The Intune team is aware of several policy reporting scenarios that require additional consideration in the Microsoft Endpoint Manager admin center. In this post, we will address some of these issues and highlight some upcoming improvements to Intune policy reports.
Common issues with Intune policy reports
A policy report shows two records for the same device: one with a ‘user’ account and one with a ‘system’ account.
Policy reporting records are based on the configured assignment and the enrollment of the devices checking in. Intune will surface a unique record for the user checking in to the device to receive the policy. When check-ins happen on a device with varying user presence, this can result in multiple reporting records for the same policy. This typically happens when the device (system) automatically checks in if the user hasn’t checked in for 8 hours, or during Windows Autopilot scenarios.
How we plan to enhance this: We plan to add more reporting options so you can clearly understand when and which user check-ins happened on the device with a policy status. With this, we plan to provide views to surface an additional view that does not have duplicate entries per device.
A policy report shows devices stuck in pending status.
When a device has a "pending” status, it means the device has not checked in to receive the policy. There is a known scenario where sometimes the device status can still show as “pending” in a report even after the policy has been delivered to the device. To remediate this, try syncing the device or confirming the policy has been applied to the device to ensure that report data gets updated to accurately reflect device status.
How we plan to enhance this: We are working to ensure our policy reports show the latest set of accurate data for targeted devices. For devices in pending state, we are verifying our calculation of this data is correct and consistent throughout the console.
The data in report lists and summary charts isn’t consistent.
The policy report lists and summary pages update on a different cadence, which can lead to inconsistencies in the reported data. In addition, the summary doughnut charts aggregate based on the worst case of a targeted device for a policy. This can result in the summary numbers showing different totals than the number of entries in the full detailed list.
How we plan to enhance this: We are working on improvements to ensure the summary and list reports are always consistent. In addition, we are looking to change the way we aggregate the summarized charts to reflect the same number of entries as in the list view.
Common issues with Intune policy reports
We are working towards having consistent, accurate information across all the policy reports in the console. This includes device configuration profiles (including settings catalog), security baseline profiles and endpoint security profiles. The new reports will have better performance and capabilities for search, sort, filtering, improved paging, and export. We are looking to incorporate better drill-down capabilities and navigational flows with user experience.
To learn about new reports we released earlier this year, see Introducing new policy reports & more in Microsoft Endpoint Manager reporting. To stay up to date with these and other updates, see What's new in Microsoft Intune and Features in development.
We will continue to update this post as new information becomes available. If you have questions or comments for the Intune team, reply to this post or reach out to @IntuneSuppTeam on Twitter.
