Check Intune Device Status and Recent Remote Actions

Check device status using the Microsoft Intune admin center

1. Sign in to the Microsoft Intune admin center with an account that has at least the Help Desk Operator role.
2. In the left navigation, click Devices › All devices.
3. In the search box above the device list, type the device name (for example DESKTOP-GORGEOUS-OPTIMAL458) and press Enter. You can also filter by primary user, OS, or serial number.
4. Click the matching device to open its overview blade.
5. On the Overview tab, review the key status fields:
   • Compliance (Compliant / Not compliant / In grace period)
   • Operating system and OS version
   • Primary user
   • Last check-in timestamp
   • Enrollment date and enrollment type
   • Encryption and Jailbroken/Rooted status
6. Scroll to the Device actions status section (still on the Overview blade). This lists any recent remote actions — Sync, Restart, Wipe, Retire, Fresh Start, Locate device, Reset passcode — along with their state: Pending, Active, Complete, or Failed.
7. If no entries appear, there are no recent or pending remote actions on record.
8. Optional: click Hardware in the left blade for serial number, model, storage, and network details; click Device compliance for the specific policies that contribute to the compliance verdict.

If you need the device to report fresh data before deciding on next steps, click Sync at the top of the device blade and refresh after a few minutes.

Check device status using Microsoft Graph

All endpoints below live under https://graph.microsoft.com. The deviceActionResults navigation property is only exposed on the beta endpoint, so use /beta for the action-status call.

Step 1 — Find the device by name

GET /beta/deviceManagement/managedDevices?$filter=deviceName eq 'DESKTOP-GORGEOUS-OPTIMAL458'

Example response (trimmed):

{
  "value": [
    {
      "id": "cea20c5f-54ee-44e6-9730-604c69a828f1",
      "deviceName": "DESKTOP-GORGEOUS-OPTIMAL458",
      "userPrincipalName": "alex@contoso.com",
      "operatingSystem": "Windows",
      "osVersion": "10.0.22631",
      "complianceState": "compliant",
      "lastSyncDateTime": "2026-03-04T10:13:10Z",
      "isEncrypted": true,
      "serialNumber": "SN2766LUHTM",
      "model": "Surface Laptop 5",
      "manufacturer": "Microsoft"
    }
  ]
}

If the device cannot be found by exact name, try a startswith filter or search by serialNumber:

GET /beta/deviceManagement/managedDevices?$filter=startswith(deviceName,'DESKTOP-')
GET /beta/deviceManagement/managedDevices?$filter=serialNumber eq 'SN2766LUHTM'

Step 2 — Retrieve recent remote action results

Capture the id from step 1 and request the deviceActionResults property explicitly:

GET /beta/deviceManagement/managedDevices/{managedDeviceId}?$select=id,deviceName,deviceActionResults

Example response when actions exist:

{
  "id": "cea20c5f-54ee-44e6-9730-604c69a828f1",
  "deviceName": "DESKTOP-GORGEOUS-OPTIMAL458",
  "deviceActionResults": [
    {
      "actionName": "wipe",
      "actionState": "pending",
      "startDateTime": "2026-03-05T09:12:00Z",
      "lastUpdatedDateTime": "2026-03-05T09:12:00Z"
    }
  ]
}

When deviceActionResults is empty or omitted from the payload, there are no recent or pending remote actions recorded for the device.

Common actionState values

• none — no action
• pending — queued, waiting for the device to check in
• canceled — canceled before execution
• active — currently executing
• done — completed successfully
• failed — action failed; inspect device logs
• notSupported — action is not supported on this platform

Step 3 — (Optional) Trigger a sync

If the lastSyncDateTime is stale, queue a check-in so subsequent reads are accurate:

POST /beta/deviceManagement/managedDevices/{managedDeviceId}/syncDevice

The call returns 204 No Content on success. The action will appear in deviceActionResults until it completes.

Check device status using PowerShell and Microsoft Graph

The Microsoft.Graph.Beta.DeviceManagement module exposes cmdlets for both the device record and its action results. If you do not have the module installed, run Install-Module Microsoft.Graph.Beta -Scope CurrentUser once.

Quick interactive check

# Connect with read-only scope
Connect-MgGraph -Scopes "DeviceManagementManagedDevices.Read.All" -NoWelcome

# Find device by name
$device = Get-MgBetaDeviceManagementManagedDevice -Filter "deviceName eq 'DESKTOP-GORGEOUS-OPTIMAL458'"

# Show key status fields
$device | Select-Object DeviceName, UserPrincipalName, OperatingSystem, OsVersion,
    ComplianceState, LastSyncDateTime, IsEncrypted, SerialNumber, Model

# Retrieve device action results (requires $select on beta)
$detail = Get-MgBetaDeviceManagementManagedDevice -ManagedDeviceId $device.Id `
    -Property "id,deviceName,deviceActionResults"

$detail.DeviceActionResults | Format-Table ActionName, ActionState, StartDateTime, LastUpdatedDateTime

What you will see

• If the device has no recent remote actions, DeviceActionResults is an empty array.
• A pending wipe or retire appears with ActionState = 'pending' until the device checks in and executes it.
• Failed actions surface as ActionState = 'failed' — inspect the device's event logs or MDM diagnostics for root cause.

Use the downloadable script below to wrap this into a reusable function that accepts a device name or serial number and produces a clean status report.