Monitoring those clients requires a separate console, but we do at least get information back from the end points.įortunately, this is straightforward and I’ll walk through the process here. To enable monitoring with Intune MDM clients, we can set up an OMS subscription separately and deploy the OMS agent to the target PCs. I’ve been able to identify the Workspace ID, but unfortunately I can’t find the authentication key to allow the client to connect to OMS. I had hoped to be able to grab the OMS Workspace ID from a machine managed with the Intune Client and use that to connect the OMS agents installed on an MDM managed machine to see whether I can pass the update and endpoint protection data from those clients. This is seamless to the administrator which means no additional steps taken other than setting up the Intune subscription. Monitoring for MDM Clientsįor PCs managed with the Intune client, Intune leverages the Microsoft Operations Management Suite (OMS), or at least Log Analytics, to gather this data and present it from within the Intune console. With the current differences in the way that Intune manages Windows 10 PCs, you’re forced to make a choice between manageability and visibility. This information being reported from clients is really important to have better visibility into the current status of those machines across your estate.

Intune with devices management via MDM only In an environment with machines managed via the MDM channel only, these tiles are missing: Intune with devices management via the client and potentially MDM See the Updates and Endpoint Protection tiles in the screenshot below. If we look at an environment that uses the Intune Client for management, Windows update and Endpoint Protection status are reported.

We can see the difference in the Intune management console for environments managed with the Intune client vs.

The reason for this is that the MDM channel in Windows 10 does not report status for these components, while the Intune Client installs the Microsoft Management Agent and reports this status via the Microsoft Operations Management Suite (OMS). Two key monitoring pieces that you lose with going to MDM instead of the Intune Client is the ability to report on Windows updates and Endpoint Protection (Windows Defender) status. In a previous article, I wrote about the differences between managing Windows 10 PCs with the Intune Client vs.

Mdm for windows