The Ultimate Intune Troubleshooting Guide: How It Works and How I Fix It Intune Troubleshooting

The Ultimate Intune Troubleshooting Guide: How It Works and How I Fix It

The Ultimate Intune Troubleshooting Guide: How It Works and How I Fix It

In this blog post I explain how I approach Intune troubleshooting from end to end. This is not a list of error codes you can already find in the docs — it is my ultimate reference, the full picture: how Intune actually works under the hood, how a device proves who it is, where the logs live, which tools I reach for, and a clear method I follow every time. When you understand how a device talks to Intune, most problems stop being a mystery. You stop guessing and you start reading the right log, which is what real Intune troubleshooting is about.

This is a long one, on purpose. I wanted the single Intune troubleshooting guide I can send to a colleague and say “read this and you can fix most things yourself.” So we go all the way down — including the new MMP-C and Declared Configuration plumbing that almost no admin knows is already running on their devices — and then back up to the errors you hit most.

A note on honesty before we start: a lot of the deepest details here are not in the official Microsoft docs. They were reverse-engineered by people like Rudy Ooms, Oliver Kieselbach and Michael Niehaus. I will say clearly when something is community knowledge rather than documented, because internals like this change between Windows builds. Let us start with the part most guides skip — the mental model.

Read More » The Ultimate Intune Troubleshooting Guide: How It Works and How I Fix It
Easy way to analyse MDM Diagnostic data on the client

Easy way to analyse MDM Diagnostic data on the client

Easy way to analyse MDM Diagnostic data on the client

When an Intune-managed device misbehaves — a policy doesn’t apply, an app refuses to install, BitLocker silently fails — the truth lives on the client itself. Microsoft’s MDM Diagnostic Report bundles all of that into a single ZIP that contains everything from MDM event logs to current policy values. The problem is that browsing through the raw HTML, EVTX and registry exports is painful, and most admins never make it past the cover page. This post shows the simplest practical workflow I use to analyse MDM Diagnostic data on real client devices, extract the answers fast, and pick the few files you should open first to answer 80 % of all support questions.

In this blog I would like to give you a helpful tool to analyse MDM Diagnostic data directly on the client with the help of PowerShell, and how you can process the content in a simple way to implement remediations or to build a monitoring solution. The MDM Diagnostic data is the single richest source of truth for enrollment, policy and app state, so learning to read it quickly pays off on every support ticket. In the following sections I will explain step by step how you can use this script.

Easy way to analyse MDM Diagnostic data on the client with PowerShell
Read More » Easy way to analyse MDM Diagnostic data on the client
System Information and Self Service Tool

System Information and Self Service Tool

System Information and Self Service Tool

In this blog I would like to introduce you to my new System Information Tool. The System Information Tool is a software that displays various system information, such as the serial number, IP address, username and logged-in user, and many more. It also provides functions for troubleshooting and analysing problems with Intune Management and Intune Management Extension. In addition, custom scripts for self-service support can be added and provided to the user. The tool is thus a useful resource for users who need quick access to system information and assistance in troubleshooting problems.

System Information Tool dashboard showing system details
Read More » System Information and Self Service Tool
Deep dive into the IME Health check

Deep dive into the IME Health check

Deep dive into the IME Health check

In one of my last posts we took a closer look at how the Intune Management extension works and even looked behind the scenes directly into the code. In this post I would like to go deep into the IME Health check, because the ClientHealthEval.exe that drives it is one of the most underrated components of the Intune Management Extension. If you manage Windows endpoints with Microsoft Intune, understanding the IME Health check helps you keep the agent healthy and your deployments reliable.

Read More » Deep dive into the IME Health check
Introduction of the Intune Device Troubleshooter

Introduction of the Intune Device Troubleshooter

Introduction of the Intune Device Troubleshooter


If you follow my blog, you know that there are two things I really like: helping people with their problems, and automating or simplifying processes. In this blog, I want to introduce you to my new tool, the Intune Device Troubleshooter. This is a PowerShell UI application that will help you to check the status of your devices, as well as help you trigger remediation scripts to fix issues ad-hoc on single devices. It also provides you with intelligent recommendations on what to check on a single device to determine any possible issues. So let’s get started and look at the features of the tool.

Introduction of the Intune Device Troubleshooter
Read More » Introduction of the Intune Device Troubleshooter
Company Portal System Tray Icon: New Intune Features

Company Portal System Tray Icon: New Intune Features

Company Portal System Tray Icon: New Intune Features

A few weeks ago I released the Company Portal System Tray tool. The post has received very good feedback and the tool was tested by some and also used productively. I have been working on developing the tool further and integrating more useful functions that can help with troubleshooting. The first version of the Company Portal system tray icon has many quick access possibilities to system tools or logs that are important for troubleshooting an Intune managed device. In addition, this tool has a quick access to open the Company Portal.

In this blog I want to introduce the new version of the Company Portal System Tray Icon and walk through every new feature.

Read More » Company Portal System Tray Icon: New Intune Features
Dive deeper into the IME log with a simple change of the log level

Dive deeper into the IME log with a simple change of the log level

Dive deeper into the IME log with a simple change of the log level

For troubleshooting purposes it is helpful to change the IME log level of the Intune Management Extension. Since this has to be done in an XML config file of the IME, and inserting a wrong value can affect the function of the IME, I wrote a script which makes changing the IME log level easy.

Changing the IME log level with a PowerShell script in Visual Studio Code
Read More » Dive deeper into the IME log with a simple change of the log level
Company Portal System Tray Icon

Company Portal System Tray Icon

Company Portal System Tray Icon

It is difficult for support engineers to guide users to the company portal because the company portal is called differently depending on the system language. In german, for example, the Company Portal is called “Unternehmensportal”. To simplify this and make access faster I have built a small Company Portal System Tray Icon. This icon is not only there to open the Company Portal, it also offers many other functions to simplify the troubleshooting process. You can learn more about managing devices in my other Intune articles.

Company Portal System Tray Icon menu open in Windows
Read More » Company Portal System Tray Icon