Bulk Add Devices to Entra Group is a PowerShell tool that adds devices to a Microsoft Entra ID group from a CSV or Excel file via Microsoft Graph. It accepts any identifier per row, auto-detects headers, and ranks candidates by last activity to select the most recently active device when duplicates exist. Includes duplicate handling, an exclusion group, dry-run reporting, an audit trail, and automatic installation of required modules for PowerShell 5.1 or 7.
1 files scanned on Oct 26, 2026
The code is a standard Intune/Graph admin script with expected authentication flows. No obfuscated code, remote script execution, credential harvesting, or hardcoded secrets detected. The primary risk is logging of rich device identifiers and timestamps to local files; mitigate by restricting log access, masking sensitive fields, or offering an adjustable logging policy.
An Azure Automation Runbook for Microsoft Intune that automatically updates the iOS compliance policy osMinimumVersion based on real device inventory. It queries devices via Microsoft Graph, derives a safe minimum iOS version (third newest when enough data, with a fallback), updates the policy if needed, and sends a detailed HTML notification. Emphasizes idempotency, robust error handling, and routine scheduling.
IntuneOSCompliance is a PowerShell tool that automatically updates Windows, Android, and Apple OS compliance policies, app protection policies, and device enrollment platform restrictions to the latest supported OS versions. It fetches current builds via APIs and RSS feeds, detects policies needing updates, and can push results to a rich Microsoft Teams card via an Incoming Webhook. Public Preview with configurable report-only mode and OS version offsets.
APDP-DeviceAssociation-Service pre-associates Windows Autopilot device preparation devices with Intune. A client script on the installation media collects device-link data during OOBE and posts it to an Azure Automation webhook, where a runbook creates the association and can assign an APDP profile and send Teams notifications. An optional switch removes existing Autopilot registrations, so review the configuration before using it in production.
Autopilot Management is a Windows-based Intune utility that simplifies Autopilot device administration. It supports searching by serial number or device name, bulk updates to Group Tags, bulk or single deletions, and uploading hardware hashes. It can load and verify devices from CSV, backup data, and query with an optional cache for large environments. Authentication uses Azure Graph tools (MFA supported) for secure admin access.