Stay in touch
Be the first to know!
Receive the latest additions, inspiring blogging and coding tips:
Name can't be empty.
This email address is not valid.
One option must be checked
Dark mode
There are 0 results matching
Published by · Jun 25, 2024 tools · 2 mins read
Offboarding macOS Devices from JAMF in Bulk using the JAMF API with a bash script ...
See MorePublished by · Jun 25, 2024 tools · 2 mins read
Automating Microsoft Cloud License Assignment and Reporting with PowerShell and Slack for Enterprise Mobility and Security E3 ...
See MorePublished by · Jun 18, 2024 tools · 2 mins read
Setting Configuration Manager ConfigMgr Implicit Uninstall Flag with PowerShell for Required Application Deployments ...
See MorePublished by · Jun 11, 2024 configmgr · 2 mins read
Get Next Configuration Manager Maintenance Window from a Schedule Token with Offset Days using an SQL Function. ...
See MorePublished by · Jun 3, 2024 tools · 2 mins read
Add, Remove, or Replace Windows Rights Assignment with our PowerShell Tool. ...
See MorePublished by · May 28, 2024 tools · 2 mins read
Get and Report Windows Rights Assignment with our PowerShell Tool. ...
See MorePublished by · May 22, 2024 tools · 1 mins read
Get Windows Rights Assignment with our PowerShell Tool. ...
See MorePublished by · Apr 11, 2024 tools · 2 mins read
Onboard Ubuntu Linux devices to Microsoft Intune using a bash script. Installs prerequisites and starts the user-driven enrollment. ...
See MorePublished by · Apr 11, 2024 tools · 2 mins read
Onboard macOS devices to Microsoft Intune using a bash script that initiates the process. Optionally, the script converts mobile accounts, resets the FileVault key, and removes ...
See MorePublished by · Jan 23, 2024 tools · 3 mins read
Rename Intune Devices by setting a Prefix or using a User Attribute as Prefix. Supports Windows, macOS, and Linux ...
See MorePublished by · Dec 8, 2023 intune · 5 mins read
A Comprehensive Guide to Locations, Interpretation, and Configuration of Intune Logs ...
See MorePublished by · Aug 14, 2023 configmgr · 2 mins read
Use the Configuration Manager Console Builder, to add Collection Membership View to the Device Node ...
See MorePublished by · Aug 3, 2023 tools · 3 mins read
A Configuration Manager Dashboards solution with Reports for Software Updates, Bitlocker and more ...
See MorePublished by · Aug 3, 2023 tools · 2 mins read
Streamline your WMI Namespace, Class, and Instance Management with our PowerShell Module ...
See MorePublished by · Jul 14, 2023 configmgr · 1 mins read
Configuration Manager detailed, filterable port documentation as an excel document ...
See MorePublished by · Jul 14, 2023 configmgr · 3 mins read
Configuration Manager TFTP Block Size and TFTP Window Size Correct Configuration ...
See MorePublished by · Jun 18, 2023 tools · 4 mins read
Cleaning the Configuration Manager Client Cache the Right Way with PowerShell and Configuration Baselines ...
See MorePublished by · Jun 18, 2023 tools · 2 mins read
Cleaning Windows and Configuration Manager Caches for Configuration Manager Build and Capture Task Sequence or Standalone Use ...
See MorePublished by · Jun 17, 2023 tools · 1 mins read
Proactively repair corrupted Windows Update Database with Powershell and Configuration Manager ...
See MorePublished by · Mar 31, 2023 tools · 3 mins read
A Complete SQL Products reporting solution using Configuration Manager ...
See MorePublished by · Jan 28, 2023 configmgr · 1 mins read
Replace hardcoded application version in scripts, with the Configuration Manager Application Version ...
See MorePublished by · Jan 28, 2023 tools · 3 mins read
Managing Certificates with Configuration Manager and PowerShell by using just the Public Key ...
See MorePublished by · Jan 7, 2019 reports · 2 mins read
List Device Boundaries and Network Information with Configuration Manager ...
See MorePublished by · Sep 9, 1980 help · 5 mins read
Publishing Documentation for MEM.Zone ...
See MoreMicrosoft Intune as a cloud service has many moving parts, and as with all things IT-related, the truth is always in the logs.
This post will delve into the log retrieval specifics for Windows, macOS, and Linux when managed through Intune.
Intune can gather diagnostic files automatically if Autopilot fails, retaining these logs for 28 days. However, they’re unavailable if diagnostics are disabled.
In some special circumstances, the logs may fail to upload to Intune.
MDMDiagnosticsTool is a versatile tool that can access multiple log areas and output them in various formats. Bwlow are some examples of how to use it.
C:\WINDOWS\system32\MdmDiagnosticsTool.exe -out <Output_Folder_Path>
C:\WINDOWS\system32\MdmDiagnosticsTool.exe -area <Area_Name1;Area_Name2...> -cab <Output_cab_File_Path>
C:\WINDOWS\system32\MdmDiagnosticsTool.exe -area <Area_Name1;Area_Name2...> -zip <Output_zip_File_Path>
Currently supported areas:
All currently available areas are stored in the HKLM\SOFTWARE\Microsoft\MdmDiagnostics\Area registry key.
C:\WINDOWS\system32\MdmDiagnosticsTool.exe -xml <Xml_File_Path> -zip <Output_zip_File_Path> -Server <MDM_Server>
There’s very little information on this topic, and we couldn’t find a way to use this option but it’s likely that a specially crafted xml file needs to be used.
Windows Autopilot Diagnostics Tool is a fabulous community tool that we highly recommend, that is of tremendous help when troubleshooting Autopilot issues.
## Install the tool
Set-ExecutionPolicy -ExecutionPolicy 'Unrestricted'
Install-Script -Name Get-AutopilotDiagnostics -Force
## Gather logs
.\ Get-AutopilotDiagnostics.ps1 -online
Actions are frequently logged in IntuneManagementExtension.log, leading to rapid overwriting of the file. There have been a few attempts from Microsoft to filter out some of the events but they all shave been reverted.
Using the script below, the log size can be changed to a more appropriate size.
All Intune Management Extension logs are stored in C:\ProgramData\Microsoft\IntuneManagementExtension\Logs, below are some of the most important ones.
AgentExecutor.log
Contains Powershell traces for each Platform Script configured in the Intune Console.
HealthScript.log
Contains Powershell traces for each Remediation Script configured in the Intune Console.
ClientHealth.log
Contains client health activities for the IME, like Check Service Status_ or Sent Agent Status Reports.
Eventlogs
Intune also logs information in the Windows Event Logs under Applications and Services Logs –> Microsoft –> Windows –> DeviceManagement-Enterprise-Diagnostics-Provider_
Powershell scripts and the output will be stored locally until execution is complete, and there are a few quirks to be aware of.
## The _<ScriptGUID>_ can be found in the script URL in the Intune Portal.
HKLM\Software\Microsoft\IntuneManagementExtension\Policies\<UserGUID>\<ScriptGUID>_ registry key.
## The _<ScriptGUID>_ can be found in the script URL in the Intune Portal.
HKLM\SOFTWARE\Microsoft\IntuneManagementExtension\SideCarPolicies\Scripts\Execution\UserGUID\ScriptGUID
HKLM\SOFTWARE\Microsoft\IntuneManagementExtension\SideCarPolicies\Scripts\Reports\UserGUID\ScriptGUID
The script transcript is stored in the IntuneManagementExtension.log and can contain sensitive information like passwords!
There are multiple ways to collect logs from Intune-managed devices, and we’ll cover the most common ones.
Cloud log collection is the most straightforward method, but it requires the device to be online and available in the Intune Portal.
Local log collection is the most versatile method, but it requires the device to be available.
Check the MDMDiagHTMLReport.html to see all settings and enforced settings applied to the device.
OOBE log collection is very useful, but it requires the physical access to the device.
You can access local diagnostic tools, logs, and USB sticks with third-party tools like Fiddler from this location.
Some information is directly available from the Intune Console, but the full logs are stored on the device.
Cloud log collection is a bit of an inconsistent experience as it requires some prerequisites, such as specifying the full, absolute log file path and depending on device availability.
Local log collection is the most versatile method, but it requires the device to be available.
# System logs
/Library/Logs/Microsoft/Intune
# User logs
~/Library/Logs/Microsoft/Intune
These locations are hidden by default, and there are multiple options to access them, here are a few:
Linux logs to the default OS log folder /var/log and its sub-folders, there are no Intune specific paths.
Thank you for your interest, we’ll get back to you as soon as possible!
Try againStay in touch
Name can't be empty.
This email address is not valid.
One option must be checked
Published by · Aug 14, 2023 configmgr · 2 mins read
Use the Configuration Manager Console Builder, to add Collection Membership View to the Device Node ...
See MorePublished by · Aug 3, 2023 tools · 3 mins read
A Configuration Manager Dashboards solution with Reports for Software Updates, Bitlocker and more ...
See More