KQL Search

Query Details

HomeAI ToolsDevice Query

Operational Did User Reach Desktop

Query

// Shows Devices where User did not reach Desktop even though Auopilot was successful. Result also shows DeviceName for further troubleshooting if needed.
IntuneOperationalLogs
| extend DeviceId = tostring(todynamic(Properties).DeviceId)
| extend DidUserReachDesktop = todynamic(Properties).DidUserReachDesktop
| extend Autopilot = todynamic(Properties).IsAutopilot
| where isnotempty(DidUserReachDesktop)
| join kind=leftouter IntuneDevices on DeviceId 
| summarize arg_max(TimeGenerated, *) by DeviceName
| project DeviceName, Autopilot, DidUserReachDesktop

Explanation

This query is used to identify devices where the user was unable to reach the desktop even though the Autopilot feature was successful. It pulls data from the IntuneOperationalLogs and IntuneDevices, and displays the DeviceName, Autopilot status, and whether the user reached the desktop. This information can be used for further troubleshooting.

Details

Ugur Koc profile picture

Ugur Koc

Released: August 9, 2022

Tables

IntuneOperationalLogsIntuneDevices

Keywords

Devices,User,Desktop,Autopilot,IntuneOperationalLogs,IntuneDevices,DeviceId,DeviceName,DidUserReachDesktop,TimeGenerated

Operators

extendtostringtodynamicisnotemptyjoinkind=leftoutersummarizearg_maxproject.

Actions