SoMundayn shares news about an underused Office feature: "If you go to this link and turn this on, the portal will be populated (over time) with all of your Office versions, additionally showing workstations that are behind on security updates.
You don't need Intune for this either, I guess it works based on the UPNs logging into your tenant to the O365 Apps.