Home > Device Management
Export to PDFThe Device management module helps you keep your managed devices secure and up to date while helping you protect the data of your customer organizations from compromised devices.
On the Device management page, you can view the following information of each tenant.
Tenant – The tenant name. The organization name is displayed below the tenant name. Click a tenant name to drill down to the tenant level and access the Device management > Overview page directly.
Status – The status of the tenant in this module.
Monitoring – The tenant data is scanned, and the data is under monitoring.
Expired – The service subscription of the customer has expired.
In progress – When you add the User and device management service and consent app for the tenant, this status will appear.
Failed – When Elements attempts to update the tenant information at 00:00 UTC but encounters errors, for example, the app required by the User and device management service was not found, this status will appear.
Out of policy – The service subscription of the customer is no longer compliant with policy. Service jobs will be suspended after 15 days, and service reports will no longer be updated. After this grace period, service jobs will be paused, and service reports will no longer be updated.
Devices – The total number of devices enrolled in Intune. Click the number link to access the Devices page where all enrolled devices are listed.
Non-compliant devices – The number of devices that are not compliant with the compliance policy. Click the number link to access the Devices page where the non-compliant devices are listed.
Policies – The total number of policies within the tenant, compliance policy, configuration profile, and conditional access policy. Click the number link to access the Policies page with all compliance policies listed under the Compliance policies tab.
Apps – The number of apps managed by Intune for the tenant. Click the number link to access the Apps page where all added apps are listed.
Last updated time – The last updated time of the tenant.
When you click a tenant name on the Device management page, you switch to the tenant level.
You’ll be brought to the Overview page where you can view the tenant overview statistics. Click Export as PDF allows you to export the statistics to a PDF file.

On the top of the page, you can view the number of devices, apps, and policies within the tenant, as well as the trends over the last 7 days. Click a number link to access the corresponding page with the devices, apps, or policies listed.
In the Device summary section, you can view the following statistics and their trends over the last 7 days. Click a number link to access the Devices page with the corresponding devices listed on the table.
Noncompliant devices – The device failed to apply one or more device compliance policy settings, or the user hasn’t complied with the policies.
Devices with active malware – The number of devices with active malware.
Devices with firewall off – The number of devices where the firewall is off.
Devices with system crashes – The number of devices that have stop errors.
Devices with hard resets – The number of devices that have restarts.
Devices with refresh recommended – The number of devices whose health status is Needs attention.
In the App summary section, you can view the number of unassigned apps, apps with install failures, updated apps, and apps with update failures. Click the number link to the right of Unassigned to access the Apps page with unassigned apps listed.
In the Device analytics section, you can view two charts.
The Top 5 models with most crashes and resets chart shows the top 5 models that have the most system crashes and hard resets over the last 30 days.
The Device compliance chart shows the trends of devices in each compliance status over the last 30 days. You can narrow down the statistics by selecting specific compliance statuses and/or OS.
When you assign the User and device management service to a customer and consent to the app during the process of onboarding the customer or adding services for the customer, the customer’s tenant will be automatically displayed in this module.
If an existing customer has tenants that want to use the functionalities of this module, you can add those tenants to the module.
If you add a tenant to the Device management module, the tenant will also be available in the User management module.
Refer to the following steps to add a new tenant of an existing customer to the module:
On the Device management page, click Add tenant in the upper-right corner.
Select a customer from the drop-down list.
Complete the subscription information for this service:
Subscription type – Select the subscription type for this service: Trial or Subscription.
For Trial, you can assign up to 5 customers, and the subscription expiration date is fixed. This number is calculated among all premium services.
Source – Select a value to indicate the source of your subscription.
Payment type – Select the payment type.
User seats – Select the number of users you want to assign the subscription.
Subscription expiration date – By default, Same as pooled subscription is selected to keep the same expiration date as the pooled subscription. You can select Expire now or select Specify a time to set an expiration date for the customer’s subscription.
Contract end date – Click the calendar button and select the contract end date.
Click Continue.
Select a tenant of the customer.
If there are no available tenants for the customer, you can click Add new tenant. For detailed instructions on how to add a tenant, refer to Add a Microsoft 365 Tenant.
If the APElements Security and Analysis app for the tenant has already been consented, a green checkmark icon will appear. Click Save to add the tenant.
This typically occurs during the process of assigning the User and device management service to a customer and consenting to the app during the process of onboarding customer or adding services.
If the APElements Security and Analysis app for the tenant needs to be consented, complete the following steps:
Click Authenticate.
The permissions required for this app are displayed. Review the permissions and click Accept.
A page appears indicating that the app was authorized. Close this page, and you will be redirected back to the Add tenant window.
Click Save to add the tenant.
Elements will automatically create scan profiles in AvePoint Online Services to retrieve data from Microsoft 365 tenants. These scan profiles are crucial for the system’s functionality and should not be manually deleted. To ensure continuous data retrieval, a daily backend job runs at 00:00 UTC to update tenant information. If any scan profiles have been deleted, this job will recreate them to maintain continuous data retrieval capabilities.
You can disconnect tenants from this module. Upon disconnection, the tenants will no longer appear in the module pages, and all user management data and Device management data of these tenants will be permanently deleted.
When a customer’s subscription for the User and device management expires, the functionalities provided by the service will be unavailable for all tenants of the customer. Click the Expired link, and the Edit subscription window appears, allowing you to update the subscription for the customer directly.
You can also disconnect the expired tenants from the module. To disconnect a tenant, select the tenant, click Disconnect tenant, then enter Yes in the text box and click Disconnect in the confirmation window.
The Disconnect tenant button will be unavailable if the selected tenant is currently in the In progress status. Please wait until the process is complete before you attempt to disconnect. If you disconnect a tenant from the Device management module, the tenant will also be removed from the Device management module.
On the Windows Autopilot devices page, the devices that are registered with the Windows Autopilot service are listed in the table.
Windows Autopilot related features are currently not available for GCC High tenants.
Click the serial number of a device to access the Device details page where you can view and manage the general information of the device in the Basics tab. In the Audit logs tab, you can view all action records performed to the current device. You can click Refresh to view the latest audit logs, or click Export to export the audit logs into an Excel.
To add Windows Autopilot devices by importing a CSV file, complete the following steps:
Click Import CSV in the upper-right corner and the Add Autopilot devices window appears.
Click Browse and select the CSV file where devices are configured with hardware hashes, and click Import to start importing the device information.
Click Refresh until the new devices appear.
For more details, refer to Manually register devices with Windows Autopilot.
Click Refresh to refresh the device list.
Click Export to export the Windows Autopilot devices to an Excel file.
On the Windows Autopilot import history page, all import actions are listed in the table with their statuses. You can click Export to export the import history into an Excel file.
Click Refresh to refresh the Windows Autopilot import history.
On the Process center page, action records within the tenant are listed in the table.
When specific actions are initiated, corresponding processes are started to complete them. You can monitor the status of these processes by clicking the Process center link in the notification that appears once the process has started. Additionally, you can access this tenant-level process center by clicking Process center from the left navigation on any tenant-level page.
On this page, you can perform the following actions:
Refresh – Click Refresh to refresh the data displayed in the table.
Filter process – You can filter the process status shown in the table. To filter specific processes to view, click Filter in the upper-right corner. You can expand the fields in the filter and select specific options. Then, click Apply changes to apply the updates and only view the processes that match the filters.
Export – You can click Export to export all action records report. Select Current columns or All columns to export records with the currently displayed columns or all columns in the report, select xlsx or csv as the report type, and click Export.
Download report – For the failed actions, you can click the Download button to the right of the action record to download the report and view details.
On the General settings page, the device settings, members allowed to join devices, and local administrator settings can be viewed.
You can edit the device settings as required, and click Apply changes on the top to save and apply the changes.