Co-mgmt questions: Intune already knows the last time the CM client communicated to the MP as it's listed in the general device blade. How do we report on this? I'd like to identify machines that have possibly fallen off of CM management due to various reasons (usually certificate). My plan is to make a security group off of these reports and send the CM agent reinstall app to it. It would be easier if MS had a fix it button for us, but giving us the ability to report on this would be a great start.