├── Functions ├── Disable-IntuneESP.ps1 ├── Export-IntuneDiagnosticPackage.ps1 ├── Get-IntuneEventLogs.ps1 ├── Get-IntuneMDMDiagReport.ps1 ├── Invoke-IntuneAppAssignmentReprocess.ps1 └── Invoke-IntuneSync.ps1 ├── IntuneEndpointTools.psd1 ├── IntuneEndpointTools.psm1 ├── IntuneEndpointTools.psproj ├── LICENSE ├── README.md ├── docs ├── Disable-IntuneESP.md ├── Export-IntuneDiagnosticPackage.md ├── Get-IntuneEventLogs.md ├── Get-IntuneMDMDiagReport.md ├── Invoke-IntuneAppAssignmentReprocess.md └── Invoke-IntuneSync.md └── en-US └── IntuneEndpointTools-help.xml /Functions/Disable-IntuneESP.ps1: -------------------------------------------------------------------------------- 1 | function Disable-IntuneESP 2 | { 3 | $identity = [System.Security.Principal.WindowsIdentity]::GetCurrent() 4 | $principal = New-Object System.Security.Principal.WindowsPrincipal($identity) 5 | if (-Not $principal.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)) 6 | { 7 | Write-Error -Message "You must run this cmdlet with Administrator Privelages" 8 | return 9 | } 10 | $EnrollmentKey = Get-ChildItem HKLM:\Software\Microsoft\Enrollments -recurse | Where-Object { $_.name -like "*firstsync*" } 11 | $EnrollmentKey | Set-Itemproperty -name SkipDeviceStatusPage -value 1 -Force 12 | $EnrollmentKey | Set-Itemproperty -name SkipUserStatusPage -value 1 -Force 13 | Get-Process "winlogon" | stop-process -Force 14 | } 15 | -------------------------------------------------------------------------------- /Functions/Export-IntuneDiagnosticPackage.ps1: -------------------------------------------------------------------------------- 1 | function Export-IntuneDiagnosticPackage 2 | { 3 | param ( 4 | [string]$OutputFolder = "$env:SystemDrive\IntuneDiagnostics" 5 | ) 6 | $identity = [System.Security.Principal.WindowsIdentity]::GetCurrent() 7 | $principal = New-Object System.Security.Principal.WindowsPrincipal($identity) 8 | if (-Not $principal.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)) 9 | { 10 | $command = @" 11 | Start-Process "$env:SystemRoot\system32\MdmDiagnosticsTool.exe" -argumentlist "-area Autopilot;DeviceProvisioning;Tpm -zip $OutputFolder\IntuneDiagnostics.zip" -Wait -NoNewWindow 12 | "@ 13 | $bytes = [System.Text.Encoding]::Unicode.GetBytes($command) 14 | $encodedCommand = [Convert]::ToBase64String($bytes) 15 | Start-Process "Powershell.exe" -ArgumentList "-EncodedCommand $encodedCommand" -Verb runas -Wait 16 | } 17 | else 18 | { 19 | $command = "$env:SystemRoot\system32\MdmDiagnosticsTool.exe" 20 | $arglist = "-area Autopilot;DeviceProvisioning;Tpm -zip $OutputFolder\IntuneDiagnostics.zip" 21 | Start-Process $command -ArgumentList $arglist -Wait 22 | } 23 | "Diagnostics collect to {0}" -f "$OutputFolder\IntuneDiagnostics.zip" 24 | explorer $OutputFolder 25 | 26 | } -------------------------------------------------------------------------------- /Functions/Get-IntuneEventLogs.ps1: -------------------------------------------------------------------------------- 1 | function Get-IntuneEventLogs 2 | { 3 | param( 4 | [int]$Id, 5 | [Switch]$ErrorOnly 6 | ) 7 | 8 | begin 9 | { 10 | $LogName = 'Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin' 11 | if ($ErrorOnly) { $LogLevel = 1, 2, 3 } 12 | else { $LogLevel = 1, 2, 3, 4 } 13 | $Hash = @{ 14 | LogName = $LogName 15 | Level = $LogLevel 16 | } 17 | if ($Id) { $Hash.Add('ID',$Id) } 18 | } 19 | 20 | 21 | process 22 | { 23 | $Events = Get-WinEvent -FilterHashtable $Hash 24 | } 25 | end 26 | { 27 | return $Events 28 | } 29 | } 30 | 31 | 32 | -------------------------------------------------------------------------------- /Functions/Get-IntuneMDMDiagReport.ps1: -------------------------------------------------------------------------------- 1 | function Get-IntuneMDMDiagReport 2 | { 3 | param ( 4 | [string]$OutputFolder = "$env:SystemDrive\IntuneDiagnostics" 5 | ) 6 | $command = "$env:SystemRoot\system32\MdmDiagnosticsTool.exe" 7 | $arglist = "-out $OutputFolder" 8 | Start-Process $command -ArgumentList $arglist -Wait 9 | "Diagnostics collect to {0}" -f $OutputFolder 10 | & "$OutputFolder\MDMDiagReport.html" 11 | } -------------------------------------------------------------------------------- /Functions/Invoke-IntuneAppAssignmentReprocess.ps1: -------------------------------------------------------------------------------- 1 | function Invoke-IntuneAppAssignmentReprocess 2 | { 3 | [CmdletBinding()] 4 | param () 5 | BEGIN 6 | { 7 | #Check if running with administrative privelage 8 | $identity = [System.Security.Principal.WindowsIdentity]::GetCurrent() 9 | $principal = New-Object System.Security.Principal.WindowsPrincipal($identity) 10 | if (-Not $principal.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)) 11 | { 12 | Write-Error -Message "You must run this cmdlet with Administrator Privelages" 13 | return 14 | } 15 | $ApplicationRegistryLocation = @( 16 | 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\Win32Apps' 17 | 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\Win32AppSettings' 18 | ) 19 | } 20 | PROCESS 21 | { 22 | try 23 | { 24 | Stop-Service -Name "IntuneManagementExtension" -Force -PassThru 25 | } 26 | Catch 27 | { 28 | $_ 29 | "Error stopping the Intune Management Extension Service" 30 | break 31 | } 32 | try 33 | { 34 | $ApplicationRegistryLocation | ForEach-Object { Get-ChildItem registry::$_ | Remove-Item -Recurse -Force -Confirm:$false -Verbose -ErrorAction 'Stop' } 35 | } 36 | catch 37 | { 38 | "Error removing registry key" 39 | $_ 40 | break 41 | } 42 | try 43 | { 44 | Start-Service -Name "IntuneManagementExtension" -ErrorAction 'Stop' -PassThru 45 | } 46 | catch 47 | { 48 | "Unable to start the IntuneManagmentExtensionService" 49 | $_ 50 | break 51 | } 52 | } 53 | END 54 | { 55 | "Application Reprocessing Done!" 56 | } 57 | } -------------------------------------------------------------------------------- /Functions/Invoke-IntuneSync.ps1: -------------------------------------------------------------------------------- 1 | function Invoke-IntuneSync 2 | { 3 | $ScriptBlock = @' 4 | $ErrorActionPreference = 'Inquire' 5 | "Starting OMADMClient task" 6 | Get-ScheduledTask "Schedule to run OMADMClient by client" | Start-ScheduledTask 7 | "Starting Enrollment Client Schedule" 8 | Get-ScheduledTask "Schedule #3 created by enrollment client" | Start-ScheduledTask 9 | "Restarting Intune Management Extension" 10 | Get-Service "IntuneManagementExtension" | Restart-Service 11 | '@ 12 | $bytes = [System.Text.Encoding]::Unicode.GetBytes($scriptblock) 13 | $encodedCommand = [Convert]::ToBase64String($bytes) 14 | "Invoking Sync with Intune..." 15 | Start-Process "Powershell.exe" -ArgumentList "-EncodedCommand $encodedCommand" -Verb runas -PassThru 16 | } 17 | 18 | -------------------------------------------------------------------------------- /IntuneEndpointTools.psd1: -------------------------------------------------------------------------------- 1 | @{ 2 | 3 | # Script module or binary module file associated with this manifest 4 | RootModule = 'IntuneEndpointTools.psm1' 5 | 6 | # Version number of this module. 7 | ModuleVersion = '1.2' 8 | 9 | # ID used to uniquely identify this module 10 | GUID = '078b865d-6313-4a52-b910-86f32bd24f85' 11 | 12 | # Author of this module 13 | Author = 'David Just' 14 | 15 | # Company or vendor of this module 16 | CompanyName = '' 17 | 18 | # Copyright statement for this module 19 | Copyright = '(c) 2022. All rights reserved.' 20 | 21 | # Description of the functionality provided by this module 22 | Description = 'A PowerShell module containing a set of tools for managing and diagnosing Intune MDM on Windows endpoints designed with Intune support staff in mind.' 23 | 24 | # Minimum version of the Windows PowerShell engine required by this module 25 | PowerShellVersion = '5.1' 26 | 27 | # Functions to export from this module 28 | FunctionsToExport = @('Get-IntuneMDMDiagReport','Get-IntuneEventLogs','Invoke-IntuneSync','Invoke-IntuneAppAssignmentReprocess','Disable-IntuneESP','Export-IntuneDiagnosticPackage') 29 | 30 | # Private data to pass to the module specified in ModuleToProcess. This may also contain a PSData hashtable with additional module metadata used by PowerShell. 31 | PrivateData = @{ 32 | PSData = @{ 33 | Tags = @('Intune', 'MDM') 34 | LicenseUri = 'https://github.com/djust270/IntuneEndpointTools/blob/main/LICENSE' 35 | ProjectUri = 'https://github.com/djust270/IntuneEndpointTools' 36 | ReleaseNotes = 'https://github.com/djust270/IntuneEndpointTools/blob/main/README.md' 37 | } 38 | } 39 | } 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | -------------------------------------------------------------------------------- /IntuneEndpointTools.psm1: -------------------------------------------------------------------------------- 1 | Get-ChildItem -Path $PSScriptroot\Functions\*.ps1 | 2 | ForEach-Object { . $_.Fullname } # Dot Source Functions -------------------------------------------------------------------------------- /IntuneEndpointTools.psproj: -------------------------------------------------------------------------------- 1 |  2 | 2.1 3 | 078b865d-6313-4a52-b910-86f32bd24f85 4 | 1 5 | 6 | Functions 7 | en-US 8 | docs 9 | 10 | 11 | IntuneEndpointTools.psd1 12 | IntuneEndpointTools.psm1 13 | Test-Module.ps1 14 | Functions\Get-IntuneEventLogs.ps1 15 | Functions\Invoke-IntuneSync.ps1 16 | Functions\Disable-IntuneESP.ps1 17 | Functions\Get-IntuneMDMDiagReport.ps1 18 | Functions\Export-IntuneDiagnosticPackage.ps1 19 | Functions\Invoke-IntuneAppAssignmentReprocess.ps1 20 | 21 | Test-Module.ps1 22 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | MIT License 2 | 3 | Copyright (c) 2022 David Just 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | ![PowerShell Gallery Version](https://img.shields.io/powershellgallery/v/IntuneEndpointTools)![PowerShell Gallery Downloads](https://img.shields.io/powershellgallery/dt/IntuneEndpointTools) 2 | 3 | # IntuneEndpointTools 4 | A PowerShell module containing a set of tools for managing and diagnosing Intune MDM on Windows endpoints designed with Intune support staff in mind. 5 | 6 | [PowerShell Gallery Page](https://www.powershellgallery.com/packages/IntuneEndpointTools/1.2) 7 | 8 | To install: 9 | ```powershell 10 | Install-Module IntuneEndpointTools 11 | ``` 12 | ## [Invoke-IntuneSync](docs/Invoke-IntuneSync.md) 13 | This function will force an immediate check-in to Intune by running the associated scheduled tasks for the OMADMClient and the DeviceEnroller. This will also restart the Intune Management Extension (IME)/ 14 | **NOTE:** This command requires administrative privilege. 15 | 16 | ## [Get-IntuneEventLogs](docs/Get-IntuneEventLogs.md) 17 | This function will display all event logs listed under the log file DeviceManagement-Enterprise-Diagnostics. Use the paramater ```-ErrorOnly``` to display error, warning, and critical level events. 18 | 19 | ## [Get-IntuneMDMDiagReport](docs/Get-IntuneMDMDiagReport.md) 20 | This command will invoke the MDMDiagnosticsTool and open the MDM Diagnostics HTML report. This report details device info, MDM Policy CSPSettings, certificates, configuration sources, and resource information. Default location is C:\IntuneDiagnostics. Use ```-OutputFolder``` to specify another location. 21 | 22 | ## [Invoke-IntuneAppAssignmentReprocess](docs/Invoke-IntuneAppAssignmentReprocess.md) 23 | This command will force the reprocessing of all assigned Win32 applications. Useful if you want to force an application to re-attempt installation after failing 3 times. 24 | 25 | ## [Export-IntuneDiagnosticsPackage](docs/Export-IntuneDiagnosticPackage.md) 26 | This is equivalent to the "Collect Diagnostics" action in Endpoint Manager and will save the diagnostic package locally to a zipfolder. Default location is C:\IntuneDiagnostics. Use ```-OutputFolder``` to specify another location. 27 | **NOTE:** This command requires administrative privilege. 28 | 29 | ## [Disable-IntuneESP](docs/Disable-IntuneESP.md) 30 | This command will disable the Enrollment Status Page (ESP). Useful if a device gets stuck in the ESP phase and cant proceed to the desktop due to errors or timeout. 31 | See help file for details on using this during OOBE. 32 | -------------------------------------------------------------------------------- /docs/Disable-IntuneESP.md: -------------------------------------------------------------------------------- 1 | --- 2 | external help file: IntuneEndpointTools-help.xml 3 | Module Name: IntuneEndpointTools 4 | online version: 5 | schema: 2.0.0 6 | --- 7 | 8 | # Disable-IntuneESP 9 | 10 | ## SYNOPSIS 11 | Disables the enrollment status page 12 | 13 | ## SYNTAX 14 | 15 | ``` 16 | Disable-IntuneESP 17 | ``` 18 | 19 | ## DESCRIPTION 20 | Disables the enrollment status page by setting the Enrollment registry key values to Skip ESP. 21 | Kills the WinLogon process to all the user to proceed with login. 22 | 23 | ## EXAMPLES 24 | 25 | ### Example 1 26 | ```powershell 27 | SHIFT+F10 from OOBE to open cmd 28 | PowerShell.exe 29 | Install-Module IntuneEndpointTools 30 | PS C:\> Disable-IntuneESP 31 | ``` 32 | 33 | From the OOBE, open a cmd prompt, launch PowerShell, install the IntuneEndpointTools module, then run Disable-IntuneESP 34 | 35 | ## PARAMETERS 36 | 37 | ## INPUTS 38 | 39 | ### None 40 | 41 | ## OUTPUTS 42 | 43 | ### System.Object 44 | ## NOTES 45 | 46 | ## RELATED LINKS 47 | -------------------------------------------------------------------------------- /docs/Export-IntuneDiagnosticPackage.md: -------------------------------------------------------------------------------- 1 | --- 2 | external help file: IntuneEndpointTools-help.xml 3 | Module Name: IntuneEndpointTools 4 | online version: 5 | schema: 2.0.0 6 | --- 7 | 8 | # Get-IntuneMDMDiagReport 9 | 10 | ## SYNOPSIS 11 | Export and open the MDM Diagnostic HTML report file 12 | 13 | ## SYNTAX 14 | 15 | ``` 16 | Get-IntuneMDMDiagReport [[-OutputFolder] ] 17 | ``` 18 | 19 | ## DESCRIPTION 20 | Export and open the MDM Diagnostic HTML report file by calling the MDMDiagnosticsTool. Exported report will include device and policy details. 21 | 22 | ## EXAMPLES 23 | 24 | ### Example 1 25 | ```powershell 26 | PS C:\> Get-IntuneMDMDiagReport 27 | ``` 28 | ## PARAMETERS 29 | 30 | ### -OutputFolder 31 | Folder path where diagnostic report should be saved. Default location is C:\IntuneDiagnostics 32 | ```yaml 33 | Type: String 34 | Parameter Sets: (All) 35 | Aliases: 36 | 37 | Required: False 38 | Position: 0 39 | Default value: None 40 | Accept pipeline input: False 41 | Accept wildcard characters: False 42 | ``` 43 | 44 | ## INPUTS 45 | 46 | ### None 47 | 48 | ## OUTPUTS 49 | 50 | ### System.Object 51 | ## NOTES 52 | 53 | ## RELATED LINKS 54 | -------------------------------------------------------------------------------- /docs/Get-IntuneEventLogs.md: -------------------------------------------------------------------------------- 1 | --- 2 | external help file: IntuneEndpointTools-help.xml 3 | Module Name: IntuneEndpointTools 4 | online version: 5 | schema: 2.0.0 6 | --- 7 | 8 | # Get-IntuneEventLogs 9 | 10 | ## SYNOPSIS 11 | {{ Fill in the Synopsis }} 12 | 13 | ## SYNTAX 14 | 15 | ``` 16 | Get-IntuneEventLogs [[-Id] ] [-ErrorOnly] 17 | ``` 18 | 19 | ## DESCRIPTION 20 | {{ Fill in the Description }} 21 | 22 | ## EXAMPLES 23 | 24 | ### Example 1 25 | ```powershell 26 | PS C:\> {{ Add example code here }} 27 | ``` 28 | 29 | {{ Add example description here }} 30 | 31 | ## PARAMETERS 32 | 33 | ### -ErrorOnly 34 | {{ Fill ErrorOnly Description }} 35 | 36 | ```yaml 37 | Type: SwitchParameter 38 | Parameter Sets: (All) 39 | Aliases: 40 | 41 | Required: False 42 | Position: Named 43 | Default value: None 44 | Accept pipeline input: False 45 | Accept wildcard characters: False 46 | ``` 47 | 48 | ### -Id 49 | {{ Fill Id Description }} 50 | 51 | ```yaml 52 | Type: Int32 53 | Parameter Sets: (All) 54 | Aliases: 55 | 56 | Required: False 57 | Position: 0 58 | Default value: None 59 | Accept pipeline input: False 60 | Accept wildcard characters: False 61 | ``` 62 | 63 | ## INPUTS 64 | 65 | ### None 66 | 67 | ## OUTPUTS 68 | 69 | ### System.Object 70 | ## NOTES 71 | 72 | ## RELATED LINKS 73 | -------------------------------------------------------------------------------- /docs/Get-IntuneMDMDiagReport.md: -------------------------------------------------------------------------------- 1 | --- 2 | external help file: IntuneEndpointTools-help.xml 3 | Module Name: IntuneEndpointTools 4 | online version: 5 | schema: 2.0.0 6 | --- 7 | 8 | # Get-IntuneMDMDiagReport 9 | 10 | ## SYNOPSIS 11 | Export and open the MDM Diagnostic HTML report file 12 | 13 | ## SYNTAX 14 | 15 | ``` 16 | Get-IntuneMDMDiagReport [[-OutputFolder] ] 17 | ``` 18 | 19 | ## DESCRIPTION 20 | Export and open the MDM Diagnostic HTML report file by calling the MDMDiagnosticsTool. Exported report will include device and policy details. 21 | 22 | ## EXAMPLES 23 | 24 | ### Example 1 25 | ```powershell 26 | PS C:\> Get-IntuneMDMDiagReport 27 | ``` 28 | ## PARAMETERS 29 | 30 | ### -OutputFolder 31 | Folder path where diagnostic report should be saved. Default location is C:\IntuneDiagnostics 32 | ```yaml 33 | Type: String 34 | Parameter Sets: (All) 35 | Aliases: 36 | 37 | Required: False 38 | Position: 0 39 | Default value: None 40 | Accept pipeline input: False 41 | Accept wildcard characters: False 42 | ``` 43 | 44 | ## INPUTS 45 | 46 | ### None 47 | 48 | ## OUTPUTS 49 | 50 | ### System.Object 51 | ## NOTES 52 | 53 | ## RELATED LINKS 54 | -------------------------------------------------------------------------------- /docs/Invoke-IntuneAppAssignmentReprocess.md: -------------------------------------------------------------------------------- 1 | --- 2 | external help file: IntuneEndpointTools-help.xml 3 | Module Name: IntuneEndpointTools 4 | online version: 5 | schema: 2.0.0 6 | --- 7 | 8 | # Invoke-IntuneAppAssignmentReprocess 9 | 10 | ## SYNOPSIS 11 | Force the Intune Management Extension to reprocess all application policy assigments. 12 | 13 | ## SYNTAX 14 | 15 | ``` 16 | Invoke-IntuneSync 17 | ``` 18 | 19 | ## DESCRIPTION 20 | This command will stop the Intune Management Extension service, remove all Win32App and Win32AppSettings registry keys, and restart the Intune Management Extension Service. All assigned application policies will then be processed again by the IME. 21 | 22 | ## EXAMPLES 23 | 24 | ### Example 1 25 | ```powershell 26 | PS C:\> Invoke-IntuneAppAssignmentReprocess 27 | ``` 28 | ## PARAMETERS 29 | 30 | ## INPUTS 31 | 32 | ### None 33 | 34 | ## OUTPUTS 35 | 36 | ### System.Object 37 | ## NOTES 38 | 39 | ## RELATED LINKS 40 | -------------------------------------------------------------------------------- /docs/Invoke-IntuneSync.md: -------------------------------------------------------------------------------- 1 | --- 2 | external help file: IntuneEndpointTools-help.xml 3 | Module Name: IntuneEndpointTools 4 | online version: 5 | schema: 2.0.0 6 | --- 7 | 8 | # Invoke-IntuneSync 9 | 10 | ## SYNOPSIS 11 | Force a device check-in with Intune 12 | 13 | ## SYNTAX 14 | 15 | ``` 16 | Invoke-IntuneSync 17 | ``` 18 | 19 | ## DESCRIPTION 20 | Force device check-in by running the associated scheduled tasks created by Intune and restarting the Intune Management Extension. 21 | 22 | ## EXAMPLES 23 | 24 | ### Example 1 25 | ```powershell 26 | PS C:\> Invoke-IntuneSync 27 | ``` 28 | 29 | {{ Add example description here }} 30 | 31 | ## PARAMETERS 32 | 33 | ## INPUTS 34 | 35 | ### None 36 | 37 | ## OUTPUTS 38 | 39 | ### System.Object 40 | ## NOTES 41 | 42 | ## RELATED LINKS 43 | -------------------------------------------------------------------------------- /en-US/IntuneEndpointTools-help.xml: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | Disable-IntuneESP 6 | Disable 7 | IntuneESP 8 | 9 | Disables the enrollment status page 10 | 11 | 12 | 13 | Disables the enrollment status page by setting the Enrollment registry key values to Skip ESP. Kills the WinLogon process to all the user to proceed with login. 14 | 15 | 16 | 17 | Disable-IntuneESP 18 | 19 | 20 | 21 | 22 | 23 | 24 | None 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | System.Object 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | -------------------------- Example 1 -------------------------- 49 | SHIFT+F10 from OOBE to open cmd 50 | PowerShell.exe 51 | Install-Module IntuneEndpointTools 52 | PS C:\> Disable-IntuneESP 53 | 54 | From the OOBE, open a cmd prompt, launch PowerShell, install the IntuneEndpointTools module, then run Disable-IntuneESP 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | Get-IntuneMDMDiagReport 63 | Get 64 | IntuneMDMDiagReport 65 | 66 | Export all MDM diagnostic files to a zip folder. 67 | 68 | 69 | 70 | Export all diagnostic files and logs to a zip folder. Equivalent to the "Collect Diagnostics" action in endpoint manager portal. 71 | 72 | 73 | 74 | Get-IntuneMDMDiagReport 75 | 76 | OutputFolder 77 | 78 | Folder path where diagnostic report should be saved. Default location is C:\IntuneDiagnostics 79 | 80 | String 81 | 82 | String 83 | 84 | 85 | None 86 | 87 | 88 | 89 | 90 | 91 | OutputFolder 92 | 93 | Folder path where diagnostic report should be saved. Default location is C:\IntuneDiagnostics 94 | 95 | String 96 | 97 | String 98 | 99 | 100 | None 101 | 102 | 103 | 104 | 105 | 106 | None 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | System.Object 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | -------------------------- Example 1 -------------------------- 131 | PS C:\> Export-IntuneDiagnosticPackage -OutputFolder C:\temp 132 | 133 | Export the diagnostic package to the folder C:\temp 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | Get-IntuneEventLogs 142 | Get 143 | IntuneEventLogs 144 | 145 | {{ Fill in the Synopsis }} 146 | 147 | 148 | 149 | {{ Fill in the Description }} 150 | 151 | 152 | 153 | Get-IntuneEventLogs 154 | 155 | Id 156 | 157 | {{ Fill Id Description }} 158 | 159 | Int32 160 | 161 | Int32 162 | 163 | 164 | None 165 | 166 | 167 | ErrorOnly 168 | 169 | {{ Fill ErrorOnly Description }} 170 | 171 | 172 | SwitchParameter 173 | 174 | 175 | False 176 | 177 | 178 | 179 | 180 | 181 | ErrorOnly 182 | 183 | {{ Fill ErrorOnly Description }} 184 | 185 | SwitchParameter 186 | 187 | SwitchParameter 188 | 189 | 190 | False 191 | 192 | 193 | Id 194 | 195 | {{ Fill Id Description }} 196 | 197 | Int32 198 | 199 | Int32 200 | 201 | 202 | None 203 | 204 | 205 | 206 | 207 | 208 | None 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216 | 217 | 218 | System.Object 219 | 220 | 221 | 222 | 223 | 224 | 225 | 226 | 227 | 228 | 229 | 230 | 231 | 232 | -------------------------- Example 1 -------------------------- 233 | PS C:\> {{ Add example code here }} 234 | 235 | {{ Add example description here }} 236 | 237 | 238 | 239 | 240 | 241 | 242 | 243 | Get-IntuneMDMDiagReport 244 | Get 245 | IntuneMDMDiagReport 246 | 247 | Export and open the MDM Diagnostic HTML report file 248 | 249 | 250 | 251 | Export and open the MDM Diagnostic HTML report file by calling the MDMDiagnosticsTool. Exported report will include device and policy details. 252 | 253 | 254 | 255 | Get-IntuneMDMDiagReport 256 | 257 | OutputFolder 258 | 259 | Folder path where diagnostic report should be saved. Default location is C:\IntuneDiagnostics 260 | 261 | String 262 | 263 | String 264 | 265 | 266 | None 267 | 268 | 269 | 270 | 271 | 272 | OutputFolder 273 | 274 | Folder path where diagnostic report should be saved. Default location is C:\IntuneDiagnostics 275 | 276 | String 277 | 278 | String 279 | 280 | 281 | None 282 | 283 | 284 | 285 | 286 | 287 | None 288 | 289 | 290 | 291 | 292 | 293 | 294 | 295 | 296 | 297 | System.Object 298 | 299 | 300 | 301 | 302 | 303 | 304 | 305 | 306 | 307 | 308 | 309 | 310 | 311 | -------------------------- Example 1 -------------------------- 312 | PS C:\> Get-IntuneMDMDiagReport 313 | 314 | 315 | 316 | 317 | 318 | 319 | 320 | 321 | 322 | Invoke-IntuneAppAssignmentReprocess 323 | Invoke 324 | IntuneAppAssignmentReprocess 325 | 326 | Force the Intune Management Extension to reprocess all application policy assigments. 327 | 328 | 329 | 330 | This command will stop the Intune Management Extension service, remove all Win32App and Win32AppSettings registry keys, and restart the Intune Management Extension Service. All assigned application policies will then be processed again by the IME. 331 | 332 | 333 | 334 | Invoke-IntuneAppAssignmentReprocess 335 | 336 | 337 | 338 | 339 | 340 | 341 | None 342 | 343 | 344 | 345 | 346 | 347 | 348 | 349 | 350 | 351 | System.Object 352 | 353 | 354 | 355 | 356 | 357 | 358 | 359 | 360 | 361 | 362 | 363 | 364 | 365 | -------------------------- Example 1 -------------------------- 366 | PS C:\> Invoke-IntuneAppAssignmentReprocess 367 | 368 | 369 | 370 | 371 | 372 | 373 | 374 | 375 | 376 | Invoke-IntuneSync 377 | Invoke 378 | IntuneSync 379 | 380 | Force a device check-in with Intune 381 | 382 | 383 | 384 | Force device check-in by running the associated scheduled tasks created by Intune and restarting the Intune Management Extension. 385 | 386 | 387 | 388 | Invoke-IntuneSync 389 | 390 | 391 | 392 | 393 | 394 | 395 | None 396 | 397 | 398 | 399 | 400 | 401 | 402 | 403 | 404 | 405 | System.Object 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 419 | -------------------------- Example 1 -------------------------- 420 | PS C:\> Invoke-IntuneSync 421 | 422 | {{ Add example description here }} 423 | 424 | 425 | 426 | 427 | 428 | --------------------------------------------------------------------------------