Use the troubleshooting dashboard to help users at your company

The troubleshooting pane lets help desk operators and Intune administrators view user information to address user help requests. Organizations that include a help desk can assign the Help desk operator role to a group of Intune users. The help desk operator role can use the Troubleshooting + support pane help end users.

The Troubleshooting + support pane provides three options:

  • Guided scenarios to provide a customized series of steps centered around one end-to-end use-case.
  • Troubleshooting to help determine any issues with Assignments, App protection status, and Enrollment failures.
  • Help and support to provide global technical, pre-sales, billing, and subscription support for device management cloud-based services related to Intune.

Details about the issue and suggested remediation steps can help administrators and help desk operators troubleshoot problems. Certain enrollment issues aren't captured and some errors might not have remediation suggestions.

Note

For steps on adding a help desk operator role, see Role-based administration control (RBAC) with Intune

When a user contacts support with a technical issue with Intune, the help desk operator enters and finds the user's name. Additionally, the help desk operator can filter by device if the user has multiple managed devices.

The Troubleshooting pane provides the following tabs to quickly narrow the troubleshooting focus:

  • Summary - Provides specific counts of issues related to policy, compliance, app protection, applications, devices, roles, and scopes.
  • Devices - Provides details for devices, such as OS, OS Version, Intune compliance, and last check-in.
  • Groups - Provides details for groups, such as membership type.
  • Policy - Provides policy details, such as assignment, type, platform, and last modified.
  • Applications - Provides app install status, assigned, platform, type, and last modified.
  • App protection policy - Provides the name, platform, and enrollment details for app protection policies.
  • Updates - Provides the name, platform, and update type.
  • Enrollment restrictions - Provides the policy type, name, platform, and device limit.
  • Diagnostics - Provides the device name or application, platform, created date, and diagnostic log.

View user troubleshooting details

In the Troubleshooting pane provides specific details for each Intune end-user. User information can help you understand the current state of users and their devices.

  1. Sign in to Microsoft Endpoint Manager admin center.
  2. Select Troubleshooting + support > Troubleshoot.
  3. Find and select a User by entering a display name or email.
  4. If the user has multiple devices, filter by Device.
  5. Review the provided information to help troubleshoot end-user issues.

Areas of the troubleshooting dashboard

You can use the Troubleshooting + support pane to review a variety of managed user and device information.

Intune troubleshooting dashboard

Summary

The Summary tab provides overall details for the user who are managed by Intune.

Column Description
Policy The status of the policies available for the user or device.
Compliance The compliance status for the user or device.
App protection App protection details.
Applications The state of the applications for the user or device.
Devices The status of the device(s) related to the user.
Role and scope The role and scope for the user.

Devices

Devices managed Intune.

Column Description
Name The name of the device.
Managed by Identifies how the device is managed. For more information, see Available details by management type.
Ownership The type of device ownership (Company, Personal, or Unknown).
Intune compliant Identifies whether the device is compliant with Intune. Should be Yes. If No is shown, there may be an issue with compliance policies, or the device isn't connecting to the Intune service. For example, the device may be turned off, or may not have a network connection. Eventually, the device becomes non-compliant, possibly after 30 days. For more information, see Use compliance policies to set rules for devices you manage with Intune.
AAD compliant Identifies whether the device is compliant with Azure Active Directory (AAD). Should be Yes. If No is shown, there may be an issue with compliance policies, or the device isn't connecting to the Intune service. For example, the device may be turned off, or may not have a network connection. Eventually, the device becomes non-compliant, possibly after 30 days. For more information, see Use compliance policies to set rules for devices you manage with Intune.
App lifecycle status Denotes whether an app install failure or success has occurred on the individual device.
OS The Operating System installed on the device.
OS version The Operating System version number of the device.
Last check-in The timestamp of the last time the device checked in.

Groups

The Groups tab provides the group membership of all Azure AD groups for a specific managed device. For related information, see Device group membership report.

Column Description
Name The name of the group.
Object ID The Object ID is used by Azure Active Directory. Endpoint Manager commonly refers to them as Group ID.
Membership type Provides how you assign and add users. Assigned denotes you manually assign users or devices to the group, and manually remove users or devices. Dynamic User denotes you create membership rules to automatically add and remove members. Dynamic Device denotes you create dynamic group rules to automatically add and remove devices.
Direct or Transitive Identifies whether the device is a direct member or a transitive member.

Policy

The policies applied to devices.

Column Description
Name The name of the device policy.
Assignment Identifies the assignment status of the device.
Type The type of policy.
Platform The type of device platform.
Last Modified The timestamp of the last time the device synchronized with Intune.

Applications

The managed applications on the device.

Column Description
Name The name of the application.
App install status The installation status of the app.
Assigned Provides whether the app has been assigned.
Platform The type of device platform.
Type You can choose an assignment type for each app. Available denotes that users install the app from the Company Portal app or website. Not Applicable denotes that the app is not installed or shown in the Company Portal. Uninstall denotes that the app is uninstalled from devices in the selected groups. Available with or without enrollment denotes that this app is assigned to groups of users whose devices are not enrolled with Intune.
Last modified The timestamp of the last time the device synchronized with Intune.

App protection policy

An app protection policy is available to mobile apps that integrate with EMS technologies. These policies give a baseline of protection for your corporate data when it is downloaded to mobile apps, including the Office mobile apps.

Column Description
Name The name of the app protection policy.
Platform The platform of the device.
Enrollment The enrollment status of the device.

Updates

The update report provides an overall view of updates that are deployed to users. This information also provides filtering, searching, paging, and sorting.

Column Description
Name The update name.
Platform The platform of the device intended for the update.
Update type The type of update.

Enrollment restrictions

Enrollment restrictions are use to prevent (block) personally owned devices from enrolling, you will need to add the devices using corporate device identifiers, prior to enrollment.

Properties

Column Description
Policy type The type of policy.
Name The name of the policy.
Platform The platform of the device.
Device limit The enrollment restriction to limit the number of devices a user can enroll in Microsoft Intune.

Diagnostics

Diagnostics for devices and applications.

Column Text
Device name or application The name of the device or application.
Platform The platform of the device.
Created date The timestamp of when the event occurred.
Diagnostic log The diagnostic log file.

Collect available data from mobile device

Use the following resources to help collect device data when troubleshooting user's device issues:

You can access and download user-submitted logs under Diagnostics.

Next steps

You can learn more about Role-based administration control (RBAC) to define roles in your organizational device, mobile application management, data protection tasks. For more information, see Role-based administration control (RBAC) with Intune.

Learn about any known issues in Microsoft Intune. For more information, see Known issues in Microsoft Intune.

Learn how to create a support ticket a get help when you need it. Get support.