Intune Debug Toolkit

The following documentation section will describe the tool and what it will help you with.

DEBUG Enrollment

Anything related to the registry path HKLM\Software\Microsoft\Enrollments will be monitored by this function. If e.g. anything were added/changed during last 36 hours it will be revealed by this function.

DEBUG GPO

Anything related to the registry path HKLM\Software\Policies will be monitored by this function. If e.g. anything were added/changed during last 36 hours it will be revealed by this function. If you are running Co-managed and hybrid Azure AD Joined, it will be nice to know if anyone in your organisation added new GPO’s that might interfer with your current path with Intune policies.

DEBUG Intune Management Extension

Anything related to the registry path HKLM\Software\Microsoft\IntuneManagementExtension will be monitored by this function. If e.g. anything were added/changed during last 36 hours it will be revealed by this function. Sensor, SideCarPolicies, Inventory and much more.

DEBUG PolicyManager

Anything related to the registry path HKLM\Software\Microsoft\PolicyManager will be monitored by this function. If e.g. anything were added/changed during last 36 hours it will be revealed by this function. Intune does write most of its policies locally on device here. This is a good place to be able to debug e.g. error code 65000.

AUTOPILOT Pre-provisioning Readiness (Run as Admin)

Ever experienced problems with Autopilot Pre-provisioned devices? This function will go in-depth to tell you if the pre-requisites are meet and what you might be missing on a device to fullfill the requirements. Issues with the EKCert, missing connection to propper endpoint or the TPM maybe?

AUTOPILOT Readiness (Run as Admin)

Ever experienced problems with Autopilot in general? Then you might want to check the pre-requisites are in place before proceeding. This function will help you determine if the correct endpoint are open and will be able to communicate.

DEVICE Details Debug (Requires authentication)

This function provides a complete overview of your device. You will be able to see all data around the device and the user using the device. Wether you like to see recent check-ins, application assignments, Configurations Assignments or just see Device Group memberships, this is the function to use!

DIAGNOSTIC Data

Have you ever created a Microsoft ticket and needed to send them a diagnostic report the device? It has never been easier.

ERRORCODES and Solutions

If you ever come across an error and wondered why this happened or how to solve it, this is a living document that will keep track on errors, why they happen and how to solve them.

MDM eventlog monitor

Eventlog usually reveal what happens in the background while Intune adds policies or other stuff to the device, but where should we look? This function provides a live eventlog debug trace where you will be presented with color codes to easy find the errors or warnings in between the load of informations. When you close it you can always find the trace in a log. The location of that is revealed in the top bar of the function.

Monitor Sync Data Live

If you like to better understand the stream that goes from Intune to your device, this is the tool to use. It will reveal any changes to the system while syncing, if it is adding, removing or simply updating policies. Do you need to know how to rollback a configuration? Then a trick could be to view the sync process while unassigning a policy and you will know if it rollback the policy to default or it will be tatooed on the client.

OVERVIEW of assigned policies (RSOP)

When debugging group policies, many IT Pros are familiar with the GPResult command and view the report afterwards. This is not possible with Intune managed devices. However this function come close to some similar experience. It will look through all of the configurations and tell you wether it is Intune or GPO that is the winning provider of this policy.

RERUN Apps Win32 (Run as admin)

Application debugging is never fun if it already were uploaded to Intune. If you added the wrong detection method, it will fail hard and you would like to change that and rerun it right away. With this function you can force the app to rerun faster than the normal schedule which is a check happening every 24 hour.

You will also be able to see the install/uninstall command, detection method and much more.

VIEW Proactive Remediation Scripts

This function will help you view ProActive Remediation scripts that is targetted a device. You can simply do this from the Intune portal as well, but it is not as easy as doing this.

WUFB Readiness

It can be hard to tell where update are coming from. Especially in a transition period where you change from WSUS to Windows Update for Business. This function will help you determine where updates comes from and when they applied. Also where Microsoft 365 apps for enterprise are looking for updates and when it last checked for patches.

Debug Autopilot (use during provisioning)

When you go through Autopilot and the 3 known phases, it can be very hard to tell what exactly happens beneath the surface. With this helpful tool, you well get a easy headstart to see exactly what is applying of scripts and packages during device ESP and user ESP

Debug with eventlog (use during provisioning)

Eventlog usually reveal what happens in the background while Intune adds policies or other stuff to the device, but where should we look? This function provides a live eventlog debug trace where you will be presented with color codes to easy find the errors or warnings in between the load of informations. When you close it you can always find the trace in a log. The location of that is revealed in the top bar of the function.

Debug like Microsoft

I bet that most of you never have seen this one as it has been secretly hosted on a Microsoft Github. This function will give you deep log gathering from your system and you will never wish for more data again. Try it OUT!

IME Reader

IME reader is the greatest tool around to read Intune Management extension. It’s written by Petri and it is super awesome to search for specific areas of the IME log.