Your Intune devices, as an asset register
Intune knows how each device is configured. It does not keep who had it last year, when its warranty ends or what keeps going wrong with it. Vertask syncs your Intune and Entra devices and adds the rest.
Get Started Free See PricingFree plan No credit card Setup in minutes
Intune manages devices. It is not an inventory.
It answers “is this laptop compliant right now?” very well. The questions an asset register exists for — who had it, when cover ends, what keeps breaking — end up somewhere else, usually a spreadsheet.
History leaves with the user
Reassign a laptop and the primary user changes. Who had it before, and when, is hard to pull up six months later when it comes back damaged.
Warranty dates are not there
Intune has the serial number but not when the cover ends, so refresh planning starts with a lookup per machine.
A report means an export and a cleanup
The data is all there, spread across device lists and compliance views. Turning it into the inventory an auditor or insurer asked for is an afternoon in Excel.
What the sync brings in, and what Vertask adds
From Entra ID and Intune
- Device name, manufacturer, model and serial number
- Operating system and OS version
- Primary user, so each device links itself to its owner
- Last check-in, synced every 3 hours to every 30 days, or on demand
Security posture on the record
- Intune compliance state
- Encryption status, checked against escrowed BitLocker keys
- Defender real-time protection and signature freshness
- One Intune Compliance & Health report across the estate
Actions without opening the console
- Show the Windows LAPS admin password when you need it
- Retrieve BitLocker recovery keys for a locked-out user
- Force an Intune sync or start a full Defender scan
- Open the device in Entra or Intune in one click
What Intune does not keep
- Warranty end dates, with a task raised when cover ends
- A permanent record of every ownership change
- Every ticket raised against the device
- Asset groups by site or department, and asset types you define
Keeping the list honest
- Devices disabled in Entra are disabled in Vertask
- Devices removed from Entra are disabled too, unless you turn that off
- Choose whether devices not seen for 30 days are brought in
- Monitors, phones and anything else outside Intune added by CSV or by hand
Reports that answer the question asked
- Compliance, encryption, Defender and last check-in in one report
- Warranties expiring in the next 30, 60 or 90 days
- Asset age for refresh planning, ownership changes for audits
- Export any report to CSV or Excel
Connecting Intune, start to finish
Register an app in Entra
Create an app registration in your tenant and give Vertask its ID and secret. Read access covers the inventory; the device actions need permissions you can add later.
Run the first sync
Devices arrive with serial, model, OS, compliance and encryption already filled in, each linked to its primary user.
Add what Intune does not know
Add warranty dates, groups and asset types, and bring in anything outside Intune by CSV.
Let it run
The sync keeps the register current on your schedule, and disabled or removed devices are disabled rather than left behind — with their history kept.
Who it’s for
Intune administrators
The inventory and reports Intune does not give you, built from the data it already has.
Help desk technicians
The device, its owner, its recovery key and its ticket history on the ticket you are already working.
Whoever answers the audit
Compliance, encryption and ownership history, exported in the shape an auditor or cyber insurer asks for.
What’s included (Pro)
Frequently asked questions
Is Intune asset management on the free plan?
No. Assets and integrations are part of Pro at $12 per agent per month. Every new workspace starts on a 30-day Pro trial with all modules on, so you can connect your tenant and see your devices before you pay.
Does Vertask install an agent on our devices?
No. Everything comes from Microsoft Graph through an app registration in your own tenant. There is nothing to deploy and no network scanning.
What access does it need in our tenant?
An Entra app registration with read access to devices and users covers the inventory. Forcing an Intune sync or a Defender scan needs Intune’s privileged-operations permission, and showing LAPS passwords needs the LAPS read permission. Without those, the inventory still syncs.
Does it change anything in Intune?
The inventory is read-only. The only actions that reach a device are the ones an agent chooses to run: a forced Intune sync or a full Defender scan.
What happens when a device is wiped or removed?
Devices removed from Entra, or disabled there, are disabled in Vertask on the next sync, with their history kept. If you would rather keep removed devices active, there is a setting to turn that off.
Can it track devices that are not in Intune?
Yes. Monitors, phones, printers and anything else can be added by CSV import, the REST API or by hand, and they sit in the same register with the same groups, tickets and reports.