Windows 365: Report on Cloud PC Actions with PowerShell and MS Intune

As an administrator, it is essential to have a clear understanding of the actions taken on your organization’s Cloud PCs. To address this need, Microsoft has introduced the Cloud PC Actions Report in the Windows 365 ecosystem. This report provides detailed information on various actions taken by administrators on the Cloud PCs, making it easier to track and troubleshoot issues. In this blog post, we will explore how to access and make sense of the new report available within Microsoft Intune.

Accessing the Cloud PC Actions Report

To view the report in the Microsoft Intune portal, follow these steps:

1. Sign in to your Microsoft Intune account.

2. Click on the “Reports” tab.

3. Click on “Cloud PC Actions” under the “All Reports” section.

The Cloud PC Actions Report will display a list of all actions taken on your organization’s Cloud PCs, along with their status and date initiated. This report includes the following actions:

1. Create Cloud PC

2. Update Cloud PC

3. Delete Cloud PC

4. Restart Cloud PC

5. Start Cloud PC

6. Stop Cloud PC

7. Retry Action

Downloading the Report via MS Graph

If you want to download the report in CSV format using PowerShell, follow these steps:

1. Install the MS Graph Powershell Module by running the following command:

“`

Install-Module -Name Microsoft.Graph

“`

2. Connect to scopes and specify which API you wish to authenticate to. For example, to connect to “CloudPC.Read.All” and “CloudPC.ReadWrite.All,” run the following commands:

“`

Connect-MicrosoftGraph -Scopes “CloudPC.Read.All CloudPC.ReadWrite.All”

“`

3. Check the user account by running the following beta command:

“`

Get-MicrosoftGraphUser -UserPrincipalName

“`

Replace `` with the actual username of the user whose report you want to generate.

4. Pass the following parameters with all the fields within the report:

“`

$params = @{

“reportType” = “CloudPCActionReport”

“from” = (Get-Date).AddDays(-1)

“to” = (Get-Date)

“filters” = @{

“cloudPCName” = ““

“action” = ““

}

}

“`

Replace `` with the actual name of the Cloud PC whose report you want to generate, and replace `` with the actual action you want to filter by.

5. Use the following command to generate the report:

“`

$report = Invoke-MicrosoftGraphApi -Url “https://graph.microsoft.com/v1.0/reports/CloudPCActionReport” -Method Post -Body $params -Headers @{Authorization=Get-AzureADAccessToken}

“`

6. The report will be displayed in CSV format, which you can download and use for troubleshooting and audit purposes.

Conclusion

The Cloud PC Actions Report is a powerful tool within the Windows 365 ecosystem that provides detailed information on various actions taken by administrators on the Cloud PCs. By following the steps outlined in this blog post, you can access and make sense of the report available within Microsoft Intune. With the ability to track and troubleshoot issues, this report can help you improve your organization’s Cloud PC management and enhance productivity.