What it works with
Module: Microsoft.Graph.Authentication
Context: PowerShell 7 · Microsoft Graph · Microsoft Intune
Compatibility: PowerShell 7 is the supported target for this Microsoft Graph Intune template.
POWERSHELL / MICROSOFT.GRAPH.AUTHENTICATION
FreeIntermediateRead-onlylow
Export Windows Autopilot devices
Exports Windows Autopilot device identity inventory from Microsoft Graph v1.0 without exposing product keys or changing enrollment records.
Generated locally in your browser · Review before running · No tenant access
What this PowerShell script does
Exports Windows Autopilot device identity inventory from Microsoft Graph v1.0 without exposing product keys or changing enrollment records.
Requirements
- CSV output path - Example: C:\\Temp\\intune-report.csv
Environment
- Module: Microsoft.Graph.Authentication
- Permissions: DeviceManagementServiceConfig.Read.All
- Output: CSV report
- Context: PowerShell 7 · Microsoft Graph
- Risk: Low
Review before you run Review the generated PowerShell and scope before running it.
OPS / WORKSPACE
Ready to generate
Configure Export Windows Autopilot devices in the Builder, review the generated PowerShell and run it in your own environment.
Why use this template?
Use this report for Windows Autopilot inventory and enrollment review. It exports device identity, serial, model, group tag and enrollment metadata while deliberately excluding ProductKey.
The template uses Microsoft.Graph.Authentication and requires DeviceManagementServiceConfig.Read.All. Output: CSV report. Level: Intermediate. Action: Read-only. Risk: Low.
Review before running
The script is generated in your browser. Read it before you run it, and test it outside production first. “Read-only” describes the script itself; anything you add around it can still change data.
Generate the script
- Open the template in the PowerShell Builder.
- Enter the requested values and review the module, permissions, output and risk.
- Generate the script, read it carefully, and test it outside production before use.
The script is generated locally in your browser. Nothing needs to be uploaded to Opselith.
Generate Export Windows Autopilot devices →OPS / SCRIPT DETAILS
Script details
Exports Windows Autopilot device identity inventory from Microsoft Graph v1.0 without exposing product keys or changing enrollment records. Review these details before generating or running the script.
Permissions and impact
Permissions: DeviceManagementServiceConfig.Read.All
Risk: Low
Execution impact: Read-only. The script reads Microsoft Intune data through Microsoft Graph and does not intentionally change policies, applications, enrollment records or managed devices.
Parameters
- CSV output path - Use a new absolute Windows CSV path, for example C:\\Temp\\intune-report.csv.
Output
Output: CSV with Autopilot identity, serial/model/manufacturer, group tag, enrollment state, last contact, user principal name, managed device ID and selected hardware metadata. Product keys are excluded.
This template is available in the free library and is generated locally in your browser.
Example use
Exports Windows Autopilot device identity inventory from Microsoft Graph v1.0 without exposing product keys or changing enrollment records.
Enter the required values in the Builder, review the generated script and confirm the output before running it.
Before you run: Use PowerShell 7 with Microsoft.Graph.Authentication. Sign in with DeviceManagementServiceConfig.Read.All, confirm Autopilot is in use, choose a new CSV path and protect the resulting device inventory appropriately.
ValidationRecorded evidenceQA reviewed
Static QAPassed
PSScriptAnalyzerPassed
Runtime testedNot yet recorded
Last validatedNot yet recorded
Runtime and community evidence change only after an external tester result is reviewed and accepted for release evidence.
Tester: report a result →Was this useful?One click. No email.