在 Microsoft Intune 中监视设备配置文件Monitor device profiles in Microsoft Intune

Intune 包含一些功能,可帮助监视和管理设备配置文件。Intune includes some features to help monitor and manage your device configuration profiles. 例如,可以检查配置文件的状态,查看分配的设备并更新配置文件的属性。For example, you can check the status of a profile, see which devices are assigned, and update the properties of a profile.

查看现有配置文件View existing profiles

  1. 登录到 Microsoft 终结点管理器管理中心Sign in to the Microsoft Endpoint Manager admin center.
  2. 选择“设备” > “配置文件” 。Select Devices > Configuration profiles.

列出了现有的全部配置文件,包含诸如平台之类的详细信息,并显示配置文件是否分配给任何设备。All of your existing profiles are listed, includes details such as the platform, and shows if the profile is assigned to any devices.

查看配置文件中的详细信息View details on a profile

创建设备配置文件后,Intune 会提供图形图表。After you create your device profile, Intune provides graphical charts. 这些图表显示配置文件的状态,例如成功分配给设备,或配置文件是否显示冲突。These charts display the status of a profile, such as it being successfully assigned to devices, or if the profile shows a conflict.

  1. 选择现有的配置文件。Select an existing profile. 例如,选择一个 macOS 配置文件。For example, select a macOS profile.

  2. 单击“概述” 选项卡。Select the Overview tab.

    顶部的图形图表显示分配到设备配置文件的设备数量。The top graphical chart shows the number of devices assigned to the device profile. 例如,如果配置设备配置文件应用于 macOS 设备,则图表列出 macOS 设备的计数。For example, if the configuration device profile applies to macOS devices, the chart lists the count of the macOS devices.

    它还显示分配了相同设备配置文件的其他平台的设备数量。It also shows the number of devices for other platforms that are assigned the same device profile. 例如,它显示非 macOS 设备的计数。For example, it shows the count of the non-macOS devices.

    查看分配给设备配置文件的设备数量

    底部的图形图表显示分配到设备配置文件的用户数量。The bottom graphical chart shows the number of users assigned to the device profile. 例如,如果配置设备配置文件应用于 macOS 用户,则图表列出 macOS 用户的计数。For example, if the configuration device profile applies to macOS users, the chart lists the count of the macOS users.

  3. 选择顶部图形图表中的圆圈。Select the circle in the top graphical chart. “设备状态”随即打开。Device status opens.

    列出分配给配置文件的设备,并显示配置文件是否成功部署。The devices assigned to the profile are listed, and it shows if the profile is successfully deployed. 另请注意,它只列出了具有特定平台的设备(例如 macOS)。Also note that it only lists the devices with the specific platform (for example, macOS).

    关闭“设备状态”详细信息 。Close the Device status details.

  4. 选择底部图形图表中的圆圈。Select the circle in the bottom graphical chart. “用户状态”随即打开 。User status opens.

    列出分配给配置文件的用户,并显示配置文件是否成功部署。The users assigned to the profile are listed, and it shows if the profile is successfully deployed. 另请注意,它只列出了具有特定平台的用户(例如 macOS)。Also note that it only lists the users with the specific platform (for example, macOS).

    关闭“用户状态”详细信息 。Close the User status details.

  5. 返回“配置文件”列表,选择特定的配置文件 。Back in the Profiles list, select a specific profile. 也可以更改现有属性:You can also change existing properties:

    • 属性:更改名称或更新任何现有设置。Properties: Change the name, or update any existing settings.
    • 分配:包含或排除应该应用策略的设备。Assignments: Include or exclude devices that the policy should apply. 选择 “所选组”以选择特定的组。Choose Selected Groups to choose specific groups.
    • 设备状态:列出分配给配置文件的设备,并显示配置文件是否成功部署。Device status: The devices assigned to the profile are listed, and it shows if the profile is successfully deployed. 可以选择特定设备以获取更多详细信息,包括已安装的应用。You can select a specific device to get even more details, including the installed apps.
    • 用户状态:列出受此配置文件影响的用户的名称及设备,以及配置文件是否已成功部署。User status: Lists the user names with devices affected by this profile, and if the profile successfully deployed. 可以选择特定用户以获取更多详细信息。You can select a specific user to get even more details.
    • 每个设置状态:通过显示配置文件中的各个设置来筛选输出,并显示设置是否成功应用。Per-setting status: Filters the output by showing the individual settings within the profile, and shows if the setting is successfully applied.

查看冲突View conflicts

在“设备” > “所有设备”中,可看到导致冲突的任何设置 。In Devices > All devices, you can see any settings that are causing a conflict. 出现冲突时,你还会看到包含此设置的所有配置文件。When there's a conflict, you also see all the configuration profiles that contain this setting. 管理员可使用此功能来帮助排除故障,并修复配置文件中的任何差异。Administrators can use this feature to help troubleshoot, and fix any discrepancies with the profiles.

  1. 在 Intune 中,选择“设备” > “所有设备”> 选择列表中的现有设备 。In Intune, select Devices > All Devices > select an existing device in the list. 最终用户可从公司门户应用获取设备名。An end user can get the device name from their Company Portal app.
  2. 选择“设备配置” 。Select Device configuration. 列出了适用于该设备的所有配置策略。All configuration policies that apply to the device are listed.
  3. 选择策略。Select the policy. 它会显示该策略中适用于该设备的所有设置。It shows you all the settings in that policy that apply to the device. 如果设备具有“冲突”状态,请选择该行 。If a device has a Conflict state, select that row. 在新窗口中,将看到所有配置文件,以及具有导致冲突的设置的配置文件名称。In the new window, you see all the profiles, and the profile names that have the setting causing the conflict.

既然知道了冲突的设置以及包含该设置的策略,应该较容易解决冲突。Now that you know the conflicting setting, and the policies that include that setting, it should be easier to resolve the conflict.

设备固件配置接口配置文件报告Device Firmware Configuration Interface profile reporting

警告

正在创建监视 DFCI 配置文件。Monitoring DFCI profiles is currently being created. 当 DFCI 处于公共预览版时,监视数据可能丢失或不完整。While DFCI is in public preview, monitoring data may be missing or incomplete.

与其他设备配置文件一样,DFCI 配置文件按设置进行报告。DFCI profiles are reported on a per-setting basis, just like other device configuration profiles. 根据制造商对 DFCI 的支持,某些设置可能不适用。Depending on the manufacturer's support of DFCI, some settings may not apply.

通过 DFCI 配置文件设置,你可能会看到以下状态:With your DFCI profile settings, you may see the following states:

  • 符合:当配置文件中的设置值与设备上的设置匹配时,将显示此状态。Compliant: This state shows when a setting value in the profile matches the setting on the device. 在下列情况下,可能出现此状态:This state can happen in the following scenarios:

    • DFCI 配置文件成功配置了配置文件中的设置。The DFCI profile successful configured the setting in the profile.
    • 设备没有由设置控制的硬件功能,并且配置文件设置为“已禁用” 。The device doesn't have the hardware feature controlled by the setting, and the profile setting is Disabled.
    • UEFI 不允许 DFCI 禁用此功能,并且配置文件设置为“已启用” 。UEFI doesn't allow DFCI to disable the feature, and the profile setting is Enabled.
    • 该设备缺少禁用该功能的硬件,并且配置文件设置为“已启用” 。The device lacks the hardware to disable the feature, and the profile setting is Enabled.
  • 不适用:当配置文件中的设置值为“已启用”,并且在设备上找不到匹配的设置时,将显示此状态 。Not Applicable: This state shows when a setting value in the profile is Enabled, and the matching setting on the device isn't found. 如果设备硬件不具有此功能,可能会出现此状态。This state can happen if the device hardware doesn't have the feature.

  • 不符合:当配置文件中的设置值与设备上的设置不匹配时,将显示此状态。Noncompliant: This state shows when a setting value in the profile doesn't match the setting on the device. 在下列情况下,可能出现此状态:This state can happen in the following scenarios:

    • UEFI 不允许 DFCI 禁用设置,并且配置文件设置为“已禁用” 。UEFI doesn't allow DFCI to disable a setting, and the profile setting is Disabled.
    • 该设备缺少禁用该功能的硬件,并且配置文件设置为“已禁用” 。The device lacks the hardware to disable the feature, and the profile setting is Disabled.
    • 该设备没有最新的 DFCI 固件版本。The device doesn't have the latest DFCI firmware version.
    • 在使用 UEFI 菜单中的本地“退出”控件注册到 Intune 之前,DFCI 是禁用的。DFCI was disabled before being enrolled in Intune using a local "opt-out" control in the UEFI menu.
    • 设备在 Autopilot 注册之外注册到 Intune。The device was enrolled to Intune outside of Autopilot enrollment.
    • 该设备未由 Microsoft CSP 注册到 Autopilot,也未由 OEM 直接注册。The device wasn't registered to Autopilot by a Microsoft CSP, or registered directly by the OEM.

后续步骤Next steps

设备配置文件的常见疑问、问题和解决方案Common questions, issues, and resolutions with device profiles
在 Intune 中对策略和配置文件进行故障排除Troubleshoot policies and profiles and in Intune