Failure quarantine & safe retries
Failures are isolated, diagnosed, and retried — not blast-radius events.
What it is
The capability, in plain terms
When a device run fails recoverably, it pauses, surfaces the diagnostic, and offers retry. When it fails past the point of safe rollback, it routes to quarantine with a structured triage workflow. The rest of the wave keeps moving.
How it works
The machinery underneath
Every step is safe to retry — a re-run never repeats completed work, so a device can never execute the same step twice. Quarantined devices are listed, diagnosed, retried, or closed out from the same console the wave runs in.
One bad device doesn’t stop a 500-device wave.
Operators triage from the same console they ran the wave from.
Rollback is automatic while it’s safe; manual remediation only after the point of no return.
Explore more features
Zero-touch device migration
Identity, profile, Intune enrollment, Autopilot, BitLocker — migrated zero-touch; the user clicks Start once.
Tamper-evident audit & receipts
Every action is sealed in a tamper-evident ledger, cryptographically signed, and stored where it can’t be altered.
Two-approver production flow
Large waves need a second approver — and the operator who built the wave can’t sign it.