Monitoring device actions
As an Intune administrator, especially in a larger organization, it is essential to have an audit trail as there are buttons within the console that can have serious effects. Imagine someone accidentally clicks Wipe on the wrong device and you need to find out what happened for an incident report. Fortunately, these are all logged in Device actions, which we will cover now.
Getting ready
To access these logs, click on Devices, then Overview, and finally, click on the Device actions box.
How to do it...
On this screen, you will be presented with a list of all actions taken against all devices (cross-platform), including what was performed, when, and by whom.
There is no search functionality and you cannot sort on the headers (use the automated script to add this functionality), but it does have a powerful filter that includes every possible action across all device types:
Figure 9.8 – Device actions filter
...