End User AutoPilot reset themselves / lack of auditing of such action in DMAC

[DBR14]

Trying to figure out if an end-user managed to do this to themselves via the login screen or if some tier 1 screwed up. I've checked the audit within DMAC (nothing) and all that's on the device management screen is that the reset was kicked off at 3:25PM but nothing to indicate who (which is really really dumb IMO).

[#2]

You would to except to see a nice name ..

Also nothing in the device actions log?

https://endpoint.microsoft.com/#blade/Microsoft_Intune_DeviceSettings/DevicesMonitorMenu/deviceActio...

[#3]

Rudy,

Good call, I didn't think to look at that spot, assumed since it showed nothing on the main managed area that it would also be reflected as such there. I don't get why that doesn't reflect the same within the manage devices area.

Had what I need, only question now is it was def a tier1 tech that kicked it off, but he swore up and down he didn't.