Search for a command to run...
I work as System Administrator for more than 15 years now and I love to make my life easier by automating work & personal stuff via PowerShell (even silly things like food recipes list generation).
No comments yet. Be the first to comment.
Or any other Azure service requiring special authentication strength
If you are using Azure Local (HCI), you might find the following PowerShell script AzureLocalVMImageUpdater.ps1 useful. What is it good for? The code replaces the Windows VM images in the specified Azure Local cluster(s) with the latest compatible ve...
Problem It happens that the hardware hash of your Autopilot device gets changed. Thanks to the replacement of the motherboard or some other issue. This can lead to future problems when your users need to reinstall the operating system, but the Autopi...
Learn how to use undocumented Azure APIs for massive performance gains
Keeping a secure, version-controlled backup of your Intune-managed device data, including BitLocker, LAPS, and FileVault keys, is a best practice for any modern IT team. In this post, I’ll guide you through an Azure DevOps pipeline that automates the...
I was in need to gather Autopilot hashes to be able to migrate a subset of our SCCM clients into Intune to leverage the Autopilot feature.
As you may know, SCCM automatically gathers Autopilot hash from every Windows client during the Hardware inventory cycle. Such hash is then stored in the SCCM database so I've created a little PowerShell function Get-CMAutopilotHash (part of my SCCMStuff module) to get such hashes.
There is a bug in the new Windows Update that causes an error "Get-CimInstance : A general error occurred that is not covered by a more specific error code." when gathering the Autopilot hash. A temporary solution could be uninstalling such update
wusa.exe /uninstall /KB:5013942 /norestart.
In general, you can upload Autopilot hashes manually or by Graph API. I've chosen the latter and created a function Upload-IntuneAutopilotHash (part of my IntuneStuff module).
Upload-IntuneAutopilotHash function supports setting of Autopilot device hostname, owner and groupTag. Can be run against local computer (gathers its hash) or accepts object with specific properties (SerialNumber, HardwareHash, Hostname, ownerUPN). Detailed information can be found in function help (Get-Help Upload-IntuneAutopilotHash -Full)
And the result can look like this 👇
# install necessary modules
Install-Module IntuneStuff
Install-Module SCCMStuff
# get Autopilot hashes for selected devices
$data = Get-CMAutopilotHash -computername pc-01, pc-02, pc-03
# (optional) set OwnerUPN so the Autopilot devices have associated same owners as are in SCCM
$data = $data | select *, @{n='OwnerUPN';e={$_.Owner + "@contoso.com"}}
# connect to your AAD tenant
Connect-AzureAD
$data | Foreach-Object {
Upload-IntuneAutopilotHash -psObject $_ -Verbose
}