Skip to content

Correcting course

Every failing check comes with a way to fix it.

Take the helm

Take the helm gives your team step-by-step instructions. Where they apply, steps cover:

  • The fleet-wide fix first: the Intune or Group Policy setting, or the admin center path
  • A single-device fix, with the exact PowerShell command
  • Warnings where a change could break something, such as checking for old devices before disabling SMBv1, or confirming another admin account works before removing one

Find it in the side panel of any finding under Correct course, or in a report under the Correct course menu. Every check's steps are also in the check reference.

After you make a fix, the next scan confirms it. On the device page, the Logbook shows the check as Back on course.

Hand us the helm

Hand us the helm is coming soon. Trimtab will apply selected fixes for you, with your approval, an audit trail, and an automatic rescan to confirm the fix worked. Until then, Lookout and the Microsoft 365 connection remain strictly read-only.

What to fix first

  1. High severity findings, especially those marked Drifted
  2. Checks failing on many devices (see Checks), because one policy often fixes all of them
  3. Medium and Low severity findings