Insights: Intune

Nerdio Manager Intune Insights is a comprehensive endpoint analytics tool that provides data-driven insights, allowing you to proactively address device performance issues, improve user experience, and optimize device configurations.

Prerequisites

To use Intune insights, ensure the following prerequisites are met:

• Intune is enabled in your environment.

• Intune insights are enabled in your environment.

• Intune insights thresholds are configured.

• Enable port 443 outbound to https://graph.microsoft.com

For details, see UEM: Enable and configure Intune.

Minimum requirements

The minimum requirements for DB/App Service Plans are as follows:

Port requirements

The following ports are required for Intune insights:

To enable Intune insights:

1. Select from the following:

   • Classic UI: Navigate to Settings > Integrations, and from the Intune tile, navigate to Intune Insights, and select Disabled.

     

   • New UI: Navigate to Settings > Environment, and then select the Integrations tab. Navigate to the Intune section, select the arrow to expand the section, navigate to Intune Insights and select the Disabled toggle.

     

2. In the Enable Intune Insights dialog box, expand the Customize resources section, and enter the following information:

   • App Service: Enter the details to create a new app service, or, from the drop-down, select an existing app service.

     Note: The following requirements are needed for an existing app service:

     • Type: web app

     • Runtime stack: .NET 8

     • Operating system: Windows

     • Basic authentication: Enabled (Settings > Configuration → SCM Basic Auth Publishing Credentials)

     • Identity: System assigned (Settings > Identity > System assigned)

     • Role assignments: Website contributor or Contributor on the Nerdio Manager service principal

   • App Service Plan: Enter the details to create a new app service plan, or, from the drop-down, select an existing app service plan.

   • Key Vault: Enter the details to create a new key vault, or, from the drop-down, select an existing key vault.

   • Application Insights: Enter the details to create a new applications insight, or, from the drop-down, select an existing application insights.

   • Log Analytics Workspace: Enter the details to create a new log analytics workspace, or, from the drop-down, select an existing log analytics workspace. This contains application insights data.

     

3. In the Enable Intune Insights dialog box, expand the Customize resources names section.

4. Enter names for each of the resources.

   

   Note: Resource names must be contain between 1 and 255 characters, contain alphanumeric characters, underscores and hyphens, and must be unique in the resource group. If an existing application insights is selected, the value of this field will be ignored.

5. Expand the Microsoft Graph permissions will be assigned section to display the system-assigned managed identities that will be created for the app service.

   

6. Expand the Microsoft Graph permissions will be assigned section to display the system-assigned managed identities that will be created for SQL Server.

   

7. Optionally, expand the Customize resource tags.

8. From the Tag group drop-down, select the tag group.

   

9. Select Enable.

Intune insights is now deployed and enabled.

To disable Intune insights:

1. Select from the following:

   • Classic UI: Navigate to Settings > Integrations, and from the Intune tile, navigate to Intune Insights, and select Enabled.

     

   • New UI: Navigate to Settings > Environment, and then select the Integrations tab. Navigate to the Intune section, select the arrow to expand the section, navigate to Intune Insights and select the Enabledtoggle.

     

2. From the Disable Intune Insights dialog box, select the resources you want to deleted and then select Disable

Intune insights is now disabled.

To view Intune insights:

1. In Nerdio Manager, navigate to Insights > Intune.

   The default Dashboards tab is displayed.

2. Navigate between the following tabs to view the corresponding insights:

   • Dashboards

   • Devices

   • Patch status

   • Apps

   • OS health

   • Certificates

   • Trends

   • Issues

   • Reports

Dashboards

The Dashboards tab provides environment-specific data through widgets. This allows you to quickly assess the status of your environment and identify issues.

You can create customized dashboards to display only the data you need.

Default dashboard overview

The default dashboard is the starting point for displaying Intune insights. You can edit and customize widgets on the default dashboard, or create a new dashboard.

To create a new dashboard:

1. In Nerdio Manager, navigate to Insights > Intune.

2. On the Dashboards tab, in the upper-right corner, select New Dashboard.

   

3. In the New Dashboard field, enter a name for the new dashboard.

   

4. Perform the following actions:

   • To clear the dashboard, select Clear.

   • To move an existing widget, select and hold the widget, and then move it to a new location.

   • To delete a widget, in the widget's upper-right corner, select the trash can icon.

     

   • To add a new widget, select Add item, select the widget you wish to add, and then select Create.

     

5. Select Save.

To edit a dashboard:

1. On the Dashboards tab, in the upper-right corner, select Edit.

   

2. Perform the following actions as needed:

   • To rename the dashboard, in the dashboard name field, edit the current name.

   • To clear the dashboard, select Clear.

   • To move an existing widget, select and hold the widget, and then move it to a new location.

   • To delete a widget, in the widget's upper-right corner, select the trash can icon.

   • To add a new widget, select Add item, select the widget you wish to add, and then select Create.

3. Select Save.

Devices

The Devices tab provides information about the status of your Intune devices.

Available actions:

• Filter: Filter devices based on the available filters, such as Device Status, Ownership, or Major OS.

  • You can also enter specific search terms in the Search box.

• Drill down: Select any device row to drill down to more details.

• Export: Select Export to export the data as a CSV file.

The results are displayed using a red (high), amber (medium), and green (healthy) (RAG) status. An unknown status is displayed in black.

The results include the following details:

• User

• Device

• Last Intune sync

• Compliance status

• Configuration status

• Managed app status

• Patch status

  

To view device-specific information:

1. On the Devices tab, select any data in the device row to view detailed information for that device.

   • Select the Last Sync, Compliance Status, Patch Status, and Warranty Status widgets to view details for those components.

   

2. In the device details view, navigate the following tabs for deeper insights:

   • Details: The Details tab displays device properties, hardware details, and enrollment information, along with advanced properties. Mobile-only details are available in a separate section.

     Expand each section to analyze its details.

     

   • Patches: Displays the current status for the listed patches.

     

   • Compliance: Displays the current policy status.

     

   • Config Policies: Displays the current configuration policy status.

     

   • Managed Apps: Displays a list of Intune-managed apps installed on the device.

     

   • All Apps: Displays all applications installed on the device.

     

Patch status

The Patch Status tab displays patch status details for all devices, using a red, amber, and green (RAG) status to indicate whether a patch is up to date, overdue (medium or high), or unsupported.

Available actions:

• Filter: Filter patches by their status, OS version, or the OS SKU.

  • You can also enter specific search terms in the Search box.

• Drill down: Select any patch row to drill down to more details.

• Export: Select Export to export the data as a CSV file.

Apps

The Apps tab displays all installed applications across all devices. It provides the number of versions for each app and the total number of installations.

Available actions:

• Filter: Filter apps based on their metered status.

  • You can also enter specific search terms in the Search box.

• Drill down: Select any app row to drill down to more details.

• Export: Select Export to export the data as a CSV file.

OS health

The OS Health tab displays details related to the OS status, indicating whether the OS is supported. It also displays the end-of-life date for the listed OSs and the number of devices affected.

Available actions:

• Filter: Filter the OS health data based on the support status and the OS name.

  • You can also enter specific search terms in the Search box.

• Drill down: Select any OS row to drill down to more details.

• Export: Select Export to export the data as a CSV file.

Certificates

The Certificates tab displays details related to certificates installed on devices.

Available actions:

• Filter: Filter certificates based on the customer, certificate, and tenant.

  • You can also enter specific search terms in the Search box.

• Drill down: Select any certificate row to drill down to more details.

• Export: Select Export to export the data as a CSV file.

  

Trends

The Trends tab allows you to generate a report that displays device trends within your environment.

To run the Trends report:

1. On the Trends tab, provide the following information:

   • Period: From the drop-down list, select Days or Months, and then enter the number of days or months to include in the report.

     For Months, additionally select the monthly data roll-up method:

     • Avg (average)

     • Min (minimum)

     • Max (maximum)

   • Show: Select the details you want to include.

   • Filters: Choose whether to exclude red or amber issues.

2. Once configured, select Run Report.

   

Issues

The Issues tab allows you to view all current issues within your environment.

The issue information includes the issue severity indicated by the red, amber, and green (RAG) status, categorized as high, medium, or low.

Additionally, affected devices and their corresponding issue types are also presented.

Available actions:

• Filter: Select Open or Resolved depending on what issues you want to view. Then, narrow down the issues list based on available filters, such as Severity, Issue Category, or Issue Type.

  • You can also enter specific search terms in the Search box.

• Drill down: Select a severity box to view detailed information about an issue.

• Export: Select Export to export the data as a CSV file.

Reports

The Reports tab provides the following built-in reports on Intune devices:

• Warranty: Provides the devices' warranty status.

  Note: The Warranty report currently supports only Dell devices.

• Inventory: Provides a list of devices.

• Encryption: Provides the device encryption and TPM information.

• Mobile: Provides details on mobile devices.

• Battery: Provides the devices' battery health status.

• Device Guard: Provides details on devices' virtualization-based security.

• Disk: Provides details on devices' disk space and capacity.

• Intune Cert: Provides details on Intune management certificate expiry.

  

To run a report:

1. On the Reports tab, select the report you wish to run.

2. In the Filter & Search pane, apply available filters to narrow down the report information.

   • You can also enter specific search terms in the Search box.

   The report results are displayed in the right pane.

3. In the report view:

   • Select a device row to view detailed information about that device.

   • Select Export to export the data as a CSV file.