[Intune] Upgrade Mobile devices at end of vendor support

The platform identifies mobile devices running operating systems that are approaching or have reached end of vendor support and recommends upgrading to supported versions. Operating systems at end of support no longer receive vendor security patches, software updates, or technical support, leaving devices vulnerable to emerging threats, compatibility issues, and performance degradation.

Recommendation Impact Across KPIs

KPI	Impact	Calculated?
Reliability:	Reduces potential downtime based on time elapsed since end of support date	✅
Security Compliance:	PRIMARY REC - Addresses NIST compliance scores weighted by asset importance	✅
Economic:	Cost implications of device upgrades and potential security incidents	❌
User Experience:	Impact on application compatibility and performance	❌
Environment:	No direct environmental impact measured	❌

Score Calculation

1. Data Ingestion

Device ID and Name
Current Operating System Version
Last Sign-in Time
Support Status
Device Management Status

2. Data Enrichment

Mapping to vendor EOL dates
Compatible upgrade paths
NIST compliance requirements
Security vulnerability status

3. Health Score

Calculate Reliability score based on potential downtime minutes and end of support date multiplier
Security Compliance score calculated using NIST Score × Asset Weight × Time multiplier
Scores prioritized for devices within 180 days of vendor mainstream support end

Example Graph

Pie chart showing distribution of mobile devices by support status: - Percentage of devices still in support - Percentage requiring EOL updates (within 180 days of mainstream support end) - Percentage at security risk (within 180 days of security vulnerability)

Business Opportunities

Product Sales Opportunity

As a provider this recommendation provides you an opportunity to sell new mobile devices and licenses. Current offerings include iPhone Pro 16 at $999 USD, with links to both Apple and Samsung latest models for customer choice.

Professional Services Opportunity

The recommendation provides an opportunity for professional services to manage the upgrade process, including device configuration, data migration, and user training. Services can be customized based on deployment size and complexity.

Remediation Guidance

To resolve the recommendation the following steps are recommended:

Develop an Upgrade Plan
Identify affected devices
Assess compatibility
Allocate resources

Create deployment phases

Communicate with End Users

Notify employees of upcoming changes
Schedule upgrades during off-peak hours

Establish IT support processes

Execute the Upgrade

Deploy automated updates where possible
Perform manual upgrades as needed
Handle device replacements

Verify application compatibility

Post-Upgrade Monitoring & Optimization

Monitor device performance
Verify compliance
Collect user feedback

Supporting Information

Supported Data Sources

Microsoft Graph Entra
Microsoft Graph Intune

Recommendation Categorisation

End of Support
Security Compliance
Device Management

Supported Instances

iOS Devices
Android Devices

Planned Instances

Implementation status: In Development
New recommendation type
Continuous monitoring via Graph API endpoints