Windows 365 Alerts in Microsoft Intune
Led the product design of the Windows 365 alerting system in Microsoft Intune — giving IT administrators proactive notifications for connection failures, provisioning issues, image upload problems, concurrency limits, and storage thresholds across their Cloud PC fleet.
Before Windows 365 Alerts existed, IT administrators found out about Cloud PC problems the way most enterprise teams do — from users filing support tickets. The alerting system changed that.
The problem
Cloud PC environments surface a wide variety of failure conditions: provisioning failures, connection issues, image upload errors, concurrency limits for Flex Cloud PCs, low storage for User Experience Sync. None of these map neatly onto existing alert frameworks designed for physical devices. IT admins needed proactive visibility that matched the Cloud PC operational model.
What we built
An alerting system surfaced through the Microsoft Intune admin center with both console pop-up and email notification options. Key capabilities:
- Built-in alert rules for connection failures, provisioning failures, image upload issues, Flex Cloud PC concurrency thresholds, and User Experience Sync storage warnings
- Configurable conditions and thresholds — admins can set what triggers an alert and how sensitive it is
- Severity levels — Informational, Warning, and Critical, configurable per rule
- Email notifications — one email per trigger, with a follow-up when the condition resolves and triggers again
- Alert summary and state management — active vs. resolved states with filtering by severity, surfaced through the Intune admin center at Tenant administration → Cloud PC Alerts
What I learned
Alert systems in enterprise IT are only useful if they’re actionable. An alert that fires without a clear remediation path teaches admins to ignore it. The most important design work was ensuring each alert linked directly to the context — report details, affected devices, recommended next steps — so that investigating and acting on an alert took as little additional navigation as possible.