Surface Scorecard in the Surface Management Portal

  • Applies to: Windows 11, Windows 10

The Surface Scorecard in the Surface Management Portal provides IT administrators with a consolidated view of Surface device fleet health. It aggregates device-level signals into category scores and an overall fleet score, enabling you to quickly identify areas that need attention and prioritize actions across your organization's Surface devices.

What is Surface Scorecard?

Surface Scorecard is a fleet-level analytics experience that moves beyond raw device counts and metrics to deliver actionable, prioritized insights. Instead of evaluating individual devices one at a time, the Scorecard provides:

  • One overall fleet score representing the aggregate health of your Surface devices. Four category scores covering Security, Coverage, Device Reliability, and Device Performance.
  • Weighted scoring that ensures high-impact issues are prioritized over lower-priority signals.
  • The Scorecard is designed for IT administrators, providing at-a-glance visibility into fleet readiness.

Prerequisites

Before you can use Surface Scorecard, ensure the following requirements are met:

  • Your organization has an active Microsoft Intune subscription.
  • At least one Surface device is enrolled in Intune.
  • Intune policies are configured and applied to enrolled Surface devices.
  • You have the appropriate admin role assigned. To learn more, see Assign admin roles for Surface portals.

Optional licensing for full scoring

Some Scorecard parameters require additional licenses. If a required license isn't present, the parameter is excluded from scoring rather than penalizing your fleet score:

Parameter Required license
Battery health Intune Advanced Analytics
Resource performance Intune Advanced Analytics

Access Surface Scorecard

  1. Sign in to the Microsoft Intune admin center.
  2. Select All services > Surface Management Portal.
  3. Navigate to Analytics on the left-hand navigation menu.
  4. The Scorecard dashboard displays your overall fleet score and category breakdowns.

Score categories

Surface Scorecard evaluates your fleet across four primary categories. Each category contains one or more parameters that contribute to the category score.

Security

Security parameters evaluate and lists the essential protections required for secure device operation.

Parameter What it measures Criticality
Encryption status Whether BitLocker disk encryption is enabled High
Compliance status Whether the device meets Intune compliance policies High
Windows 11 OS update Whether the device is on the latest supported OS version Medium

Coverage

Coverage parameters measure support and warranty or protection plan availability of your devices.

Parameter What it measures Criticality
Coverage status Whether the device has active warranty or protection plan coverage High

Note

Although coverage signals might appear in multiple places in the portal, the scoring model treats coverage as a single metric to prevent double-counting.

Device Reliability

Reliability parameters track device reliability over time by monitoring hardware health signals.

Parameter What it measures Criticality
Battery health Battery capacity and runtime health aggregated from Intune Advanced Analytics High
Storage availability Whether the device has critically low free storage Low

Note

Battery health data is sourced from Intune Advanced Analytics and is based on a rolling 14-day aggregate of battery capacity and runtime scores. The Surface Management Portal consumes the health status directly from Intune and doesn't recalculate it. An Intune Advanced Analytics license is required for this parameter to appear.

Device Performance

Performance parameters evaluate operational efficiency and day-to-day usability.

Parameter What it measures Criticality
Resource performance Whether CPU and memory performance meets expected goals High
Startup performance Whether the device starts up within expected time period Medium

How scoring works

The Scorecard uses the number of detected (unhealthy) devices for each parameter to derive scores. For every parameter, the portal tracks how many devices are detected with an issue and how many total devices are applicable for that parameter.

Weighting and criticality

Each parameter is assigned to a criticality level that determines its weight in the overall scoring:

Critical level Weight
High 3
Medium 2
Low 1

Score calculation

For each parameter, the Scorecard determines the percentage of detected devices and the percentage of healthy devices. The total device count might differ across parameters, as not all devices are applicable to every parameter.

% Detected = (Detected Devices / Total Applicable Devices) × 100 % Healthy = 100 − % Detected

The category score is then calculated as the weighted average of the healthy percentages for all parameters in that category:

Category Score = Σ(% Healthy × Weight) / Σ(Weight)

The overall fleet score follows the same formula across all active parameters in all categories.

Score health bands

Scores are grouped into health bands indicating overall fleet status.

Score range Health state What it means
Above 50 Healthy Your fleet is performing well. Continue current management practices.
25-50 Needs Attention Some devices require action. Review affected devices and prioritize remediation.
Below 25 Critical Significant issues detected. Immediate attention is recommended.

Example: How your fleet score is calculated

The following example demonstrates how the Scorecard calculates category and overall fleet scores. The total device count varies per parameter because devices with unknown status or missing configuration are excluded from each parameter’s count.

Step 1: Determine detected devices and healthy percentage

Parameter Weight Detected Total % Detected % Healthy
Devices not encrypted 3 10 66 15.15% 84.85%
Devices not compliant 3 20 66 30.30% 69.70%
Devices need system updates 2 2 66 3.03% 96.97%
Coverage expired 3 27 55 49.09% 50.91%
Battery health 3 10 60 16.67% 83.33%
Devices with < 10% storage 1 25 66 37.88% 62.12%
Resource performance 3 15 58 25.86% 74.14%
Startup performance 2 10 58 17.24% 82.76%

In this example, battery health and performance parameters have fewer total devices because not all devices are reported health data to Intune Advanced Analytics.

Step 2: Calculate category scores

Each category score is the weighted average of its parameters’ healthy percentages.

Category Σ(% Healthy × Weight) Σ(Weight) Category Score
Security (84.85×3) + (69.70×3) + (96.97×2) = 657.58 8 82.2
Coverage (50.91×3) = 152.73 3 50.9
Reliability (83.33×3) + (62.12×1) = 312.11 4 78.0
Performance (74.14×3) + (82.76×2) = 387.93 5 77.6

Step 3: Calculate overall fleet score

Σ(% Healthy × Weight) = 657.58 + 152.73 + 312.11 + 387.93 = 1,510.35 Σ(Weight) = 3 + 3 + 2 + 3 + 3 + 1 + 3 + 2 = 20

Overall Fleet Score = 1,510.35 / 20 = 75.5 (Healthy)

Since 75.5 is above 50, the fleet status is Healthy. However, the Coverage category at 50.9 is the lowest and close to the Needs Attention threshold, indicating that warranty and protection plan coverage needs the most attention.

Tip

Focus on improving parameters with High criticality first, as they have the greatest impact on your overall score. In this example, improving coverage (50.9%) and device compliance (69.7% healthy) would have the biggest effect.

Supporting insights

In addition to scored parameters, the Scorecard dashboard surfaces contextual insights that don't affect scoring but help with decision-making:

  • Total Device Number - Total Surface devices in your tenant
  • Inactive Device Number - Devices inactive for 30+ days
  • Optional Coverage Eligible - Devices eligible for optional protection plans
  • Warranty Expiring in 30 Days - Devices with coverage expiring soon

Related content

  • Last updated on