APDP-DeviceAssociation-Service pre-associates Windows Autopilot device preparation devices with Intune. A client script on the installation media collects device-link data during OOBE and posts it to an Azure Automation webhook, where a runbook creates the association and can assign an APDP profile and send Teams notifications. An optional switch removes existing Autopilot registrations, so review the configuration before using it in production.
Swipe to see more
2 files scanned on Oct 26, 2026
No malicious patterns were detected. The code is aligned with legitimate Intune/Graph automation practices (managed identity, Graph API usage, Teams notifications). There are legitimate security considerations: data sent to Teams can expose inventory details; sensitive data is logged; ensure webhook endpoints are trusted and data minimization is applied. No hardcoded secrets observed beyond a configurable webhook placeholder that should be secured. Recommend tightening logging, validating webhook payload formats, and restricting external endpoints to reduce data exposure risk.
Autopilot Management is a Windows-based Intune utility that simplifies Autopilot device administration. It supports searching by serial number or device name, bulk updates to Group Tags, bulk or single deletions, and uploading hardware hashes. It can load and verify devices from CSV, backup data, and query with an optional cache for large environments. Authentication uses Azure Graph tools (MFA supported) for secure admin access.
AutopilotGroupTagger is a PowerShell-based utility for bulk updating and managing Windows Autopilot Device Group Tags, with optional unblocking of devices. It supports updating tags by group, manufacturer, model, purchase order, and interactive selection, plus exporting data and creating dynamic Entra ID groups. The tool runs with Microsoft Graph authentication and supports PowerShell 7 on Windows/macOS, including a whatIf simulation mode and Community Tool status.
Bulk Add Devices to Entra Group is a PowerShell tool that adds devices to a Microsoft Entra ID group from a CSV or Excel file via Microsoft Graph. It accepts any identifier per row, auto-detects headers, and ranks candidates by last activity to select the most recently active device when duplicates exist. Includes duplicate handling, an exclusion group, dry-run reporting, an audit trail, and automatic installation of required modules for PowerShell 5.1 or 7.
Intune App Factory is a set of PowerShell scripts run in an Azure DevOps Pipeline that automatically detects, downloads, packages, and publishes onboarded applications as Win32 apps to Microsoft Intune, ensuring up-to-date deployments. It supports onboarding via manifests, integrates the PowerShell App Deployment Toolkit, and automates version checks from Winget, Evergreen, or Storage Account sources to streamline packaging and publishing.