Rename devices with PowerShell and Microsoft Intune

-
Renaming a device manually is quick and easy when we only have one device to fix. But when it comes to doing a large number of devices, then it is better to automate this action.

Today, there is the method via CSP but which can have a rather random behavior, in particular on the reporting, console side.

I therefore share with you a PowerShell script which, deployed with Microsoft Intune, will allow you to quickly rename your machines.

Script overview



This script detects the type of device used: 
  • If it's a virtual machine, it takes the defined prefix (CCMT in my example) and adds a numeric complement generated with Get-Random command
  • For physical machines, it retrieves the serial number and adds the prefix (CCMT in my example)
The user is informed that his device has received changes and that it will restart automatically in a few minutes.


The script is available on Github : Link

Script integration & deployment

Prerequisites

The prerequisites are:
  • Convert script to .intunewin app
  • Create a dynamic group to group all the devices to be renamed

Create devices dynamic group

  • Go to Intune.microsoft.com
  • Click Groups
  • Select New Group
  • Complete Group name field
  • Membership type, select Dynamic Device
  • Add dynamic query and click Save

Create and deploy the script with Microsoft Intune

After coverted script to intunewin package,
  • Go to Intune.microsoft.com
  • Select Windows and click Add
  • App type, select Windows App (Win32) and click Select
  • Select Win32 app package file and click OK
  • App information, complete Publisher field and click Next
  • Specify the commands to install and uninstall this app:
    • Install : powershell.exe -ExecutionPolicy Bypass -File .\Rename_Computer.ps1
    • Uninstall : add any value to go to the next step
  • Requirements :
    • Select operating system architecture
    • Select minimum operating system
  • click Next
  • Detection rules : 
    • Select Manually configure detection rules
    • Click Add
    • Rule type, select File
    • Path : C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\
    • File or folder : RenameComputer.log
    • Detection method : File or folder exists
  • Click OK
  • Dependencies, click Next
  • Supersedence, click Next
  • Assignements, Select the dynamic group that you previously created and click Next
  • Review + Create, click Create

Reporting

A log is available on the workstation that received the script:
  • C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\RenameComputer.log

Microsoft Intune console side, you have access to reporting related to application deployments.


Popular posts from this blog

How to implement Applocker with Microsoft Intune

-
Image
Applocker is tool included in Windows 10 and 11. It permit to set up policies or rules for allow or deny apps from running on your device.  We can create Applocker rules for below file types:  EXE files : .exe and .com Windows Installer files : .msi, mst, and .msp Scripts : .ps1, .bat, .cmd, .vbs, and .js DLLs : .dll and .ocx Packaged apps and packaged app installers : .appx and .msix. Sources :  https://learn.microsoft.com/fr-fr/windows/security/threat-protection/windows-defender-application-control/applocker/understanding-applocker-rule-collections The Applocker solution purpose a multiple possibilities for secure your device. We have possibilities to block or allow apps. By default, it is recommended to allow all applications and add a custom rules for a scpecific application. Prérequisites for used Applocker Device with Windows 10 or 11 for prepare the Applocker rules Application Identity service enabled Enable Applocker For create an Applocker policy, you need to login as an admin
Read more »

How to reset computer in OOBE mode

-
Image
When you receive a new computer, it may contain various applications that are useless in a business context. To solve this problem and start with a clean PC, it may be interesting to reset it.  Here is two procedures that can be performed in OOBE mode Manual process Click CTRL + Shift + F3 , your computer restart. The Windows session is automatically opened Go to Start Menu \ Parameters \ Update & Security \ Recovery and click on Get Started Select Remove everything Select Local reinstall Click Next Click Reset Your computer restarts and proceeds to a complete reinstallation. With Command Line Click  Shift + F10 , your computer restart. Used this command line : systemreset -factoryreset Select Remove everything Select Remove files and clean the drive Click Reset Your computer restarts and proceeds to a complete reinstallation.
Read more »

Microsoft Intune, Uninstall Win32 app with the company portal

-
Image
With the arrival of build 2307 of Microsoft Intune , Microsoft provides a new option on the Application part. Source :  What's new in Microsoft Intune | Microsoft Learn This option allows us to offer users the possibility of uninstalling an Win32 application via the Company Portal. Below you will find the procedure to activate the option in the Microsoft Intune console. Prerequisites Intune tenant up to date Win32 app available in the company portal A valid Uninstall command line Enabling the Uninstall option Go to  Intune.microsoft.com Navigate to Apps / Windows Select an  Win32 App and click Properties On Program , click Edit Activate the option Allow available uninstall  by switching the option to Yes Click Review + Save for all sections and click Save User side Open the company portal then select an available Win32 application. After updating, you should see the mention Uninstall.  Click Uninstall for remove the application.
Read more »