Intune Policy Device and User Check-in Status Report
In this post, You will learn to check Intune Policy Device and User Check-in Statu s Report. The Device and User Check-in Status Report is a valuable within the Intune for Device configuration profiles, security policies. This report provides a comprehensive overview of the status of policy check-ins for both devices and users.
Device and user check-in status : Shows the number of all users or devices that checked-in with the profile. If one device has multiple users, this report shows the status of each user. When the user or devices check-in, they receive the settings in your profile.
The Device and user check-in status report combines information previously split into separate device status and user status reports. With the ability to track check-in status, admins can identify any potential issues or delays in policy enforcement and take necessary actions to rectify them promptly.
You can also directly check for Intune Settings Catalog Profile Report from Intune Portal, Intune settings catalog profile report provides an overall view of device configuration policies. This report offers a comprehensive overview of device configuration policies, providing admins a holistic view of the settings applied across their managed devices.
Intune portal offers access to several reporting node s, providing server-side details for Intune. Troubleshooting basic Intune user policy deployment can be done conveniently through the Intune portal. To gather Intune logs, you can refer to the Collect Intune Logs from the Intune Portal Diagnostic Data guide.
Microsoft recommends using setting catalog profiles to create and manage security policies for all Intune-managed Windows devices. To view the Device and user check-in status report:
- Sign in to the Microsoft Intune admin center https://intune.microsoft.com/.
- Select Devices > Click on the configuration profiles located inside Policy.
Select the configuration profile from the list for checking the Device and user check-in status . For Example, I am selecting Specify The Maximum Log File Size Policy . To make it easier to find specific settings, You can search for a keyword, such as log file size, and search for specific settings.
The new experience moves away from the per policy donut charts to a sleeker overview chart that quickly updates as devices/users check in. There are two reports in the per policy view:
- Intune Policy Device Assignment Status Report – shows the status of devices targeted by a policy. This report also surfaces devices in a “pending” state.
- Intune Policy Per Setting Status Report – shows the status of the device or user check-in at a setting level within the policy. The states include error, conflict, and success.
Click on the View report , This report shows the latest status for assigned devices from the policy, including devices in a pending policy assignment state.
This report shows the list of device and user check-ins for the device configuration profile, with the check-in status and last check-in time.
- The devices that received the profile
- The user names with devices that received the profile
- The check-in status and the last time the user/device checked in with the profile
Use the Columns property to add or remove columns from the generated report. Click on the Columns , A flyout displays, here you can Check or Uncheck the columns that you want to include. Select Apply to update.
You can also view more columns for device properties in the report: Model , Manufacturer , Platform , and Intune device ID .
You can also select a specific device to get more details and use the filter column to see the assignment filter options. You can filter for device check-ins based on the last active user across Success , Error , Conflict , Not Applicable , Unkown, and Pending states to generate your report.
When you open the report, the aggregate chart will remain at the top of the page, and the data will be consistent with the list data. Tools are available to search across the entire dataset, sort on every column, use paging controls to navigate through data, and view number of records within the report.
You can quickly export reporting data generated. Click on the Export . The popup will appear with the following message when exporting generated Device Assignment report, Click Yes . This will export data to a compressed comma-separated values (.csv) file. Also, you can apply filters to the exported data.
About Author – Jitesh , Microsoft MVP , has over six years of working experience in the IT Industry. He writes and shares his experiences related to Microsoft device management technologies and IT Infrastructure management. His primary focus is Windows 10/11 Deployment solution with Configuration Manager, Microsoft Deployment Toolkit (MDT), and Microsoft Intune.
Leave a Comment Cancel reply
This site uses Akismet to reduce spam. Learn how your comment data is processed .
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Monitor app information and assignments with Microsoft Intune
- 8 contributors
Intune provides several ways to monitor the properties of apps that you manage and to manage app assignment status.
- Sign in to the Microsoft Intune admin center .
- Select Apps > All apps .
- In the list of apps, select an app to monitor. You'll then see the app pane, which includes an overview of the device status and the user status.
Microsoft Store and Android Store apps that are deployed as Available do not report their installation status.
For Managed Google Play apps deployed to Android Enterprise personally-owned work profile devices, you can view the status and version number of the app installed on a device using Intune.
From the Installed apps page of the Windows Company Portal or the Company Portal website, end users can view the installation status and details for device-assigned required apps. This functionality is provided in addition to the installation status and details of user-assigned required apps.
App overview pane
In the app pane, you can review details about the status of an app in your environment.
The Essentials section contains the following information about the app:
Device and user status graphs
The graphs show the number of apps for the following status:
Be aware that Android LOB apps (.APK) deployed as Available with or without enrollment only report app installation status for enrolled devices. App installation status is not available for devices that are not enrolled in Intune.
Device install status
A device status list is shown when you select Device install status in the Monitor section of the menu. The details table includes the following columns:
Even if the App is targetted to device context and into a device group, the user name will always be reported. You may refer to the corresponded API Call . Additionally, the system context may appear as "No user".
User install status
A user status list is shown when you select User install status in the Monitor section of the menu. The details table includes the following columns:
- To learn more about working with your Intune data, see Use the Intune Data Warehouse .
- To learn about app configuration policies, see App configuration policies for Intune .
Was this page helpful?
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback .
Submit and view feedback for
Additional resources
COMMENTS
Assign the policy to a device group containing the affected device. Then, from Settings > Accounts > Access work or school, click on the Connected to <aad_account> > Info > Sync to perform a device sync. While typically you want policies to apply to the user, not the device, this is a quick workaround to ensure policies such as encryption ...
Conforms: The device received the profile and reports to Intune that it conforms to the setting. Not applicable: The profile setting isn't applicable. For example, email settings for iOS/iPadOS devices don't apply to an Android device. Pending: The profile is sent to the device, but hasn't reported the status to Intune. For example, encryption ...
You can also filter the assignment status to see only errors, conflicts, and more. It's normal for the numbers in the Device and user check-in status and Device assignment status reports to be different. Back in Device and user check-in status, select Per setting status: This report shows the individual settings in the policy, and their status.
If I look under configuration profiles --> device status, I see some devices, where the deployment status is "Pending". I have noticed that all these devices have no "User Principal Name". This column is blank for alle the pending devices. See the attached image. I have tried to manullay sync the computer and restart several times.
Mchead22. • 4 yr. ago. not exactly sure as to the exact cause, but I can say in my experience, our policies will get stuck in pending status when they cant be applied for some reason. for instance, if i were to make a typo in the string value of a setting, so Intune therefore cant apply that setting, the policy status will just stay in ...
A policy report shows devices stuck in pending status. When a device has a "pending" status, it means the device has not checked in to receive the policy. There is a known scenario where sometimes the device status can still show as "pending" in a report even after the policy has been delivered to the device. To remediate this, try ...
I assigned the Microsoft Edge Baseline version September 2020 (Edge version 85 and later) to my device-group, but the Assignment Status keeps saying "Pending" for days, while the Microsoft Defender ATP Baseline and the Windows 10 Security Baseline assigned to the same group get applied succesfully immediately.
Let's check the Intune Policy Device Assignment Status Report in the Intune aka, Endpoint Manager portal. The updated policy experience for Configuration profiles or the Endpoint security node, helps to reorganize how we surface policy reports and provide a better overall reporting experience.. Starting in Intune Service release 2203, Microsoft Endpoint Manager Admin Center announced the ...
We have looked to create a new configuration for some development work we are looking at currently utilizing the same methodolligy as above. Unfortunatley non of the settings are applying to any of the above groups mentioned despite them being exaclty the same. Everything is just sitting with a assignment status of 'Pending'.
Hi all, I've setup Intune in a test environment using Windows 10 Pro and a Business Premium license. The device enrolls in Intune perfectly fine. However, all of the Device Configuration policies are stuck in Pending state on the endpoint. I've tried re-enrolling, restarting the endpoint, etc. But nothing seems to apply the policies.
Results are a list of devices, similar to the Device and user check-in status report. Selecting a device on this page opens that devices Profile Settings view, which is the same view you can see from the main report drill-in you access from the View report button. However, devices that have an Assignment status of Pending don't have results to ...
Hi. I have created a Windows 10 device policy and set removable drive as blocked. I have a test group of computers I am testing intune with. It just says pending. In overview it says devices with errors 2. But no further granular details anywhere. Both systems are running Windows 10 Pro - 1709 update installed.
Data representation: Addressing pain points of devices in 'pending' state and how we surface device records with multiple user affinities. ... Like the Device and user check-in status report, the Device assignment status report page includes an aggregate chart that summarizes the list data. The aggregate counts the number of device check ...
The Device and User Check-in Status Report is a valuable within the Intune for Device configuration profiles, security policies. This report provides a comprehensive overview of the status of policy check-ins for both devices and users. Device and user check-in status: Shows the number of all users or devices that checked-in with the profile ...
Device config profiles pending. Anyone else get this issue randomly happening to devices. Been using Intune daily for 18months now and from time to time come across devices that have a large amount of config profiles just sat at pending, sometimes the same with device compliance policies too. Seem to get most policies and report sucess but then ...
I have some Hybrid Azure AD Join W10 devices, auto enrolled in Intune via GPO however the Registered status equals pending. MS docs state: A device can also change from having a registered state to "Pending" If a device is deleted and from Azure AD first and re-synchronized from on-premises AD. If a device is removed from a sync scope on Azure ...
Jul 3, 2023, 5:06 AM. My experience is that a computer account in "Fix pending" status is irrecoverable, and will never again move out of it. If you want to autopilot them again, you have to delete the device and re-register it. The underlying issue seems to be that Intune is only designed to recover that status once it gets another checkin ...
By Lee Yan | Sr. Service Engineer | Intune Support as a Feature . We have received a few support cases recently where customers using co-management - when a Windows 10 device has the Configuration Manager client and is enrolled to Intune - reported that apps are unexpectedly shown as pending in the Intune admin console or download pending in the Company Portal app after the user has clicked on ...
I assigned the Microsoft Edge Baseline version September 2020 (Edge version 85 and later) to my device-group, but the Assignment Status keeps saying "Pending" for days, while the Microsoft Defender ATP Baseline and the Windows 10 Security Baseline assigned to the same group get applied succesfully immediately.
Configuration profiles are deploying correctly but Intune shows "Pending" all the time even when the profile is deployed to the phone. Any ideas? Maybe the device needs to check in first before you will see the update from pending? any solution for the same ? Hello all, does anyone encountered similar issue with fully managed devices?
1 answer. @Redistro, Thanks for posting in Q&A. From your description, I know some devices are showing pending for 4 days when deploy windows update ring policy. For these devices, I suggest try restarting the devices to see if the status will be changed. Meanwhile, go to one affected device and view configured update policies, then verify that ...
Assignment of a task to a device that receives a status of Pending or Failed. Device Actions. I need to understand: if it's impossible to cancel this status (in case it's no longer relevant and this assignment is hanging in processes), how long do we need to wait for Intune to stop assigning this task? For instance, Autopilot was assigned, it ...
Intune provides several ways to monitor the properties of apps that you manage and to manage app assignment status. Sign in to the Microsoft Intune admin center. Select Apps > All apps. In the list of apps, select an app to monitor. You'll then see the app pane, which includes an overview of the device status and the user status.