Oliver Kieselbach
8a3b4136a6
The "Internal (Autopilot Monitor)" lane is labelled "never visible to the tenant" and sits on the session page shown in every live demo, but it was gated on the platform identity alone and stayed on screen when the Global-Admin view was switched off. visibleLanes() now takes the view flag as an explicit second argument and combines it with the identity, so the rule also covers the read-only Global Reader. The /annotations overview additionally filters the rendered ROWS to the visible lanes: that list is not lane-scoped by the request, so an internal row would otherwise surface there even with the lane dropped from the filter dropdown. Not a permission change -- the backend filters the lane for tenant callers regardless (GetSessionAnnotationsFunction.FilterLanesForCaller) and owns the write matrix. Also fixes the retention-override banner: the bare warning glyph inherited the base 16px size against 12px text and sat below the first line, with an mt-0.5 hand-nudge that could not hold it. Replaced by a w-4 h-4 SVG whose box matches the text-xs line box exactly, so items-start aligns it with no margin -- and it now matches the icon style of every other alert box. The IME log pattern controls needed no change: canEdit already reads isGlobalAdmin && globalAdminMode, so demo mode reaches them through the effective flag. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
AutopilotMonitor
Advanced monitoring and troubleshooting solution for Windows Autopilot deployments. Gain full visibility into every enrollment session with a detailed event timeline, fleet health dashboards, and session reporting. Define custom analysis rules to automatically detect issues and gather rules to collect targeted evidence. Retrieve diagnostics packages on demand, configure agent settings like auto-reboot behavior and automatic timezone adjustment — all managed centrally from the web dashboard.
Availability
Autopilot Monitor is publicly available — the Community plan is free. Sign in with your work account at autopilotmonitor.com; new organizations complete a short activation step after first sign-in.
Overview
Autopilot Monitor provides real-time tracking, intelligent diagnostics, and automated troubleshooting for Windows Autopilot enrollment processes. It consists of:
- Bootstrap Script — PowerShell script deployed via Intune that starts monitoring early in the enrollment process
- Monitoring Agent — Lightweight .NET application that collects telemetry and evidence during enrollment
- Backend API — Azure Functions-based ingestion and processing pipeline
- Web Dashboard — Next.js application for real-time monitoring and fleet analytics
Architecture
For detailed information about the system architecture, components, and data flow, see Architecture Documentation.
Documentation
Full admin documentation is available at docs.autopilotmonitor.com
License
This project uses a split licensing model:
- MIT License — Agent (
src/Agent/) and Shared library (src/Shared/) — unrestricted use on end-user devices - AGPL-3.0 — Backend (
src/Backend/), Web Dashboard (src/Web/), and MCP Server (src/McpServer/) — server-side components remain open source
See LICENSE for full details.