Device enrollment progress and failure analysis across your managed Intune tenants.
Device enrollment progress and failure analysis across your managed Intune tenants.
The data covers the full scope of Autotask PSA records relevant to this analysis, broken down by the key dimensions your team needs for day-to-day decisions and client reporting.
Who should use this: MSP operations teams and service delivery managers
How often: As needed for specific analysis or reporting requirements
Device enrollment progress and failure analysis across your managed Intune tenants.
EVALUATE
ROW(
"TotalDevices", COUNTROWS('BI_MicrosoftPartnerCenter_Devices'),
"TotalBatches", COUNTROWS('BI_MicrosoftPartnerCenter_Device_Batches'),
"UniqueModels", DISTINCTCOUNT('BI_MicrosoftPartnerCenter_Devices'[model_name]),
"UniqueOEMs", DISTINCTCOUNT('BI_MicrosoftPartnerCenter_Devices'[oem_manufacturer_name])
)Breakdown of Autopilot enrollment outcomes per managed tenant.
| Tenant | Devices | Enrolled | Failed | Pending | Success Rate |
|---|---|---|---|---|---|
| Contoso Ltd | 842 | 751 | 52 | 39 | 89.2% |
| Fabrikam Inc | 624 | 570 | 31 | 23 | 91.4% |
| Woodgrove Bank | 510 | 434 | 48 | 28 | 85.1% |
| Adventure Works | 478 | 448 | 14 | 16 | 93.7% |
| Tailspin Toys | 395 | 309 | 54 | 32 | 78.3% |
| Litware Inc | 312 | 297 | 8 | 7 | 95.2% |
Litware Inc leads with a 95.2% enrollment success rate, while Tailspin Toys lags at 78.3% with 54 failures. The failure concentration at Tailspin correlates with older hardware that lacks TPM 2.0 support. Woodgrove Bank also shows an elevated failure rate at 85.1%, primarily due to network proxy issues during OOBE.
EVALUATE
SUMMARIZECOLUMNS(
BI_Microsoft_Autopilot[tenant_name],
"TotalDevices", COUNTROWS(BI_Microsoft_Autopilot),
"Enrolled", CALCULATE(COUNTROWS(BI_Microsoft_Autopilot), BI_Microsoft_Autopilot[status] = "Enrolled"),
"Failed", CALCULATE(COUNTROWS(BI_Microsoft_Autopilot), BI_Microsoft_Autopilot[status] = "Failed")
)
ORDER BY [TotalDevices] DESCMost common Autopilot enrollment failure reasons.
| Error Type | Count | Share | Top Tenant | Resolution |
|---|---|---|---|---|
| TPM Attestation Failed | 72 | 33.0% | Tailspin Toys | Update BIOS / replace hardware |
| Network Timeout | 48 | 22.0% | Woodgrove Bank | Whitelist Autopilot endpoints |
| Profile Mismatch | 38 | 17.4% | Contoso Ltd | Reassign deployment profile |
| ESP Timeout | 31 | 14.2% | Fabrikam Inc | Increase ESP timeout to 90 min |
| Azure AD Join Failed | 18 | 8.3% | Datum Corp | Check hybrid join config |
| License Missing | 11 | 5.0% | Proseware Inc | Assign Intune license |
TPM attestation failures account for one-third of all enrollment issues, concentrated at Tailspin Toys where 42 of their 54 failures stem from this cause. Network timeouts at Woodgrove Bank point to a firewall configuration that blocks required Microsoft endpoints. These two root causes, if resolved, would eliminate 55% of all failures portfolio-wide.
EVALUATE
SUMMARIZECOLUMNS(
BI_Microsoft_Autopilot[error_type],
FILTER(BI_Microsoft_Autopilot, BI_Microsoft_Autopilot[status] = "Failed"),
"DeviceCount", COUNTROWS(BI_Microsoft_Autopilot)
)
ORDER BY [DeviceCount] DESCThe risk matrix shows that most entities fall in the low-risk category, but the high-risk group demands immediate attention. The moderate-risk group shows a declining trend that could escalate without intervention.
| Category | Items | Primary | Secondary | Status |
|---|---|---|---|---|
| Category A | 234 | 94.2% | 14 | Healthy |
| Category B | 187 | 89.3% | 20 | Review |
| Category C | 156 | 91.7% | 13 | Healthy |
| Category D | 98 | 86.7% | 13 | Review |
| Category E | 67 | 82.1% | 12 | At Risk |
| Category F | 45 | 95.6% | 2 | Healthy |
The detailed breakdown shows clear performance differences. The bottom two categories require targeted action to improve overall portfolio health.
Overall portfolio health is strong at 92.4%, but the 87.3% coverage rate suggests that roughly 1 in 8 entities is not fully monitored. The 23 open action items represent a manageable backlog if addressed within 2 weeks.
The gap between top and bottom performers is wider than expected. The bottom 20% scores more than 25 percentage points below the portfolio average, indicating structural issues that require targeted intervention.
Entities in the moderate risk category show a declining trend over the past quarter. Without intervention, 3-4 of these entities may shift to the high-risk category within 60 days.
The top 30% of the portfolio maintains stable performance above target, indicating current best practices are effective and can serve as a model for the rest.
1. Conduct a targeted review of all high-risk entities within 2 weeks. Document the root cause for each entity and create a remediation plan with clear deadlines and accountable owners.
2. Implement automated monitoring for the moderate-risk group. Set thresholds that trigger an alert when performance drops 5 percentage points below target, enabling early intervention before entities slip into high risk.
3. Schedule this report monthly as part of the QBR process. Use the trend data to verify that improvement initiatives are delivering measurable results across multiple quarters.
A healthy MSP portfolio should see 90%+ enrollment success. Below 85% indicates systemic issues that need investigation.
Standard Autopilot enrollment typically completes in 30-60 minutes. If devices consistently exceed 90 minutes, check network throughput and ESP configuration.
Older devices without TPM 2.0 chips, outdated BIOS firmware, or devices previously enrolled in another tenant can all trigger TPM attestation failures.
Yes. Devices can be reset and re-enrolled. For persistent failures, the Autopilot device record may need to be deleted and re-imported.
Connect Proxuma Power BI to your PSA, RMM, and M365 environment, use an MCP-compatible AI to ask questions, and generate custom reports - in minutes, not days.
See more reports Get started