MS Intune mobile device retirement

1. BYOD Scenario
MS Intune Device retirement

2. Get-Help About_Presenter
• Naw Awn
• Applications Analyst
• @nawawn

3. Bring Your Own Device (or BYOD)
This talk is a brief description of how I
used PowerShell to automate the
process for the Ops Team in our
environment in order to retire mobile
devices that our staff owned when they
left the organisation.

4. We will take a short tour of how I designed
and implemented a solution which touches
upon:
• MS SQL
• AD
• Office 365
• Credential Encryption
• The use of PSD1 files for configuration and,
• The lessons that I learnt in doing so.

5. One-liner PowerShell
Search-ADAccount -UsersOnly -AccountExpiring |
%{Get-MSolUser -UserPrincipalName $_.UserPrincipalName} |
?{$_.Licenses.AccountSkuID -eq "mycompany:INTUNE_A_VL"}

6. The Implementation
The
Flowchart
Diagram
The
PowerShell
Script

8. PowerShell
VS Code

9. Demo

10. Possible Improvements
• SqlServer Module
• CredentialManager Module
• Automated/scheduled retirement
• https://github.com/microsoftgraph/powershell-
intune-samples/tree/master/ManagedDevices

11. Wrap up
• The Problem
– Requirements
• The Manual Solution
– Split up one liner
• Automated solution
– Flowchart
– The code
• Key parts
– PSD1
– Use of AD for Storage
– Business Rules
• Demo
• Lessons learnt after running it for some times
• Possible Improvements