Intune - Health - Summary

Lack of visibility into device compliance can quickly escalate into devices not receiving vital operational functions. This not only leads to increased issues on employee endpoints but also puts the wider organization at risk.

 The Intune – Health library pack allows you to track, detect and remediate devices within your landscape that have issues with the health of the installed Intune client.

Key features allow you to:

• Identify devices that have the Intune client, the ConfigMgr client, or are co-managed by both services.

• Detect stability issues related to the Intune clients, including crashes or freezes of any version.

• Monitor Intune clients’ performance to ensure devices are not adversely affected

• Understand the agent deployment in co-management – SCCM and Intune – scenarios

 The L1\L2 support teams can use this pack to ensure device compliance across the landscape.

Pre-Requisites

None

Changelog

V1.0.0.0 - Initial Release

Pack Structure

The pack comprises five Remote Actions, an investigation, a category, and some metrics related to the dashboards.

Investigation

An investigation, Intune - Health - All workstations, has been provided so that all devices on the estate except for servers can be discovered. The investigation can be used within the remote actions in order to interrogate the devices as to their status regarding their Intune service. It is recommended that the same investigation is used in all remote actions in order to keep the results consistent.

Category

A category, Intune - Cloud Services, lists the currently known cloud services used by Intune. It is important to regularly check via Microsoft help pages if these have changed or been added to in which case, the category will need to be updated to reflect the changes.

Remote Actions

There are two types of remote action; data gathering and remediation. All the remote actions can be scheduled to run at a time decided by the IT department. The data gathering remote actions will supply the current status of the services on devices as targeted by the investigation, while the remediation remote action will attempt to repair any issues discovered, such as stopped or disabled services.

You can find more details of how these remote actions work and how they can be configured on the configuration page.

Data gathering remote actions.

• Get Microsoft Intune Device Status

• Get SCCM Client Status

• Get Service Information

• InTune - Get-DeviceHardwareId

Remediation remote action

• Set Service Information

Dashboards

There are three dashboards provided that provide the overall view of your Intune landscape, stability, and performance.

Landscape

An overall view of your Intune landscape showing the number of devices with the Intune service installed, the ConfigMgr (SCCM\MEM) service installed, are co-managed (both Intune and ConfigMgr are installed) or have no client installed at all.

Agent Stability

An overall view of the Intune agent service and whether there are any issues such as crashes or freezes of the service and whether the service has been stopped or disabled. Should the service not be in the desired state (i.e., stopped or disabled), the Set Service Information remote action can be utilized to start and\or enable the service and set to the desired configuration.

Agent performance

An overview of the overall performance of the Intune agent service showing its memory and CPU utilization. A view of the different versions found on the estate assists in exposing any issues with a particular version release. The web traffic to the cloud services is also shown so that network bandwidth can be monitored.