How to report app usage with Intune

Enough with this eclipse already.  I've got something better.

Today I'll show you how to report on application utilization for Windows endpoints in Microsoft Intune, based on a write up I came across by Irenäus Becker (LinkedIn: iren%C3%A4us-becker-321591231)

Here is the original post:
LinkedIn: reduce-license-costs-application-inventory-usage-report-becker

Join the official Discord server
Discord: discord

Read more at
https://www.getrubix.com

Chapters
0:00:00 - An eclipse
0:01:11 - What's going on with our apps?
0:02:34 - How can find this data?
0:03:10 - Get a subscription
0:03:21 - Step 1: Log analytics workspace
0:04:38 - Step 2: Data collection rule
0:05:15 - Step 3: Package the upload the monitor agent
0:06:43 - Step 4: AppLocker policy
0:10:44 - Step 2.5: Back to the collection rule...
0:11:50 - What's missing?
0:12:46 - Step 5: Create a monitored object
0:13:24 - Basic info
0:14:53 - Authenticate to tenant
0:15:15 - Brief MFA rant
0:16:19 - New role assignment
0:18:23 - Contributor role definition
0:21:49 - Create the monitored object
0:23:45 - Associate monitored object to collection rule
0:26:07 - Give it some time
0:26:37 - Did the rules and agent assign
0:27:08 - Check those logs
0:27:55 - Start doing KQL
0:29:04 - Parsing out what matters
0:32:37 - App usage data!
0:33:12 - Playing with charts
0:34:33 - Aaaaaaand, done.


#intune #autopilot #windows10 #windows11 #microsoftgraph #azureadministrator #azure #powershellscripting #powershell #activedirectory #bitlocker #windows365  #zerotrust #certificate #entra #microsoftdefender #zerotrust