Light Mode

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Sign up
Appearance settings

Latest commit

History

History

AndroidEnterprise

README.MD

Intune Android Enterprise script samples

This repository of PowerShell sample scripts show how to retrieve, create, delete, and modify Intune service resources using cmdlets from the Microsoft Graph PowerShell SDK.

Documentation for Intune and Microsoft Graph can be found here Intune Graph Documentation.

Documentation for the Microsoft Graph PowerShell SDK can be found here Microsoft Graph PowerShell SDK.

Disclaimer

Some script samples retrieve information from your Intune tenant, and others create, delete or update data in your Intune tenant. Understand the impact of each sample script prior to running it; samples should be run using a non-production or "test" tenant account.

Within this section there are the following scripts with the explanation of usage.

1. Get-AndroidDeviceOwnerProfiles.ps1

This script gets any Android Enterprise Device Owner Enrollment Profiles from the Intune Service that you have authenticated with.

2. Get-AndroidDedicatedDeviceQRCode.ps1

This script retrieves the QR code image from a given Dedicated Device Enrollment Profile, and saves it to a specified location. If there are multiple enrollment profiles, you will be prompted to select which one to work with.

The script will show the following warning before export.

- You are about to export the QR code for the Dedicated Device Enrollment Profile 'Profile Name'
- Anyone with this QR code can Enrol a device into your tenant. Please ensure it is kept secure.
- If you accidentally share the QR code, you can immediately expire it in the Intune UI.
- Devices already enrolled will be unaffected.

3. Get-AndroidWorkProfileConfiguration.ps1

This script queries the Intune Service and returns Enrollment Restriction configurations that impact Android Enterprise. If a configuration is found it will list the AAD Groups assigned to it (with the exception of the Default tenant enrollment profile, which is always assigned to All Users).

4. AE-EnrollmentProfile_Bulk_Create.ps1

This script automates the creation of Android Enterprise Dedicated Device enrollment profiles and their associated tokens in Microsoft Intune. The script reads a CSV file containing the desired enrollment profile names (without a header row) and iterates through each profile name. For each profile, it sets a token validity period of 90 days (7776000 seconds), creates an enrollment profile with a specified display name and description, and generates a token for the profile. If the profile or token creation fails, the script catches the exception and logs an error message. Before running the script, you will need to update the $csvPath variable on line 16 to point to the .csv location on your machine.

Additionally, the script includes a commented-out section that demonstrates how to perform the same operations in parallel for faster processing, which requires PowerShell 7 or later.