Oliver Kieselbach
13dd6723da
Field case sits-d.cloud 2026-08-09: a pinned pre-cutover agent (2.0.1282) hit the stopped legacy Function App. Azure answers with a platform-level 403 HTML page, which the agent reported as "device is not authorized" - support chases a non-existent authorization problem, and the stranded build never rescues itself because the startup self-update check runs pre-enrollment where OOBE has no network. Two fixes: - BackendApiClient reads the 401/403 body: an HTML response cannot come from our backend, so it is classified as endpoint stopped/retired/ proxied (BackendAuthException.EndpointUnavailable, page title in the message) instead of a device-authorization verdict. - AgentBootstrap retries the self-update check once after the MDM certificate appears (proof of connectivity) when the startup check never reached the manifest, with relaxed timeouts (10s check / 60s download). An applied update restarts into a current binary BEFORE session registration hits a retired endpoint. Marker files are also written on this trigger so agent_version_check reflects the latest verdict. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
AutopilotMonitor
Advanced monitoring and troubleshooting solution for Windows Autopilot deployments. Gain full visibility into every enrollment session with a detailed event timeline, fleet health dashboards, and session reporting. Define custom analysis rules to automatically detect issues and gather rules to collect targeted evidence. Retrieve diagnostics packages on demand, configure agent settings like auto-reboot behavior and automatic timezone adjustment — all managed centrally from the web dashboard.
Availability
Autopilot Monitor is publicly available — the Community plan is free. Sign in with your work account at autopilotmonitor.com; new organizations complete a short activation step after first sign-in.
Overview
Autopilot Monitor provides real-time tracking, intelligent diagnostics, and automated troubleshooting for Windows Autopilot enrollment processes. It consists of:
- Bootstrap Script — PowerShell script deployed via Intune that starts monitoring early in the enrollment process
- Monitoring Agent — Lightweight .NET application that collects telemetry and evidence during enrollment
- Backend API — Azure Functions-based ingestion and processing pipeline
- Web Dashboard — Next.js application for real-time monitoring and fleet analytics
Architecture
For detailed information about the system architecture, components, and data flow, see Architecture Documentation.
Documentation
Full admin documentation is available at docs.autopilotmonitor.com
License
This project uses a split licensing model:
- MIT License — Agent (
src/Agent/) and Shared library (src/Shared/) — unrestricted use on end-user devices - AGPL-3.0 — Backend (
src/Backend/), Web Dashboard (src/Web/), and MCP Server (src/McpServer/) — server-side components remain open source
See LICENSE for full details.