Monthly fleet check
Twenty minutes that prevent most problems.
Put this in your calendar for the first working day of each month.
1. Compare the numbers (2 minutes)
On the Dashboard, note:
- enrolled devices,
- online in the last 15 minutes,
- compliant devices.
Compare with last month. A drop in online or compliant that you cannot explain is what you are looking for.
2. Clear the silent devices (5 minutes)
In Alerts, filter to Silent 24h+. For each device, decide one of:
- It is in a cupboard on purpose → fine, note it.
- Someone has it and it is off → chase them.
- It is lost → Lost or stolen device.
- It is dead or gone → Retire a device.
Do not leave anything undecided. Undecided devices are next month's noise.
3. Work the high-severity findings (5 minutes)
Filter Alerts to high severity and seen in the last 24 hours. Those are the fixes that will actually apply. Follow Fix a non-compliant device.
4. Check who has access (3 minutes)
In Settings → Members, read the list and ask of each person: do they still work here, and do they still need this role? Remove anyone who has left. Drop anyone from Admin who does not need to wipe devices.
Keep at least two admins.
5. Skim the audit log (3 minutes)
In the Audit log, look at the Command and RBAC categories for the past month. You are looking for anything you do not recognise: a wipe you did not authorise, a role change nobody mentioned.
6. Check your apps (2 minutes)
On Apps, confirm every app in the list is still something you want deployed. Use the app usage information on device pages to spot software nobody opens — that is licence money back.
7. Write down what you found
Three lines is enough: what you fixed, what you are watching, and what you need from someone else. Over a year this becomes the record that shows your fleet is actually managed.
