Loading...

Using PowerShell and Graph to get BSOD results (code and date ) for Intune devices

Reply A+ A-

In this post we will see how to use PowerShell and Graph to get BSOD results (date and error code) for a specific device.


Context

- You have enrolled devices

- You want to check if a device has some BSOD recently

- You want to display date and error code


The solution

In Endpoint Analytics you can get some awesome information like startup performance and BSOD.

For this we will proceed as below:

1. Go to Endpoint Analytics > Startup performance


2. Select Device performance tab


3. Type a device name in the search bar

4. Click on the result

5. Select Startup performance


6. You will have some info like:

- Insights and recommendations

- Boot history

- Sign-in history

- Top 10 impacting startup processes

- OS restart history

7. We will use there part: OS restart history

8. It list all restart including BSOD



Graph resource

Now let's see how to do the same with Graph.

For this we will use the developer mode of our brower to check appropriate resource.

You can see how to proceed in my post there.

Using this method, the appropriate Graph resource is:

deviceManagement/userExperienceAnalyticsDeviceStartupHistory



Do it with PowerShell

Now let's do it with PowerShell.

I created two scripts using one of both modules:

- Microsoft.Graph.Intune

- MSAL.PS


You can get the script by clicking on the below picture:


It will work as below:

1. Open PowerShell prompt

2. Use the appropriate PS1 script (depending of the module you want to use)

3. Type script name: GetDevice_BSOD.ps1

4. Then add devicename as parameter, as below:

5. See below the result:


6. Use ShowGrid to display result in gridview, as below:

7. See below the result:

slider 4456100028722062368

Enregistrer un commentaire

Accueil item

Award

Sponsors

Learn KQL in one month

You want to support me ?

Mes articles en français

Books in French


Stats