https://github.com/MSEndpointMgr/IntuneEnhancedInventory

Repository for the Intune Enhanced Inventory solution by MSEndpointmgr.com
https://github.com/MSEndpointMgr/IntuneEnhancedInventory

Last synced: 7 days ago
JSON representation

Repository for the Intune Enhanced Inventory solution by MSEndpointmgr.com

• Host: GitHub
• URL: https://github.com/MSEndpointMgr/IntuneEnhancedInventory
• Owner: MSEndpointMgr
• License: mit
• Created: 2022-01-16T18:42:37.000Z (almost 3 years ago)
• Default Branch: main
• Last Pushed: 2023-08-10T09:22:05.000Z (over 1 year ago)
• Last Synced: 2024-08-02T17:33:04.773Z (3 months ago)
• Language: PowerShell
• Homepage:
• Size: 143 KB
• Stars: 51
• Watchers: 9
• Forks: 16
• Open Issues: 5
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.MD
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Code of conduct: CODE_OF_CONDUCT.md

Awesome Lists containing this project

README

        
# IntuneEnhancedInventory

Repository for the Intune Custom Inventory solution by MSEndpointmgr.com

> IMPORTANT! 

> Version 1.2 requires use of version 3.5.0 of the Invoke-CustomInventoryAzureFunction.ps1 to be used in Proactive Remediations

> This version of the Azure Function will work for any custom log you want to send securely to Log Analytics

### Version History 

Full changelog can be found here: [Changelog](https://github.com/MSEndpointMgr/IntuneEnhancedInventory/blob/main/CHANGELOG.MD)

#### Latest Version for the Azure Function 

* 1.2 - Released 15.10.2022 

#### Latest Version history for the Proactive Remediation Script

* 3.5 - Released 15.10.2022

# Update ONLY

* To perform an update use this deploy button and enter information from your current deployment-

[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FMSEndpointMgr%2FIntuneEnhancedInventory%2Fmain%2FDeploy%2FUpdate%2FUpdateSecuredEnhancedInventory.json)

# Installation 

## Option 1 (legacy and not maintained) 

Use the simple proactive remediation that sends data direct to Log Analytics Workspace with secrets in code. 

Read the blogpost: 

[https://msendpointmgr.com/2021/04/12/enhance-intune-inventory-data-with-proactive-remediations-and-log-analytics/](https://msendpointmgr.com/2021/04/12/enhance-intune-inventory-data-with-proactive-remediations-and-log-analytics/)

## Option 2 (strongly recommended)

Use the new and updated proactive remediation that sends data through a Azure Function App to keep secret out of code and secure that only approved and known clients can send data to your log workspace. 

1. Deploy Azure Function using our template.  

[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FMSEndpointMgr%2FIntuneEnhancedInventory%2Fmain%2FDeploy%2FSecuredEnhancedInventory.json) 

3. Set API Permissions for MSI to graph with Add-MSIGraphPermissions.ps1 

4. Deploy the Invoke-CustomInventoryAzureFunction.ps1 Proactive remediation after you added your Azure Function URL to the script. 

Read the blogpost: 

[https://msendpointmgr.com/2022/01/17/securing-intune-enhanced-inventory-with-azure-function/ ](https://msendpointmgr.com/2022/01/17/securing-intune-enhanced-inventory-with-azure-function/)

### Example code for adding a custom log

```powershell 

$LogPayLoad = New-Object -TypeName PSObject 

$LogPayLoad | Add-Member -NotePropertyMembers @{$LogName1 = $Logdata1}

$LogPayLoad | Add-Member -NotePropertyMembers @{$LogName2 = $Logdata2}

# Construct main payload to send to LogCollectorAPI

$MainPayLoad = [PSCustomObject]@{

	AzureADTenantID = $AzureADTenantID

	AzureADDeviceID = $AzureADDeviceID

	LogPayloads = $LogPayLoad

}

...