#Device Management

The Device management module helps you keep your managed devices secure and up to date while helping you protect the data of your customer organizations from compromised devices.

By default, all tenants added to the device management service are listed in the table. You can view the following information of each tenant.

• Tenant – The tenant name. The organization name is displayed below the tenant name. Click a tenant name to drill down to the tenant level and access the Device management > Overview page directly.

• Status – The status of the tenant in this module.

  • Monitoring – The tenant data is scanned, and the data is under monitoring.

  • Expired – The service subscription of the customer has expired.

  • In progress – When you add the User and device management service and consent app for the tenant, this status will appear.

  • Failed – When Elements attempts to update the tenant information at 00:00 UTC but encounters errors, for example, the app required by the User and device management service was not found, this status will appear.

  • Out of policy – The service subscription of the customer is no longer compliant with policy. Service jobs will be suspended after 15 days, and service reports will no longer be updated. After this grace period, service jobs will be paused, and service reports will no longer be updated.

• Devices – The total number of devices enrolled in Intune. Click the number link to access the Devices page where all enrolled devices are listed.

• Non-compliant devices – The number of devices that are not compliant with the compliance policy. Click the number link to access the Devices page where the non-compliant devices are listed.

• Policies – The total number of policies within the tenant, compliance policy, configuration profile, and conditional access policy. Click the number link to access the Policies page with all compliance policies listed under the Compliance policies tab.

• Last updated time – The last updated time of the tenant.

#View Overview Statistics of a Tenant

When you click a tenant name on the Device management page, you switch to the tenant level.

You’ll be brought to the Overview page where you can view the tenant overview statistics. Click Export as PDF allows you to export the statistics to a PDF file.

• On the top of the page, you can view the number of devices and policies within the tenant, as well as the trends over the last 7 days. Click a number link to access the corresponding page with the devices or policies listed.

• In the Device summary section, you can view the following statistics and their trends over the last 7 days. Click a number link to access the Devices page with the corresponding devices listed on the table.

  • Noncompliant devices – The device failed to apply one or more device compliance policy settings, or the user hasn’t complied with the policies.

  • Devices with active malware – The number of devices with active malware.

  • Devices with firewall off – The number of devices where the firewall is off.

  • Devices with system crashes – The number of devices that have stop errors.

  • Devices with hard resets – The number of devices that have restarts.

  • Devices with refresh recommended – The number of devices whose health status is Needs attention.

• In the Device analytics section, you can view two charts.

  • The Top 5 models with most crashes and resets chart shows the top 5 models that have the most system crashes and hard resets over the last 30 days.

  • The Device compliance chart shows the trends of devices in each compliance status over the last 30 days. You can narrow down the statistics by selecting specific compliance statuses and/or OS.

#Add a Tenant

When you assign the User and device management service to a customer and consent to the app during the process of onboarding the customer or adding services for the customer, the customer’s tenant will be automatically displayed in this module.

If an existing customer has tenants that want to use the functionalities of this module, you can add those tenants to the module.

Refer to the following steps to add a new tenant of an existing customer to the module:

1. On the Device management page, click Add tenant in the upper-right corner.

2. Select a customer from the drop-down list.

3. Complete the subscription information for this service:

   • Subscription type – Select the subscription type for this service: Trial or Subscription.

     NOTE

     For Trial, you can assign up to 5 customers, and the subscription expiration date is fixed. This number is calculated among all premium services.

   • Source – Select a value to indicate the source of your subscription.

   • Payment type – Select the payment type.

   • User seats – Select the number of users you want to assign the subscription.

   • Subscription expiration date – By default, Same as pooled subscription is selected to keep the same expiration date as the pooled subscription. You can select Expire now or select Specify a time to set an expiration date for the customer’s subscription.

   • Contract end date – Click the calendar button and select the contract end date.

4. Click Continue.

5. Select a tenant of the customer.

   If there are no available tenants for the customer, you can click Add new tenant. For detailed instructions on how to add a tenant, refer to Add a Microsoft 365 Tenant.

6. If the APElements Security and Analysis app for the tenant has already been consented, a green checkmark icon will appear. Click Save to add the tenant.

   This typically occurs during the process of assigning the User and device management service to a customer and consenting to the app during the process of onboarding customer or adding services.

7. If the APElements Security and Analysis app for the tenant needs to be consented, complete the following steps:

   1. Click Authenticate.

   2. The permissions required for this app are displayed. Review the permissions and click Accept.

   3. A page appears indicating that the app was authorized. Close this page, and you will be redirected back to the Add tenant window.

   4. Click Save to add the tenant.

#Disconnect a Tenant

You can disconnect tenants from this module. Upon disconnection, the tenants will no longer appear in the module pages, and all user management data, device management data, and app management data of these tenants will be permanently deleted.

When a customer’s subscription for the User and device management expires, the functionalities provided by the service will be unavailable for all tenants of the customer. Click the Expired link, and the Edit subscription window appears, allowing you to update the subscription for the customer directly.

You can also disconnect the expired tenants from the module. To disconnect a tenant, select the tenant, click Disconnect tenant, then enter Yes in the text box and click Disconnect in the confirmation window.