Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Intune Copilot Explorer can locate Windows devices by operating-system version using a natural-language request. In the Microsoft Intune admin center, open Explorer, ask for the version or build you need, choose the closest matching built-in query view, and verify that the returned field is the actual OS version before taking action. Explorer is convenient, but it is not a general KQL console and its results depend on the views and inventory data available in your tenant.
What Intune Copilot Explorer does
Explorer interprets a natural-language request, matches it to an available Intune query view, collects any parameters the view requires, and presents results with a Copilot-generated explanation or summary. Microsoft lists finding devices, finding devices that need updates, and investigating device information as Explorer use cases: Microsoft’s Intune Explorer documentation.
Explorer is different from Device Query for Multiple Devices. Explorer chooses from built-in views; Device Query lets you write supported KQL against inventory data. A single-device Device Query is intended for an on-demand query against one Windows device, while assignment filters target apps and policies and compliance policies enforce version requirements.
Recommended Free Tools
Before you start
- Have access to the Intune admin center and the Explorer capability. Copilot in Intune is licensed through Microsoft Security Copilot, and availability varies by tenant, cloud, Microsoft 365 plan, and rollout. Check Microsoft’s Intune planning and licensing guidance.
- Ensure the Windows devices are enrolled and reporting inventory. The required OS-version field must be exposed by the selected view.
- Confirm that your target is precise: a complete four-part build, a feature-update release, a minimum version, or a count by version.
- Remember that inventory is not necessarily live. Microsoft says hardware and software inventory shown in device details refreshes in the Intune service every seven days: device details documentation.
Steps to find a specific Windows OS version
- Open Explorer. Sign in to the Microsoft Intune admin center and select Explorer. The prompt box should load before you submit a request.
- State the platform, field, operator, and scope. For example, specify Windows, operating-system version or OS build, exact match or below/above, and whether you want a device list or a count.
- Enter a precise request. Use a full value when the view accepts one, such as
Find Windows devices with operating system version 10.0.22631.XXXX.Do not assume that entering only22631has the same meaning. - Choose the closest suggested view. Select a suggestion that clearly refers to Windows devices, operating-system version, device inventory, update status, or compliance. Read the query description or Copilot explanation; a related view may use a different property or granularity.
- Provide requested parameters. Some views ask for platform, device type, OS version, compliance state, update status, or another value. Enter the complete version string exactly as it is stored where possible.
- Validate the returned data. Confirm that the platform is Windows, the displayed value is the intended operating-system-version field, device names or identifiers are present, and the result scope includes the ownership and join types you expect.
- Take an action when the view supports it. Depending on the view and your permissions, Explorer output can be used to add devices or users to a group, create a custom report, target an app or policy, or start an update or remediation workflow. Action buttons are not available for every view.
Prompt examples that remove ambiguity
| Objective | Example prompt |
|---|---|
| Exact build | Find Windows devices with operating system version 10.0.22631.XXXX. |
| Corporate devices on a build | Show corporate Windows devices running OS build 10.0.22631.XXXX. |
| Below a minimum | Find Windows devices below operating system version 10.0.22631.XXXX. |
| Above a minimum | Find Windows devices at or above operating system version 10.0.22631.XXXX. |
| Count by version | Show the number of Windows devices grouped by operating system version. |
| Update investigation | Find Windows devices that need an operating-system update. |
Avoid requests such as “show old Windows devices.” “Old” could be interpreted as a compliance state, update recommendation, feature release, or another inventory property.
#1 Best Overall
- BUILT FOR SERVERS & LEGACY SYSTEMS: Ideal for servers and industrial PCs with native VGA video; USB Crash cart adapter connects your laptop to a legacy headless system, turning your laptop into a portable console for servers, PCs, ATMs, kiosks, etc
- EFFICIENT TROUBLESHOOTING: Transfer files, take screenshots & log activity using downloadable software (pen drive not incl); Ensure you download & install the latest drivers & software for specific NOTECONS02 model (see additional content for more info)
- BIOS-LEVEL CONTROL: Connect a laptop to the USB/VGA ports on a server (cables incl) for instant BIOS/UEFI control; SUPPORT VARIES: keyboard/video/mouse support depend on system firmware; Some systems limit functions (see additional content for more info)
- SELF-POWERED: The KVM adapter is powered by the server-side USB connection, reducing strain on the laptop's battery and eliminating the need for an AC outlet, allowing you to connect to any PC or device with a VGA output port and USB connection
- COMPACT DESIGN: This TAA Compliant pocket-sized data center crash cart adapter requires no additional accessories, eliminating the need to carry around a traditional crash cart/trolley when troubleshooting and servicing your systems
Version names and build numbers are not interchangeable
Windows 11 23H2 identifies a feature-update release. A value such as 10.0.22631.XXXX identifies a Windows build family and revision. Cumulative updates can change the revision component, so an exact equality query and a release-family query answer different questions. Decide whether you need a marketing release, major.minor.build, or complete major.minor.build.revision value.
Windows compliance settings use the major.minor.build.revision format. On a device, run ver to see a value such as Microsoft Windows [Version 10.0.17134.1]; see Microsoft’s Windows compliance settings reference.
Verify a match on the device
- Go to Devices → All devices.
- Select a returned device.
- Open Hardware and compare the operating system, operating-system version, and build information with the Explorer result.
Use this spot check to catch a view that matched compliance or update status rather than the exact version field. Also check the last inventory timestamp; a correct stored value can still be operationally stale.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →When Explorer is not precise enough: Device Query for Multiple Devices
Use the multi-device query capability when you need deterministic KQL, a repeatable query, grouping by version, or an exact fleet-wide result. Microsoft documents prerequisites including Intune-managed, corporate-owned Windows devices; a deployed Properties catalog policy collecting inventory; and a role such as Help Desk Operator or a custom role with Managed Devices/Query and managed-device read permissions. The Properties catalog can collect OS Version: Properties catalog documentation.
Rank #2
- Nitomtyu USB 940-0299A Console Cable Serial Cable for UPS AP9630 AP9631 AP9635 and so on
- USB NMC2 2.5mm console cable for NMC2 AP9630 AP9630CH AP9631 AP9631CH AP9635 AP9635CH
- FT232 chip used, ensures stable transmission of signals, automatic installation and update support.
- Wide Compatible with all windows Mac OS, Linux and so on
- Service: If any issues about product or package, please feel free to message us for support, we will reply within 24hours to resolve all related issues.
- In the Intune admin center, select Devices.
- Select Device query.
- Enter a supported KQL query and select Run.
Count devices by OS version
OsVersion
| summarize DevicesCount = count() by OsVersionThis is Microsoft’s documented pattern for grouping Windows devices by OS version: Device Query for Multiple Devices.
Illustrative exact-match pattern
OsVersion
| where OsVersion == "10.0.22631.XXXX"
| project Device, OsVersionTreat this as an example, not a guaranteed tenant schema. Confirm the entity, property name, and stored value format in the Intune Data Platform Schema before using it operationally. A summary query is useful for deployment planning; a device-level projection is better for remediation.
Multi-device query results are limited to 128 KB, input is limited to 2,048 characters, and Microsoft documents a maximum of 15 queries per minute. Large outputs can therefore be truncated: Device Query limits.
Free tools Windows power users keep installed
One-click scans. No signup required.
Choose the right Intune tool
| Need | Best fit | Trade-off |
|---|---|---|
| Fast natural-language discovery | Copilot Explorer | Depends on available built-in views and inventory freshness. |
| Exact, repeatable fleet query | Device Query for Multiple Devices | Requires Advanced Analytics or another entitlement, inventory prerequisites, and KQL. |
| Live check of one Windows PC | Single-device Device Query | One device at a time; real-time response requires supported conditions and Windows Push Notification Services. |
| Dynamic app or policy targeting | Assignment filter | Syntax and property availability must be monitored. |
| Enforce a minimum or maximum version | Compliance policy | Designed for compliance and access decisions, not exploratory reporting. |
| Manual spot check | Device details → Hardware | Slow at fleet scale and dependent on inventory age. |
Assignment filters and compliance policies
Use an assignment filter when the goal is to target an app, configuration profile, or policy dynamically. Microsoft’s filter reference identifies operatingSystemVersion as the newer property, with comparison operators such as -eq, -ge, and -lt; the older osVersion property is being deprecated for assignment filters. For example, a rule may follow this pattern:
(device.operatingSystemVersion -ge 10.0.22631.XXXX)Check the current filter property reference because this property is documented as public preview and its supported syntax can change.
Use a compliance policy when devices below a minimum version must become noncompliant, trigger Conditional Access, or receive user-facing remediation. Configure the minimum or maximum OS version with the full version format in the Windows compliance settings reference.
Troubleshooting Explorer results
No devices are returned
- The device has not checked in or inventory has not populated.
- The prompt uses a release name while the view expects a full build, or the stored value uses a different format.
- Your tenant lacks the relevant Explorer view or licensing.
- Ownership, platform, enrollment type, or cloud scope excludes the devices.
Ask Explorer for all Windows devices grouped by OS version, copy an exact value from the returned data, retry with that value, and verify one device under Devices → All devices → Hardware. If exact filtering remains essential, move to multi-device Device Query.
The result appears incomplete
Determine whether the view is a summary, whether results paginate, whether inventory age explains missing devices, and whether ownership or enrollment scope is restricting the result. Do not call an Explorer result a complete fleet census unless its scope and view demonstrate that coverage.
Rank #4
- Seamless compatibility across USB-C and USB-A port devices including Windows PC, Mac, Chromebook, gaming consoles, mobile phones, and tablets
- Store up to 5TB[1] worth of photos, music, videos, games, and documents
- Help secure your important files with password protection and 256-bit AES hardware encryption
- Back up smarter with included device management software[2]
- Enjoy peace of mind with a 3-year limited warranty[3]
The version is stale
Compare the inventory timestamp with a current check-in or, for an eligible individual device, a single-device Device Query. Microsoft documents WNS as mandatory for the real-time request and response path for single-device queries: single-device Device Query requirements.
Device Query fails
For multi-device queries, verify the Properties catalog policy, inventory collection, role permissions, and the 2,048-character and 128-KB limits. For single-device queries, verify that the device is Intune-managed and corporate-owned, Microsoft Entra joined or hybrid joined, and able to use WNS.
Copilot chooses the wrong interpretation
“Specific OS version” can be interpreted as a device property, compliance state, feature update, or update recommendation. Read the generated explanation and inspect the actual field before exporting, grouping, or deploying anything.
Practical recommendation
Start with Explorer when you need a quick, guided discovery workflow. Use Device Query for Multiple Devices when the query must be exact, auditable, repeatable, or grouped by version. Use assignment filters for dynamic targeting and compliance policies for enforcement. In every case, distinguish a release label from a full build and account for inventory age before acting on the device list.
Best Value
- SIMPLE CONNECTION: 6 ft / 1.8 m Cisco USB console cable connects a USB-equipped laptop or desktop to the RJ45 port of your console router, without the need for an adapter
- MAXIMUM COMPATIBILITY: Directly connect the rollover cable with compatible Cisco, Juniper, Ubiquiti or TP-Link routers
- HIGH-QUALITY DESIGN: The USB to Ethernet cable is constructed of high-quality materials supporting transfer rates of up to 460Kbps
- USB SUPPORT: Create a reliable connection from the USB 2.0 port on your computer to the RJ45 port on your router, server, firewall or switch with the USB rollover cable
Frequently Asked Questions
Can Intune Copilot Explorer guarantee every device on an exact build?
No. Coverage depends on the selected built-in view, inventory completeness and age, device scope, permissions, and the version field exposed by that view.
Is Explorer a KQL editor?
No. Explorer interprets natural language and selects built-in Intune query views. Use Device Query for Multiple Devices when you need direct, repeatable KQL.
What should I use to enforce a minimum Windows version?
Use a compliance policy for minimum or maximum version enforcement, or an assignment filter when the requirement is dynamic app or policy targeting.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
