Try It
Print

Windows Inventory Collection Script

Copy the URL link to this section to share

Many customers have requested the ability to report on things that are either not collected or not accurately collected by Intune. In an effort to fill these gaps in we have implemented a custom solution to collect some of the most commonly requested items. Currently this list includes:

  1. Software installed on Windows 10 devices.
  2. Software installation date.
  3. Monitors (LCD’s) connected to Windows 10 devices.
  4. Disk health.
  5. Last Reboot time.
  6. Additional CPU details.
  7. Additional RAM details.
  8. Battery health.
  9. Friendly model names for Lenovo computers.
  10. Warranty information for Dell, Lenovo, and Getac computers.
  11. M365 update installation and compliance details.
  12. Windows driver inventory.

This data is collected via PowerShell, sent to a Log Analytics workspace, and then pulled into Power BI. Most customers leverage a Proactive Remediation detection to run the PowerShell script on a defined schedule. In this document we describe how to configure the script and deploy it using a Proactive Remediation however there are many ways that you might run a script on a schedule. 

Prerequisites: 

  1. Appropriate licenses to use remediation scripts in Intune.
  2. Dell requires an API token in order to access their warranty API. You must apply for the token at https://techdirect.dell.com/Portal/APIs.aspx 
  3. Lenovo requires a client token in order to access their warranty API. Getting the token from Lenovo can be a bit more difficult than getting a token from Dell. You will need to have your Lenovo account rep request a key on your behalf. 

You can copy the PowerShell script from our Github repository. 

github mark
Get the Script
Step

  1. Paste the PowerShell code into your favorite script editor.
  2. On the line starting with $CustomerId = enter your Log Analytics Workspace ID between the quotes. 
  3. On the line starting with $SharedKey = enter your Log Analytics Workspace Primary Key between the quotes. 
  4. Save the script as a .ps1 file. For example CollectInventory.ps1.   
(click to enlarge)
Step

  1. If you plan to collect warranty data, you might want to consider having two versions of the Intune Windows Inventory script. You really only need to collect the warranty data every 30 days, but you likely want to collect the rest of the data every day. Hitting the manufacturer API's over and over every day might get your API key revoked. 
  2. Set $CollectWarranty = $true in one script and set it to $false in another. Run the one that is $true every 25-30 days. Run the other one every day. 
warranty api data 1
(click to enlarge)
Step

  1. If applicable enter the Dell Client ID and Client Secret values. When you retrieve this info from TechDirect it will be in a format similar to xxxxxxxxxx (yyyyyyyyy). The part before the opening parenthesis is the Client ID, the part inside the parenthesis is the Client Secret. (Note: Do not enter the parenthesis themselves in the script)
  2. If applicable enter the Lenovo Client ID provided to you by your Lenovo account rep.
warranty api data 2
(click to enlarge)
Step

  1. In the Intune console select Reports
  2. Select Endpoint analytics.
(click to enlarge)
Step

  1. Select Proactive remediations.
  2. Select Create script package.
(click to enlarge)
Step

  1. Enter a Name.
  2. Enter a Description.
  3. Select Next.
(click to enlarge)
Step

  1. For the Detection script file, browse to and select the Inventory.ps1 file. 
  2. Select Yes to run script in 64-bit PowerShell.
  3. Select Next.
(click to enlarge)
Step

  1. Optionally add Scope tags.
  2. Select Next.
(click to enlarge)
Step

  1. Select the devices from which you want to collect inventory. 
  2. Adjust the schedule per your requirements. 
  3. Select Next.
(click to enlarge)
Step

  1. Confirm all of the settings are correct. 
  2. Select Create.
(click to enlarge)