Operational Did User Reach Desktop
Query
// Shows Devices where User did not reach Desktop even though Auopilot was successful. Result also shows DeviceName for further troubleshooting if needed.
IntuneOperationalLogs
| extend DeviceId = tostring(todynamic(Properties).DeviceId)
| extend DidUserReachDesktop = todynamic(Properties).DidUserReachDesktop
| extend Autopilot = todynamic(Properties).IsAutopilot
| where isnotempty(DidUserReachDesktop)
| join kind=leftouter IntuneDevices on DeviceId
| summarize arg_max(TimeGenerated, *) by DeviceName
| project DeviceName, Autopilot, DidUserReachDesktopExplanation
This query is used to identify devices where the user was unable to reach the desktop even though the Autopilot feature was successful. It pulls data from the IntuneOperationalLogs and IntuneDevices, and displays the DeviceName, Autopilot status, and whether the user reached the desktop. This information can be used for further troubleshooting.
Details

Ugur Koc
Released: August 9, 2022
Tables
IntuneOperationalLogsIntuneDevices
Keywords
DevicesUserDesktopAutopilotIntuneOperationalLogsIntuneDevicesDeviceIdDeviceNameDidUserReachDesktopTimeGenerated
Operators
extendtostringtodynamicisnotemptyjoinkind=leftoutersummarizearg_maxproject.