overview page.

Policy

Informs you when a device is unable to apply one or more policy settings.

Remote Assistance

Informs you when a user on a managed computer has initiated a request for remote assistance

System

Informs you when client deployments have failed. Also contains a sub-category of Mobile Device Management, which informs you when mobile device issues occur, including Exchange connectivity.

Updates

Informs you when specific updates are waiting for approval, such as Security Updates or Critical Updates.

Use the following severity levels to help you determine which issues to investigate:

 

Critical (indicated by a red circular icon)

Indicates a serious problem you should Investigate as a top priority.

For example, a Critical alert can help you identify when one or more computers have active malicious software, or some security issue or a loss of function.

Warning (indicated by a yellow triangular icon)

Indicates a potential or current problem that is not yet serious and you might want to investigate before the underlying issue becomes critical.

For example, a Warning alert is generated if security updates are waiting to be deployed.

Informational (indicated by a white circular icon)

Indicates a typical operation has occurred or requires attention.

For example, an Informational alert is generated if product and classification settings must be configured for updates that you plan to deploy to computers.

The following properties are common to all alerts:

 

Property Description

Alert Level

Indicates the severity of the alert –Critical, Warning, or Informational.

State

Indicates whether the alert is active or closed.

Created

This is the time that the alert was created.

Modified

Indicates the time when the alert was last modified. If an alert is closed, this will be the time that it was closed.

Repeat count

Indicates the number of times that the alert was raised.

Source

Indicates the device or rule that generated the alert. You can click the name of the source to display more information.

For example, for a Security updates need to be approved alert, the source is Security update list. When you click Security update list, the list of security updates that have not yet been deployed is displayed.

Path

This field displays the path of the specific object on the computer that caused the alert to be generated.

Windows Intune reports provide information about software, hardware, and software licenses in your organization. Reports can help you confirm current needs and forecast future spending. The Reports workspace gives you the tools to create and manage reports. For more information about reports, see Manage reports in Windows Intune.

Windows Intune provides the following report types:

 

Report Typed Description

Update

Displays the software updates that succeeded on computers in your organization, in addition to the updates that failed, are pending, or are needed. For more information on software updates, see Keep your computers up to date with software updates in Windows Intune.

Detected Software

Displays software installed on computers in your organization and includes the software versions. For more information on software distribution, see Manage software with Windows Intune.

Computer Inventory

Displays information about managed computers in your organization. Use this report to plan hardware purchases and to understand more about the hardware needs of users in your organization. For more information on working with managed computers, see Set up and manage computers using Windows Intune.

Mobile Device Inventory

Displays information about managed mobile devices in your organization. Use this report to inventory both personal and corporate devices that are enrolled in your organization. For more information on working with managed mobile devices, see Set up and manage mobile devices using Windows Intune.

License

There are two types of License reports:

  • License Purchase Reports display the software titles for all licensed software in selected license groups, based on their licensing agreements. You can use this report to find gaps in coverage for the license agreements in your organization.

  • License Installation Reports compare installed software on computers in your organization with your current license agreement coverage. Use this report to determine whether your organization has sufficient license agreement coverage.

 
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft