Intune Device Checker

Tired of the need to click around in Intune to collect the information you need ? 

This little tool we developed for our support engineers might help you.

The Intune Device Checker tool will show basic information about a device, including hardware information, group tag and compliance status. It additionaly can show information on failed remediation scripts and application installs. The tool has a graphical user interface and the information is shown text based, so it can be easily copied.


The tool has 4 major parts:

  1. The form
  2. Search for the device
  3. Display the device information 
  4. The remediation and application check

The form

The form we have used is based on the GUI Template created by "By Hugo Gungormez AKA KamikazeAdmin ;)" from 21/10/2021, which is using the Windows Forms. See How to build a colourful GUI for PowerShell using Winforms, Runspace Pools and Hash Tables

We have adjusted this form to our needs. It consists, next to a number of buttons, of 2 main parts, the search input and the output area.


At the bottom of the Windows the signed in user is shown, if you signed in with the wrong user either exit the tool and re-open or hit "sign out" from the file menu.

Search for the device

The first step is to search for the device, you can search on UPN, device name or serial. For the search on UPN, the domain of the signed in user is used to validate the input. 

The search on serial is done on the complete input value, but also on smaller parts of the search string, in every step removing the first character till a minumum of 6 characters. 

When the Admin doesn't have permissions for a device due to the RBAC role the admin is in, the tool only returns the Autopilot info, if found, including the group tag.

Below the flow of the search:


When search on UPN, an additional selection popup is shown when more then one device is found for the user. 


If only one device was found for the user (or only one is in your scope), the information is directly shown.

Display the device information 

When we have found the device in Intune, the infomation will be shown in the output area of the form. This information is text based and can easily be copied and pasted to for instance a incident ticket. The information displayed is depending on the type of device, the information shown includes:

  • Device name and ID
  • UPN of the primary and enrolled by user
  • Group tag from Autopilot
  • Scope tags
  • Model, serial number and bios version
  • Available and free diskspace
  • Physical memory
  • Jail broken and lost mode status
  • Teleco provider info
  • The device and compliance state
  • The compliance information

Next to the overall compliance state, the state of all compliance policies assigned to the device are shown. If any of the policies not compliant or shows an error, All underlying setting will be listed with there state and, if applicable, the error.

The remediation and application check

At the bottom of the screen there are buttons to check for failed remediations and application installs. Both check will only show any failed remediation script or application install.

Prerequisites

The Intune Device Checker tool has the following Prerequisites:
  • PowerShell 4.0 and up
  • .Net framework 2.0 and up
  • Reader permissions in Intune
  • Microsoft.Graph.Authentication
You can download the tool executable and script here: Intune Device Checker Tool

Comments

Post a Comment

Popular posts from this blog

Why pre-provision Windows devices?

Image
Recently I was asked again; “Why do you pre-provision devices?” I, or actually we, got that question several times last year. Also, in conversations with Microsoft this question pops up regularly. So, why do we pre-provision (aka. White Glove) devices? There are two main reasons to do this: Security Employee Experience And in addition, of course, the costs. Security Looking at security, by pre-provisioning devices we make sure we block things like Shift-F10, the Recovery Command prompt, etc. and to have the security policies applied before we hand the device over to the employee. Employee Experience Pre-provisioning devices will limit the time the employee needs to enroll the device to around 15 mins, with all applications installed on the device when the employee gets the desktop. As part of the pre-provisioning process, we make sure: The drivers and firmware are updated to the latest version before pre-provisioning. All core applications are installed as part of pre-provisioning....
Read more

How to do phased deployments in a cloud native world?

Image
   Back in the days when we had SCCM, we could easily setup phased deployments. In a cloud native world these controls are missing, but  we can create phased deployments based (dynamic) groups.  In this blog post I will show you how to set it up and use it. Groups First of we need to create groups that contains the devices for each phase. You can of course fill those groups manually, but in larger environments Dynamic Groups will be a better option. We will use the first character of the DeviceId in our dynamic query to select the devices per group.  Keep in mind that the DeviceId is containing hexadecimal characters, so that means 16 options (0 till F) per character. How big you want to make the groups is up to you, but I have chosen for a group for each first character, so 16 groups. With 16 group you have around 6.25% of your devices per group. Of course this is a bit depending on the size of the environment, for 60K+ clients environment the distribution look...
Read more