Endpoint Analytics & Automation Guides

Applicability Rule: Gone but still there

3. July 20222. July 2026 jannikreinhard1 Comment

With the introduction of assignment filters, the value of applicability rules has diminished. With applicability rules you could define on which OS versions a configuration profile should work. Unfortunately, the ability to configure or delete applicability rules for some configuration profile types from the console has also been removed. It is to be expected that this can happen piece by piece for further types as well. In this blog post I want to show you how you can easily remove all applicability rules and switch to filters as soon as possible.

Convert Azure AD User and Device Groups with PowerShell

Convert Microsoft Entra ID User and Device Groups with PowerShell

3. July 20222. July 2026 jannikreinhard1 Comment

In your environment you have multiple groups to create assignments of an app or a configuration profile. If you later realize it would be better if this was not a device group but a user group, it is hard to change this without the user having an impact or you have big efforts. I have written a script that you can convert a user group into a device group or a device group into a user group based on the user assigned to a device or based on the devices assigned to the user.

PowerShell script to convert a user group to a device group

Copy Intune Discovered Apps in Log Analytics Workspace

1. July 20222. July 2026 jannikreinhard1 Comment

Working with Intune Discovered Apps is one of the easiest ways to understand what is really installed across your fleet. Intune offers the possibility to show per device not only the apps installed via Intune but also the apps discovered on the device (Control Panel apps). Since this view is relatively static and you only have a per device view here, it is difficult to make analyses of the complete environment, e.g.

to see which app is missing in the portfolio, since this is often installed by users themselves. Why don’t we use Log Analytics to have more options to work with this information? In this blog I want to show you how you can copy the Intune Discovered Apps into a workspace easily with a script.

Intune Discovered Apps inventory in Log Analytics Workspace

Daily Intune Device Reports via Logic Apps, Email & Teams

24. June 20222. July 2026 jannikreinhard

This step-by-step guide shows how to send a daily device report via Logic Apps, email and Teams. The flow combines Microsoft Graph queries, Azure Logic Apps, and your existing Microsoft 365 channels — no third-party reporting tool needed, and the whole pipeline runs on the Azure consumption plan for a few cents per month.

For an Intune admin it is always helpful to get an overview of the current status of their tenant and an overview of the count of devices in the field. In this blog I would like to explain how you can use Logic Apps to send you a detailed daily device report straight to your inbox and Teams channel.

Daily device report flow built with Azure Logic Apps

Azure Logic Apps workflow for daily Intune device report

Detect Slow Internet Breakouts with Endpoint Analytics

11. June 20222. July 2026 jannikreinhard

This post shows how to detect slow internet breakouts with Microsoft Endpoint Analytics. By collecting per-device internet performance data with Endpoint Analytics and correlating it with location and ISP, you can spot the offices and remote locations where the user experience is silently degraded — long before the support tickets start.

Users always complain that the network is slow. This can also be measured centrally using various network monitoring tools, and for a broader view on reporting options you can also take a look at Mastering Intune Reporting and Analytics. However, this monitoring can only provide complete insight if the user is actually onsite in the corporate network.

If the user is sitting in the home office and is connected to the internet via his own router, this is not always so easy. But there are also many other reasons why a user has a slow connection. It is not always due to the network. In this block I want to show you how you can test the speed of all clients regularly with a simple remediation script and upload it to a log analytics workspace to do some analysis.

If you want the official background, the Microsoft Learn Endpoint Analytics overview is a great starting point.

Azure Endpoint Analytics proactive remediation setup screen

Log Toast Notification Responses in Azure Log Analytics

26. May 20222. July 2026 jannikreinhard2 Comments

Writing toast notification responses into a Log Analytics workspace is a powerful way to capture real feedback from your users. It is useful after triggering a remediation action or for simply getting feedback from the user/customer to have a kind of survey. Contacting them by mail usually results in very poor response rates. It is much better to contact them directly via a popup. A similar approach can also be useful for user-facing notifications, for example when configuring Windows Update reboot notifications. How you can implement this with the help of a Remediation script and write the response in a Log Analytics workspace I will explain in this blog post.

Toast notification response sent to Log Analytics workspace

How to Align the Windows 11 Taskbar Left with Intune

2. August 20212. July 2026 jannikreinhard6 Comments

For many users, the centered taskbar in Windows 11 is unfamiliar. To make the transition a bit easier for users, we’ll take a look at how to align the Windows 11 taskbar to the left like in Windows 10.

Duplicate Device Configuration Profiles

21. July 202123. June 2026 jannikreinhard

If you need to Duplicate Device Configuration Profiles in Microsoft Intune, you already know how easy these profiles are to create and almost as easy to lose track of. Anyone who has run a tenant for more than a year knows the result: a long list of profiles with similar names, slight setting variations between them, and no clear answer to “which one is actually deployed and which one is a copy from a test that nobody ever cleaned up”.

Being able to Duplicate Device Configuration Profiles cleanly — for staged rollouts, test rings, or template-based deployment — is one of the operations where the admin portal is genuinely awkward. In this post I show two reliable ways to clone configuration profiles: the built-in Duplicate button and a Microsoft Graph-based PowerShell function that gives you full control.

There is often the use case that you want to clone these policies to adjust them for a certain device group or use case, or just to have a separation of the name for different device classes. Instead of rebuilding every setting by hand, you copy a known-good baseline and only change what differs.

There has been a user voice with over 1200 votes since 2017, unfortunately this feature has not been added to the Intune admin center for every policy type yet.

Microsoft Intune & AI Insights

Automation — Tutorials & Guides by Jannik Reinhard