About the "High Confidence" devices: You can have a look at BucketConfidenceData.json inside C:\Windows\System32\SecureBootUpdates\BucketConfidenceData.cab which will contains a list of model bucket hashes grouped by OEM name. As these are hashes, you cannot deduce the model names from them (and probably even Microsoft cannot if they only keep the hashes in their telemetry data). Also, as of January 2026 update, there are almost a million hashes in there.

Here is a list grouped by vendor (as you see, some vendors are unsure how to write themselves):

• Generic OEM (877734 models)
• Acer (10690 models)
• ASUS (2017 models)
• ASUSTeK COMPUTER INC. (1385 models)
• ASUSTeK Computer Inc. (18 models)
• ASUSTeK Computer INC. (1 model)
• Dell (5 models)
• Dell Inc. (411 models)
• Dynabook Inc. (565 models)
• Hewlett-Packard (5 models)
• HONOR (95 models)
• HP (1001 models)
• LENOVO (50008 models)
• LG Electronics (2668 models)
• LG Electronics Inc. (2 models)
• Micro-Star International Co., Ltd (229 models)
• Micro-Star International Co., Ltd. (5605 models)
• Microsoft (3 models)
• Microsoft Corporation (35 models)
• MSI (129 models)
• Panasonic Connect Co., Ltd. (7 models)
• Panasonic Corporation (22 models)
• SAMSUNG ELECTRONICS CO., LTD. (4081 models)
• TOSHIBA (326 models)
• Toshiba (8 models)

As nobody knows which vendor don't give themselves a name in the data sourced by Microsoft, you cannot even tell if your vendor is included ☹️

Thanks for your participation! Panelists covered your question about Intune at 42:14 during the live AMA.