Microsoft Intune Autopilot Event Monitor Reference Guide

Monitors Windows Autopilot enrollment status and deployment readiness using Microsoft Intune.

notitie

Overview

The Microsoft Intune Autopilot Event Monitor checks enrolled devices and their Autopilot deployment states. It helps detect provisioning issues, missing profiles, and onboarding states that require attention.

info

Use Cases

• Identifying devices that are not assigned to an expected Autopilot profile
• Receiving early alerts for enrollment and provisioning failures
• Tracking Autopilot readiness across new endpoint rollouts

Monitoring Options

This event monitor provides the following options:

• Alert with [Info/Warning/Error/Critical] if Azure cannot be contacted.
• Alert with [Info/Warning/Error/Critical] if the device is not found in Microsoft Intune.
• Alert with [Info/Warning/Error/Critical] if the device is not registered in Windows Autopilot.
• Alert with [Info/Warning/Error/Critical] if the deployment profile is missing.
• Alert with [Info/Warning/Error/Critical] if enrollment status shows failure.
• Alert if the provisioning state is not equal to a selected status.

Authentication and Security

Step 1: Create an App Registration

Create an app registration in Azure and add it to the authentication profile used by this event monitor.

Step 2: Assign Required Permissions

Grant the following Microsoft Graph permissions:

• User.Read
• Organization.Read.All
• DeviceManagementManagedDevices.Read.All
• DeviceManagementServiceConfig.Read.All

Protocols

• HTTPS

Data Points

This event monitor generates the following data points:

Data Point	Description
Autopilot Devices Found	Number of devices returned from Windows Autopilot.
Devices Without Profile	Number of devices without an assigned deployment profile.
Enrollment Failures	Number of devices with failed enrollment/provisioning state.
Pending Provisioning	Number of devices currently in a pending provisioning state.

Sample Output