Manage the device fleet

The Agent fleet is the admin view over every endpoint agent paired to an employee account. Use it to spot agents that have gone silent, turn an agent's auto-discovered specs into a hardware record, match its installed apps to license assignments, and revoke a device when the machine is wiped or the person leaves.

You work from Agent fleet in the admin console. The page reflects what each agent reports through enrolment, heartbeats, and daily usage reports — it doesn't push anything to the endpoint. The two write actions (link hardware, auto-assign software) and Revoke are admin-confirmed; the fleet never creates records on its own.

:::note Before you begin

• You have an admin role (admin, it-admin, or super-admin).
• At least one device is enrolled. Employees pair the agent from their own laptop — see Enroll your device.
• To roll the agent out across the company, see Deploy with Intune. :::

Find a device

Open Agent fleet in the sidebar. The page opens on the Fleet tab; the Releases tab next to it manages installer uploads and is covered in Agent overview.

The list shows one row per paired device, newest Last seen first. Each row links the employee to their user record and the hostname to the device detail page. Use the filter bar to narrow the list:

Filter	Options	Notes
Search	Free text	Matches hostname, or the employee's email, first name, or last name.
OS	All OS, macOS, Windows	Filters by the operating system the agent reports.
Active only	Off / on	Hides revoked and not-yet-paired devices. Applies as soon as you toggle it.
Stale (>14d)	Off / on	Shows only devices last seen more than 14 days ago, or never.

The OS, Active only, and Stale controls submit on change. Search applies when you select Apply or press Enter. Select Clear to drop every filter.

tip

Use Column picker in the filter bar to add the optional columns: Serial number, CPU, RAM, OS version, and Revoked at. Your choice is remembered per browser.

Read a device's status

Every row and the detail page carry one status badge. The list uses the short label; the detail page spells out Pending pairing and shows the relative time on Revoked.

Badge	Meaning
Active	The agent has paired and was seen within the last 14 days.
Stale	The agent paired but hasn't been seen for more than 14 days — the machine may be offline or the agent uninstalled.
Pending	Enrolment started but the agent hasn't completed pairing, so it can't post signed data yet.
Revoked	An admin revoked the device. Its signing key is cleared, so further agent requests are rejected.

Open a device

Select a hostname to open its detail page. The page summarizes what the agent reports and lets you act on it.

Section	What it shows
Hardware	Manufacturer and model, serial number, CPU and core count, and RAM and disk — reported with every heartbeat.
Agent	The paired employee, operating system and version, agent version, enrolment time, and last-seen time.
Installed software	The apps from the latest daily usage report, each flagged against the software catalog.

The Installed software table lists every app from the most recent report. Use the Filter apps box to search by name or identifier.

Column	Notes
Name	The application name the agent reported.
Identifier	The macOS bundle ID or Windows executable name, if the agent captured one.
Version	The installed version, if reported.
Catalog match	Links to the matching software catalog entry, or reads Not in catalog.

note

If the agent hasn't sent an installed-apps list yet, the table reads The agent hasn't posted an installed-apps list yet. One arrives with the next daily report.

Link reported hardware into the register

To turn an agent's auto-discovered specs into a tracked asset, link its hardware. This creates a hardware record (or reuses an existing one with the same serial) and opens an assignment to the paired employee.

1. Open Agent fleet and find the device, or open its detail page.
2. In the row's Actions, select Link HW.

The action matches on the reported serial number:

Condition	Result
No hardware exists with that serial	A new asset is created in the Laptop category with a generated asset tag, the reported manufacturer, model, CPU, RAM, and storage, and status Assigned.
An asset already has that serial	The existing asset is reused; its specs are refreshed from the agent data.
No active assignment for this user	An assignment opens to the paired employee, dated from enrolment and pre-acknowledged.

The employee isn't asked to acknowledge the assignment again — pairing the agent from their own laptop already proves they hold the device.

note

Link HW appears only when the device is active and has reported a serial number. If it hasn't, you'll see Device has no serial reported yet — wait for the first heartbeat.

Auto-assign reported software

To record the licenses an employee uses, auto-assign the device's installed software. The action walks the latest usage report, matches each app to the software catalog, and creates a license assignment for the paired user.

1. Open the device's detail page.
2. In the Installed software header, select Auto-assign to <name>.

For each app that matches the catalog, the action picks the newest active license for that product, or creates an Auto-detected (OnTrackio Agent) placeholder license when none exists, then assigns it to the user. Apps that already have an active assignment for the user are skipped, and apps that don't match the catalog are left alone.

The result banner reports how many apps were linked, how many were already linked, and how many weren't in the catalog (with a short preview of the unmatched names).

tip

A placeholder license has no seat count, cost, or expiry. Open it under Manage licenses and fill those in once you know what you're paying for.

Revoke a device

To cut off an agent — after a machine is wiped, lost, or an employee is offboarded — revoke the device. This clears its signing key, so any later heartbeat or usage report is rejected. The employee must pair again to restore reporting.

1. Open Agent fleet and find the device, or open its detail page.
2. In the row's Actions, select Revoke.
3. Enter a Reason (required, up to 255 characters — for example, laptop wiped, employee offboarded).
4. Select Revoke to confirm.

The device's status changes to Revoked, the revocation is stamped with the time, your account, and the reason, and the event is written to the activity log as auditor evidence.

warning

Revoking is one-way from the fleet view — there's no un-revoke action. To resume reporting, the employee re-pairs the agent, which creates a fresh enrolment.

Verify

• The filtered list shows the devices you expect; the status badge reads Active for recently-seen agents and Stale for ones past 14 days.
• After Link HW, the asset appears under Hardware with an active assignment to the employee.
• After auto-assigning, the matched licenses show the employee under Assign and revoke licenses.
• After Revoke, the device reads Revoked and the action is recorded in the audit log.

Troubleshooting

Symptom	What to do
A device is missing from the list	Check the filters. Active only hides revoked and pending devices; Stale (>14d) hides recently-seen ones. Select Clear to reset.
A row shows Pending and never goes active	Enrolment started but pairing didn't finish. Have the employee complete pairing — see Enroll your device.
Link HW isn't shown	The device is revoked, not yet paired, or hasn't reported a serial. Wait for the first heartbeat, then retry.
Device has no serial reported yet	The agent hasn't sent a heartbeat with hardware specs. Wait for the next heartbeat.
No usage report from this device yet	The agent hasn't sent a daily report, so there's nothing to auto-assign. Reports arrive once a day.
An app shows Not in catalog	The product isn't in your software catalog. Add it under Catalog, then re-run auto-assign.
The employee reads Deleted user	The paired user account was removed. The device's history stays for the record; revoke it if the machine is out of service.

Related

Agent overviewHow the endpoint agent and its data flow fit together.Read →What data is collectedExactly what each agent reports.Read →Enroll your deviceHow an employee pairs the agent from their laptop.Read →Deploy with IntuneRoll the agent out across the company.Read →