Need to know how to install configuration manager to be able to read Intune logs.

Question

I am needing to read the logs for an Intune PowerShell script that I set up, that is failing because it says writing to the folder is denied. I know it is a permissions issue since the users are not admins. Have told it to use the system permissions, but still the same issue. My ask is, is there a way to view the logs without having to setup configuration manager. If there isn't, below is what I have tried, and I am getting nowhere since the documentation is presuming the first step of having the basic configuration manager set up from what I have seen from multiple Microsoft documents.

I find articles like https://learn.microsoft.com/en-us/mem/configmgr/core/understand/microsoft-endpoint-manager-faq which says to view the logs in a friendly view to install Configuration Manager and use that. The instruction for installing CM says to install it from the site server or from a CD, but I don't know what the site server is, and no idea of what CD they are talking about.

Is there a way to just get the capability to read Intune logs in a simple layout since the raw version is just a ton of lines of text in a notepad like file, without having to build out some major thing?

Things like this in https://learn.microsoft.com/en-us/mem/configmgr/core/servers/deploy/install/setup-downloader?source=recommendations where it says run setup downloader but doesn't tell you were to get the download are not helpful if there are no setup files. I found something on GitHub, but it looked more for a new computer setup.

If I go into Endpoint Manager/reports (https://endpoint.microsoft.com/?ref=AdminCenter#view/Microsoft_Intune_Enrollment/ReportingMenu/~/Overview) and try to run the log analyzer it says I need an Azure subscription, which I do, though guessing it is an add-on of some type that I need.

Answer 1

@Jon Mercer, Thanks for the reply. For the CMTrace tool, it is one tool of Configuration Manager. Currently, based on my research, I didn't find it can download directly on the official document. To get this, you can download the Configuration Manager from the Evaluation center:

https://www.microsoft.com/en-us/evalcenter/evaluate-microsoft-endpoint-configuration-manager

Then you can find the CMtrace.exe after unzip the install file:

https://learn.microsoft.com/en-us/mem/configmgr/core/support/cmtrace#locations

For our Intune issue, I notice the script needs to be run under system account. To manual test on the device with system account, we need to use PsExec tool

https://learn.microsoft.com/en-us/sysinternals/downloads/psexec

For log analysis, it will be a little complex, You can consider opening case to help you in a more efficient way. Here is a link with the steps to open case for your reference:

https://learn.microsoft.com/en-us/mem/get-support

Hope it can help.

Answer 2

@Jon Mercer, Thanks for posting in Q&A.

To clarify your issue, I would like to collect the following information:

1. Please confirm if the logs for an Intune PowerShell script is the IntuneManagementExtension log, Or it means there's command needs to read logs in PowerShell script, but it is failed.
2. For PowerShell script we deployed via Intune, we need to ensure it can run successfully on the device manually before deploying it. Please confirm if the script can run successfully on the device side。

3, How did we configure the PowerShell script in Intune? Please get a screen shot.

Meanwhile, for the Configuration Manger, this is not needed. This is another product. And the article means if you want to read the log like IntunemanagementExtension log in a more friendly way, you can choose the cmtrace tool to open it. Actually, notepad can also open the log to read.

Please check the above information and if there's any update, feel free to let us know.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.