Part of Endpoint Toolbelt

Force an Intune sync on a Windows device

How to start an Intune sync from the admin center or on the device, how often Windows checks in by itself, and how to see that the sync really happened.

Updated on

You assigned a policy or an app and do not want to wait until the device checks in by itself. This is how you force a sync with Intune, and how you see whether it worked.

How often does Windows check in by itself?

Microsoft estimates that a newly enrolled Windows device checks in every 3 minutes for the first 15 minutes, then every 15 minutes for 2 hours, and after that about every 8 hours. A device that has been enrolled for longer checks in about every 8 hours. When you assign, change or remove a policy, profile or app, Intune sends a notification to devices that are online; it can arrive at once, but also only after a few hours. An app you only assign as available sends no immediate notification, and a device that is off gets the change at its next sync.

From the admin center

Go to Devices > All devices, select the device, click Sync and confirm with Yes. The device then checks in and fetches pending actions and policies, on Windows also apps, scripts and remediations. You need a role such as Help Desk Operator for it, or a custom role with the permission Remote tasks/Sync devices plus read permissions on managed devices.

On the device itself

The user can sync by themselves:

When the Intune Management Extension is on the device, a sync from the Company Portal, Settings or the admin center starts both an MDM check-in and an IME check-in.

Did the sync really happen?

After Sync, the admin center opens the Sync Status pane, where you follow the progress of the sync. That works for Windows and iOS/iPadOS.

What Endpoint Toolbelt adds

Endpoint Toolbelt shows and starts the sync on the device itself, without admin rights:

Sources from Microsoft

Common tasks