Edit

Share via

Endpoint analytics overview

Endpoint analytics helps IT professionals assess and improve the user experience across managed devices. It provides data-driven insights into device performance, startup times, app reliability, and battery health—empowering IT teams to proactively identify and remediate issues that impact productivity.

Endpoint analytics contributes to the technology experiences category within Microsoft Adoption Score, offering device-level insights that complement broader organizational productivity metrics.

The service integrates with Microsoft Intune, enabling IT pros to:

  • Enroll devices directly from Intune.
  • Use Configuration Manager for co-managed environments.
  • Manage data collection and configuration.
  • View analytics in the Intune admin center.
  • Apply remediations or adjust policies based on insights.

Screenshot of the endpoint analytics overview page

Available reports

Endpoint analytics organizes insights into reports that highlight performance and reliability issues across managed devices. These reports help IT teams identify trends, diagnose problems, and implement improvements to enhance the overall user experience. Endpoint analytics includes the following reports:

Startup performance

Identifies devices with slow boot times and factors that delay startup.

Learn more

Application reliability

Monitors app crashes and stability trends to improve user experience.

Learn more

Work from anywhere

Evaluates device readiness for secure and efficient remote work.

Learn more

Advanced Analytics

Provides deeper insights and extended reporting capabilities (requires additional licensing).

Learn more

Prerequisites

To use endpoint analytics, ensure your environment meets the following prerequisites:

Device platform requirements

Endpoint analytics supports the following Windows editions:

  • Pro
  • Pro Education
  • Enterprise
  • Education

Device configuration requirements

Endpoint analytics supports devices that are:

  • Managed by Intune
  • Co-managed (Intune + Configuration Manager)
  • Managed by Configuration Manager (via tenant attach)
  • Microsoft Entra joined
  • Microsoft Entra hybrid joined

Devices must also meet the following requirements:

  • The Connected User Experiences and Telemetry service (DiagTrack) must be enabled and running.

Network and connectivity requirements

To enroll Intune-managed devices to endpoint analytics, they need to send required functional data to Microsoft public cloud. Ensure the following endpoints are accessible from Intune-managed devices:

Endpoint Function
https://*.events.data.microsoft.com Used by managed devices to send required functional data to the Intune data collection endpoint.

For more information and troubleshooting proxy configurations, see Troubleshoot endpoint analytics.

Configuration Manager-managed devices send data to Intune via the connector on the Configuration Manager role and they don't need directly access to the Microsoft public cloud. If your environment uses a proxy server, configure the proxy server to allow the following endpoints:

Endpoint Function
https://graph.windows.net Used to automatically retrieve settings when attaching your hierarchy to endpoint analytics on Configuration Manager Server role. For more information, see [Configure the proxy for a site system server](../configmgr/> core/plan-design/network/proxy-server-support.md#configure-the-proxy-for-a-site-system-server).
https://*.manage.microsoft.com Used to synch device collection and devices with endpoint analytics on Configuration Manager Server role only. For more information, see Configure the proxy for a site system server.

If you have co-management enabled, enrolled devices send required functional data directly to Microsoft public cloud. In this case, ensure the following endpoints are accessible from co-managed devices:

Endpoint Function
https://*.events.data.microsoft.com Used by managed devices to send required functional data to the Intune data collection endpoint.

For more information and troubleshooting proxy configurations, see Troubleshoot endpoint analytics.

Licensing requirements

Devices enrolled in endpoint analytics need a valid license for the use of Microsoft Intune. For more information, see Microsoft Intune licensing.

Devices enrolled in endpoint analytics need a valid license for the use of Microsoft Intune. For more information, see Microsoft Configuration Manager licensing.

Roles requirements

Role requirements vary based on whether you're configuring endpoint analytics or reviewing the data.

To configure endpoint analytics, you need an account with at least one of the following Intune roles:

  • School Administrator: Grants read/write permissions to endpoint analytics.
  • A custom role that includes:
    • Endpoint Analytics/Read — View scores and performance reports.
    • Endpoint Analytics/Create, Update, Delete — Manage settings and baselines.
    • Organization/Read and Managed Devices/Read — Required for device visibility.
    • Device configurations/Create, Read, Assign — Required to create and assign the data collection policy

To access endpoint analytics reports, you need an account with at least one of the following Intune roles:

You can also use an account that has the following Microsoft Entra built-in roles:

Configuration Manager requirements

To use endpoint analytics, your environment must have tenant attach enabled. Tenant attach connects Configuration Manager to Intune, allowing you to manage devices from the Intune admin center and perform actions such as device sync and remote tasks.

Note

Using multiple Configuration Manager hierarchies with a single endpoint analytics instance isn't supported.

Next Steps

Learn more about endpoint analytics:

  • Last updated on