Chapter 9. Monitoring and Responding to Windows Intune Alerts

So far we have examined the configuration of the computers with policies to control their behavior. As we manage these computers, they will report back to Windows Intune against those policies in the form of reporting and alerts. We have looked at the reporting, which provides a snapshot of the computer estate. In this chapter, we will examine the real-time nature of PC management as we explore the alerts that Windows Intune raises which require action on our part, exploring how we both monitor and respond to them.

In the previous chapters, we have configured the computers to minimize the situations where alerts will be raised through good practices of updates, firewall, and anti-malware management. Problems will still arise with users' computers, whether this is a request for assistance, a computer that will not boot, or some other warning picked up by Windows Intune. These need to be categorized and responded to in a timely manner. Some can be closed and filed depending on circumstances, while others require a visit to the computer itself with other tools to further diagnose and resolve.