Endpoint Analytics & Automation Guides

How to get an report with all new enrolled devices

How to Get a Report of All New Enrolled Devices

19. March 20232. July 2026 jannikreinhard5 Comments

Keeping track of newly enrolled devices in your organization can be a challenging task when relying solely on the Intune console. Wouldn’t it be awesome to receive a complete report with all new enrolled devices automatically via email? As you know, I love automating things. In this blog post, we’ll explore a simple and efficient way to generate a weekly report with all new enrolled devices using PowerShell, Azure Automation Runbooks, and Microsoft Graph API. This automated solution will save you time and effort, allowing you to focus on more important tasks in managing your organization’s devices. So, let’s dive in and learn how to create this valuable report with all new enrolled devices!

Endpoint analytics remediation script community repository

10. March 20232. July 2026 jannikreinhard

What could be better than working on a project together with others. Andrew Taylor, Joey Verlinden, Florian Salzmann and I have created a community endpoint analytics remediation script repository where we have written and added as many ready to use scripts as possible for you. In this blog post I want to give you more insights into these scripts and explain how you can integrate them into your environment.

Intune Wave Deployment: Create Smart Device Groups

19. February 20232. July 2026 jannikreinhard13 Comments

How do you distribute configuration profile, apps or other configurations in Intune today? In this guide to Intune Wave Deployment I want to explain and provide a script how you can easily roll out objects in Intune using waves. Here I will help you to create smart device groups defined by you that will pack a specified percentage of your devices into the groups so that you can perform a slow rollout and thus guarantee the quality.

The current script describes how you can create device groups. When you validate these rollout waves, it can also be helpful to get assignments of a device via PowerShell. If you are also interested in how to apply this to user groups or how to create a automation for the assignment, check out my new version of the Intune group assignment script.

Intune Wave Deployment smart device groups for phased configuration rollout

Automate Intune Tasks with PowerShell and Microsoft Graph

12. February 20232. July 2026 jannikreinhard3 Comments

Most have heard the term Microsoft Graph API before. Ms Graph is an interface from MS for accessing and controlling a variety of Microsoft cloud services. In this blog post I will go into more detail on how you can use Graph in conjunction with Intune, what your options are and how it all works. I’ll also give you PowerShell script examples in this blog that you can use directly.

PowerShell script for automating Intune tasks with Graph API

How to Export Intune Assignment Errors with PowerShell

5. February 20232. July 2026 jannikreinhard1 Comment

Welcome to my first blog as a Microsoft MVP! This blog will focus on a script I built to export all Intune assignment errors in one click. I created it in response to a request from a member of the community who asked how to efficiently export all errors in Intune. Instead of manually sifting through numerous reports to find errors, my script automates the process with just one click, similar to how I used the Graph Report API for Intune mass exports in a previous post.

Not only does this make the task much more convenient, but it also allows you to run the script regularly to create a historical record or receive weekly error reports automatically, or use a similar approach like my Teams notification for the Top 5 apps with installation errors. Since this request can be helpful for several people within the community, I decided to create the script and blog about it.

PowerShell script exporting Intune assignment errors to CSV

Get assignments of an device via Powershell

Get Assignments of a Device via PowerShell

29. January 202323. June 2026 jannikreinhard3 Comments

If you’ve ever stared at a misbehaving Intune device and asked yourself “which policies, profiles and apps are actually targeting this thing?”, you know how clunky the admin portal can be. Learning to pull the assignments of a device via PowerShell solves exactly that problem: given a Microsoft Entra ID device ID, the script returns every Intune assignment that resolves to it, joining direct device groups, dynamic device groups and user-based assignments through the device’s primary user. It’s the kind of script you’ll keep in your toolbox forever — handy when troubleshooting “why is this policy showing up?” tickets, indispensable when migrating tenants, and a great building block for larger automation.

Via the Intune admin center in the device overview you can see all assignments of a certain device. In the service release 2206 even the function to see the group members of a device was included. But if you want to create automations it is helpful to be able to query this information with PowerShell. I have created a script at the request of a user in the community which returns this information to you, so you can read the assignments of a device via PowerShell in seconds instead of clicking through blade after blade.

Get assignments of a device via PowerShell output in the console

Easy way to analyse MDM Diagnostic data on the client

15. January 20232. July 2026 jannikreinhard1 Comment

When an Intune-managed device misbehaves — a policy doesn’t apply, an app refuses to install, BitLocker silently fails — the truth lives on the client itself. Microsoft’s MDM Diagnostic Report bundles all of that into a single ZIP that contains everything from MDM event logs to current policy values. The problem is that browsing through the raw HTML, EVTX and registry exports is painful, and most admins never make it past the cover page. This post shows the simplest practical workflow I use to analyse MDM Diagnostic data on real client devices, extract the answers fast, and pick the few files you should open first to answer 80 % of all support questions.

In this blog I would like to give you a helpful tool to analyse MDM Diagnostic data directly on the client with the help of PowerShell, and how you can process the content in a simple way to implement remediations or to build a monitoring solution. The MDM Diagnostic data is the single richest source of truth for enrollment, policy and app state, so learning to read it quickly pays off on every support ticket. In the following sections I will explain step by step how you can use this script.

Easy way to analyse MDM Diagnostic data on the client with PowerShell

Intune mass export with the Graph Report API

27. November 202223. June 2026 jannikreinhard3 Comments

There are many ways to do an Intune mass export of your data. For example, you can use Log Analytics, the Data Warehouse or the Graph API. But if you want to export several thousand devices or apps via Graph, it can happen that Graph has a paging. Paging means that you only get a certain number of entries with one call and then you have to make another call for the next range. This means for you that you have to write a script that loops through the pages.

Another problem if you want to export e.g. all Discovered apps you have to loop through all devices because this attribute is not shared in list calls. But if you have several 10k or 100k devices this takes a long time, which is exactly why an Intune mass export approach saves you so much effort.

But there is a Graph Report API that is designed for an Intune mass export of large amounts of data and provides it to you as a CSV in a really easy way. How you can use this Intune mass export method I will explain in this blog.

Intune Device Inventory UI

13. November 202223. June 2026 jannikreinhard2 Comments

Anyone who has been working in the area of device management for a while knows that a good inventory is a very important prerequisite for good device management. With the Intune Device Inventory UI you finally get a custom inventory directly inside Intune that you can keep working with across your processes.

A very desired feature from you is to have a custom inventory directly in Intune with which you can then continue to work in certain processes. This is exactly what Florian Salzmann and I have taken up and developed a solution for you that solves exactly this problem. The Intune Device Inventory UI sits on top of the Intune Custom Inventory feature, which you can read more about in the official Microsoft Learn documentation.

Intune DevOps Pipeline: Move Objects from Dev to Prod Tenant

23. October 20222. July 2026 jannikreinhard4 Comments

The more clients are managed in your tenant and the more people have contributor rights in your tenant, the more important it becomes to have good release management processes. In this blog post I would like to introduce you to my Intune DevOps pipeline that allows you to transfer configurations from one tenant to another. This Intune DevOps approach offers the possibility that only a small number of administrators have access in the Prod tenant and all others create configurations in a Dev tenant and these are then transferred to the Prod tenant via a DevOps pipeline.

Microsoft Intune & AI Insights

Automation — Tutorials & Guides by Jannik Reinhard