Skip to content

Latest commit

 

History

History
236 lines (188 loc) · 10.4 KB

File metadata and controls

236 lines (188 loc) · 10.4 KB
title Endpoint analytics overview
description Discover how Microsoft Intune endpoint analytics provides actionable insights to optimize device performance, improve user experience, and enable proactive IT troubleshooting.
ms.date 11/26/2025
ms.topic overview
zone_pivot_groups manage-intune-cm

Endpoint analytics overview

Endpoint analytics helps IT professionals assess and improve the user experience across managed devices. It provides data-driven insights into device performance, startup times, app reliability, and battery health—empowering IT teams to proactively identify and remediate issues that impact productivity.

Endpoint analytics contributes to the technology experiences category within Microsoft Adoption Score, offering device-level insights that complement broader organizational productivity metrics.

The service integrates with Microsoft Intune, enabling IT pros to:

  • Enroll devices directly from Intune.
  • Use Configuration Manager for co-managed environments.
  • Manage data collection and configuration.
  • View analytics in the Intune admin center.
  • Apply remediations or adjust policies based on insights.

:::image type="content" source="media/shared/overview.png" alt-text="Screenshot of the endpoint analytics overview page" lightbox="media/shared/overview.png" border="false":::

Available reports

Endpoint analytics organizes insights into reports that highlight performance and reliability issues across managed devices. These reports help IT teams identify trends, diagnose problems, and implement improvements to enhance the overall user experience. Endpoint analytics includes the following reports:

:::row::: :::column:::

:::image type="icon" source="../media/icons/24/report.svg" border="false"::: Startup performance

Identifies devices with slow boot times and factors that delay startup.

[!div class="nextstepaction"] Learn more :::column-end::: :::column:::

:::image type="icon" source="../media/icons/24/report.svg" border="false"::: Application reliability

Monitors app crashes and stability trends to improve user experience.

[!div class="nextstepaction"] Learn more :::column-end::: :::row-end:::

:::row::: :::column:::

:::image type="icon" source="../media/icons/24/report.svg" border="false"::: Work from anywhere

Evaluates device readiness for secure and efficient remote work.

[!div class="nextstepaction"] Learn more :::column-end::: :::column:::

:::image type="icon" source="../media/icons/24/query.svg" border="false"::: Advanced Analytics

Provides deeper insights and extended reporting capabilities (requires additional licensing).

[!div class="nextstepaction"] Learn more :::column-end::: :::row-end:::

Prerequisites

To use endpoint analytics, ensure your environment meets the following prerequisites:

:::row::: :::column span="1"::: [!INCLUDE platform]

:::column-end::: :::column span="3":::

Endpoint analytics supports the following Windows editions:

  • Pro
  • Pro Education
  • Enterprise
  • Education :::column-end::: :::row-end:::

:::row::: :::column span="1"::: [!INCLUDE device-configuration]

:::column-end::: :::column span="3":::

Endpoint analytics supports devices that are:

  • Managed by Intune
  • Co-managed (Intune + Configuration Manager)
  • Managed by Configuration Manager (via tenant attach)
  • Microsoft Entra joined
  • Microsoft Entra hybrid joined

Devices must also meet the following requirements:

  • The Connected User Experiences and Telemetry service (DiagTrack) must be enabled and running. :::column-end::: :::row-end:::

:::row::: :::column span="1"::: [!INCLUDE network-connectivity]

:::column-end::: :::column span="3"::: ::: zone pivot="intune"

To enroll Intune-managed devices to endpoint analytics, they need to send required functional data to Microsoft public cloud. Ensure the following endpoints are accessible from Intune-managed devices:

Endpoint Function
https://*.events.data.microsoft.com Used by managed devices to send required functional data to the Intune data collection endpoint.

For more information and troubleshooting proxy configurations, see Troubleshoot endpoint analytics. ::: zone-end

::: zone pivot="cm"

Configuration Manager-managed devices send data to Intune via the connector on the Configuration Manager role and they don't need directly access to the Microsoft public cloud. If your environment uses a proxy server, configure the proxy server to allow the following endpoints:

Endpoint Function
https://graph.windows.net Used to automatically retrieve settings when attaching your hierarchy to endpoint analytics on Configuration Manager Server role. For more information, see [Configure the proxy for a site system server](../configmgr/> core/plan-design/network/proxy-server-support.md#configure-the-proxy-for-a-site-system-server).
https://*.manage.microsoft.com Used to synch device collection and devices with endpoint analytics on Configuration Manager Server role only. For more information, see Configure the proxy for a site system server.

If you have co-management enabled, enrolled devices send required functional data directly to Microsoft public cloud. In this case, ensure the following endpoints are accessible from co-managed devices:

Endpoint Function
https://*.events.data.microsoft.com Used by managed devices to send required functional data to the Intune data collection endpoint.

For more information and troubleshooting proxy configurations, see Troubleshoot endpoint analytics. ::: zone-end

:::column-end::: :::row-end:::

:::row::: :::column span="1"::: [!INCLUDE platform]

:::column-end::: :::column span="3"::: ::: zone pivot="intune"

Devices enrolled in endpoint analytics need a valid license for the use of Microsoft Intune. For more information, see Microsoft Intune licensing.

::: zone-end

::: zone pivot="cm"

Devices enrolled in endpoint analytics need a valid license for the use of Microsoft Intune. For more information, see Microsoft Configuration Manager licensing.

::: zone-end :::column-end::: :::row-end:::

:::row::: :::column span="1"::: [!INCLUDE platform]

:::column-end::: :::column span="3":::

Role requirements vary based on whether you're configuring endpoint analytics or reviewing the data.


To configure endpoint analytics, you need an account with at least one of the following Intune roles:

  • School Administrator: Grants read/write permissions to endpoint analytics.
  • A custom role that includes:
    • Endpoint Analytics/Read — View scores and performance reports.
    • Endpoint Analytics/Create, Update, Delete — Manage settings and baselines.
    • Organization/Read and Managed Devices/Read — Required for device visibility.
    • Device configurations/Create, Read, Assign — Required to create and assign the data collection policy

To access endpoint analytics reports, you need an account with at least one of the following Intune roles:

You can also use an account that has the following Microsoft Entra built-in roles:

:::column-end::: :::row-end:::

::: zone pivot="cm"

Configuration Manager requirements

To use endpoint analytics, your environment must have tenant attach enabled. Tenant attach connects Configuration Manager to Intune, allowing you to manage devices from the Intune admin center and perform actions such as device sync and remote tasks.

Note

Using multiple Configuration Manager hierarchies with a single endpoint analytics instance isn't supported.

::: zone-end

Next Steps

Learn more about endpoint analytics: