Intune client-side logs - The Digital Workspace

This is a memo article listing all the Intune log and report locations that may help with some error resolution.

Diagnostic Report

A diagnostic report can be generated on the client side from Settings > Work & School Access > Connected to Azure AD from > Info > Create Report.

The report will be saved in :

C:\Users\Public\Public Documents\MDMDiagnostics\MDiagReport.html

Information about the IME settings can be found in the registry :

HKLM:SoftwareMicrosoftEnterpriseDesktopAppManagementMSI

The MSI itself can be found here, along with an installation log:

C:WindowsSystem32configsystemprofileDataLocalmdm

Note: If you disconnect a device from Azure AD and reconnect it, you will need to reinstall the MSI as it will have a different device ID.

The IME logs can be found here:

C:ProgramDataMicrosoftIntuneManagementExtensionLogs

The logs are :

When a PowerShell script is run on the client from Intune, the scripts and their results are stored here, but only until the end of the run:

A transcript of the script execution can be found under C:showmewindows (a hidden folder).

The complete contents of the script will also be recorded in the IntuneManagementExtension.log file.

The error code and the result of the script can also be found in the registry :

HKLM:\Software\Microsoft\IntuneManagementExtension\Policies\<UserGUID>\<ScriptGUID>

There are several MDM event logs that you can find here:

Application & Service Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider

The IME runs as a service called “Microsoft Intune Management Extension”. You can restart it to force a check for new policies.

The IME runs a health assessment every day as a scheduled task, and logs the results in the ClientHealth.log file:

Microsoft > Intune > Intune Management Extension Health Assessment