Home/Solutions/User device monitoring
User device monitoring

Know the state of every laptop and desktop before the user calls

A lightweight agent on each Windows, macOS or Linux device reports its health, disks, antivirus and firewall status, critical events, installed software and storage, and monytr.ai raises an alert when something is wrong. Devices enrol in bulk through Intune or any script, and everything sits beside your servers in Company mode.

LAPTOP-021 · WINDOWS 11Illustrative data
CPU · memory22% · 71%
System disk C:64% used
SSD healthWarning · wear 26%
AntivirusDefender · up to date
FirewallOn
Critical events3 in 48 hours
Last seen2 minutes ago
What it does

Everything a service desk asks before it opens the laptop

Security, disks, events and software, on one page per device.

🛡️

Security status at a glance

Each device reports whether its antivirus and firewall are on, which product is running and whether it is up to date: Defender on Windows, XProtect and the application firewall on macOS, ClamAV, ufw and firewalld on Linux.

💽

Disk health and wear

SMART health and SSD wear for every disk, with a Device disk unhealthy alert for a disk that has failed or is predicted to fail.

⚠️

Critical events

Curated events from the Windows event log, and error patterns from the macOS and Linux system logs, surface on each device.

📦

Storage and software

CPU, memory and disk usage with threshold colours, memory modules and slots, the largest folders and Outlook data files that explain a full disk, and the installed software list.

🔔

Alerts that clear themselves

Antivirus or firewall switched off, a failing disk and critical events raise alerts that clear on the next clean collection, and go only to the channels you tick on the notification routing tab.

🚀

Rolled out in bulk

A one-line install on Windows, macOS and Linux, or one company enrolment key that registers each device by machine ID when you deploy through Intune, so a fleet needs no manual entry.

Fleet view

The devices that need you, listed first

The company dashboard counts devices online, offline, at security risk, with failing disks and critical events, and lists the devices needing attention with what is wrong with each. A device that has sent nothing all day appears under No data today, and every device report exports as PDF or CSV.

  • View any device as it stood on a past date
  • Needs attention and the Control Room wall include user devices
  • Each device with an agent counts as one node on your plan
  • A fingerprint of the machine is recorded, and a key that later reports from a different machine is flagged for review
DEVICES NEEDING ATTENTIONIllustrative data
DESKTOP-011Antivirus off
LAPTOP-030Firewall off
LAPTOP-018C: 95% full
LAPTOP-021SSD wear 26%
LAPTOP-027Offline for 3 days
Supported devices

One agent for every desk

Windows 10 and 11
macOS
Linux desktops
Microsoft Defender
macOS XProtect and firewall
ClamAV, ufw and firewalld
Intune and Entra deployment
PDF and CSV device reports
FAQ

Questions teams
ask us first

Anything else? Ask on the demo.

What do I install on a laptop?
One lightweight agent, installed with a single command on Windows, macOS or Linux. It runs as a self-healing service, reports outbound over HTTPS with a per-device key, and updates itself through a signed channel.
Can I deploy it to the whole fleet through Intune?
Yes. A company enrolment key lets each device register itself by machine ID when the install script is pushed through Intune or any management tool, and the installer cleanly removes an earlier monytr agent first, so devices can also be moved from one portal to another.
What does it report about security?
Whether the antivirus and the firewall are on, which product is running and whether it is up to date. A device with either switched off is flagged as at risk, and the dashboard counts every one.
Does it read SSD wear on a Mac?
Windows devices report SMART health and SSD wear. Macs report the disk SMART status, and on Apple Silicon the internal SSD exposes no wear or temperature counters, so those columns stay blank.
Is user device monitoring available in MSP mode?
User device monitoring is part of Company mode, the device-centric view of an organisation's own estate. Each device with an agent counts as one node.
Keep going

Related monitoring

See it against your own environment

Thirty minutes, your infrastructure, no slideware. We will show you the gaps you cannot currently see.

Book a demo Pricing