Forum Discussion

EntilZha's avatar
EntilZha
Iron Contributor
Aug 26, 2019

Get Azure Joined Device Information using PowerShell

I like to capture as much information on an Azure Join device using Powershell. Some of the information I looking to capture can be found in "Intune for Education" --> Device --> Go to Device Detail. 

 

Not limited to the information below.

 

I tried using what GitHub had for Intune (https://github.com/microsoft/Intune-PowerShell-SDK) but couldn't get it to work.

 

Any help would greatly be appreciated.

 

Thank You,

-Larry 

Graph API
Intune

6 Replies

  • bjcls's avatar
    bjcls
    Brass Contributor
    Aug 27, 2019

    EntilZha except for the Windows Defender status, the command Get-IntuneManagedDevice will give you all the information in the device properties.

     

    What kind of information are you looking for specifically?

     

    • EntilZha's avatar
      EntilZha
      Iron Contributor
      Aug 27, 2019

      bjcls  thank you for responding. 

       

       So far I was able get most the of information I'm looking for from an Azure Join device except:

      • Recent Check-In (users that log into the device)
      • group memberships for device

      Thank You again for your help.

       

      -Larry

      • bjcls's avatar
        bjcls
        Brass Contributor
        Aug 27, 2019

        EntilZha I'm glad I could help!

        If you use the 'beta' schema instead of 'v1.0' (https://github.com/Microsoft/Intune-PowerShell-SDK#known-issues-and-workarounds) and you run the same command: Get-IntuneManagedDevice an extra value: usersLoggedOn is shown.

        Update-MSGraphEnvironment -SchemaVersion 'beta'

         This value shows an ID that you can lookup with the command: Get-AzureADUser -ObjectId

         

        For your second question I've used a Graph API call, because I didn't find a command in this module:

        $apiUrl = "https://graph.microsoft.com/beta/devices/$Deviceid/memberof"
        $Data = Invoke-RestMethod -Headers @{Authorization = "Bearer $($Tokenresponse.access_token)" } -Uri $apiUrl -Method Get
        $DeviceGroups = ($Data | select-object Value).Value

        Or you could check the members of a group: Get-AADGroupMember instead of the group membership.

Resources