You can now better find and troubleshoot devices that aren’t reporting Windows update progress in Microsoft Intune reports. It might not have been evident before, but devices that aren’t sending diagnostic data to Microsoft can’t show detailed device status in the deployment process.
Two new alerts will give you better insights into these issues: DeviceDiagnosticDataNotReceived and MinimumOSBuildNotMet. You can find them integrated into Intune reporting just as they are in Windows Update for Business reports and Log Analytics. Let’s learn what these alerts mean, where to find them, and how to troubleshoot and remediate the underlying issues.
Have you ever faced any of the following issues while monitoring Windows update deployment?
These issues occur when a device fails to communicate client data. Some of the top causes are device inactivity or misconfigured client data settings. Another possible cause is that the device may not be on the required minimum OS build to qualify for report enrollment. You can gauge deployment success and monitor the overall health of your organization more effectively with device compliance alerts related to diagnostic data.
Whatever reporting tool you use, it’s critical to see the true state of devices in your organization. Windows diagnostic data allows you to pinpoint a device’s progress through the deployment process and detect any issues that trigger alerts. Alerts provide details about what prevents devices from updating and give clear guidance on resolving these issues with targeted solutions. Here are the insights you can get with the two new alerts and the existing alert in Microsoft Intune.
The DeviceDiagnosticDataNotReceived alert identifies devices that fail to send diagnostic data and thus their client status appears incorrectly in reports.
Note: The DeviceDiagnosticDataNotReceived alert does not mean that the device is incapable of installing the updates offered to it. The report simply cannot represent the true state of the device since it’s dependent on receiving diagnostic data from the device. |
The MinimumOSBuildNotMet identifies a subset of missing devices that fail to qualify for report enrollment.
Important: The minimum OS build requirement is the January 2023 non-security update or later cumulative update for clients to enroll into Intune reports and Windows Update for Business reports. |
A related alert that you might be more familiar with is InsufficientUpdateConnectivity. While not new, it complements the understanding of the bigger picture.
The three alerts are mutually exclusive. An active DeviceDiagnosticDataNotReceived alert only provides a general overview of devices missing from reports for a variety of unspecified reasons. Devices with a known reason, such as not meeting the OS build prerequisite, would be instead identified by an active MinimumOSBuildNotMet alert. Likewise, the InsufficientUpdateConnectivity alert is more specific than the generic alert. These specific alerts would never appear as active together with DeviceDiagnosticDataNotReceived on the same device.
Let’s see how you can use these alerts in Microsoft Intune just as you do in Windows Update for Business reports or Log Analytics.
Whether you're managing a few devices or thousands, Microsoft Intune helps you ensure that Windows update deployments run smoothly. Imagine that you want to monitor groups of devices associated with specific deployment policies. You can do so for the active devices that meet the prerequisites for enrollment to reports and consistently communicate diagnostic data. Here's how you can locate and troubleshoot these scenarios with the new alerts.
Like all other alerts in Intune, view these alerts in the main status report and failure reports in Intune.
Failure reports bring together devices under specific policies that have errors or alerts. To view the failure reports:
Using Windows Update for Business reports? You can also find these alerts there using Azure Workbooks or Log Analytics. Both alerts are currently available in the Azure Workbook Overview tab, within the Total devices KPI card. Just select View details and then Missing devices, as shown.
Use the following query if you’d like to view the data from the Windows Update for Business reports workbooks in Log Analytics:
UCDeviceAlert
| where AlertSubtype in ("DeviceDiagnosticDataNotReceived", "MinimumOSBuildNotMet")
| project DeviceName, AzureADDeviceId, AlertSubtype, StartTime, AlertData, Description, Recommendation
For more guidance on these reporting options, follow the instructions in Missing devices in Windows Update for Business reports?.
Please ensure that devices with these alerts are active and correctly configured to send Windows diagnostic data. To do that, verify that the following settings are configured correctly:
Important: If you have not enabled Windows diagnostic data or have other policies that disable this data for all devices, you’ll likely see this alert for all devices in your tenants. This is intentional. If you don’t intend to enable these settings, you can still use the reports to know when the update was made ready for devices or any service side alerts, like for Microsoft Entra-registered or other devices that don’t meet prerequisites for Windows Update for Business deployment service. |
Collecting and utilizing diagnostic data is essential for enhancing overall system reliability and efficiency.
Gain a more comprehensive view of Windows update deployment success using the two new alerts, DeviceDiagnosticDataNotReceived and MinimumOSBuildNotMet. This new capability within Microsoft Intune builds on the existing functionality in Windows Update for Business reports and Log Analytics, offering even more flexibility and control over your device management strategy.
In the spirit of continually making improvements, we’re happy to help you gain more insight into the subset of devices that were not easily identifiable before. Try out these new reporting enhancements and check out these additional resources:
Continue the conversation. Find best practices. Bookmark the Windows Tech Community, then follow us @MSWindowsITPro on X and on LinkedIn. Looking for support? Visit Windows on Microsoft Q&A.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.