Repository navigation
Version 0.3.0
Note: This is the final release of the PowerShell script. Version 0.4 will be a native Windows app (WinUI 3) that replaces the script — follow the progress in #60. The script stays on the PowerShell Gallery and critical bugs will still be fixed.
Highlights
- Device Code Login (#55, #59): new authentication option without a browser redirect — fixes localhost-redirect/WAM failures
- Playbooks now work with
Install-Script(#15): all playbooks are bundled inside the script and extracted automatically on PowerShell Gallery installs - Autopilot Group Tags (#21): set or clear the group tag for selected devices
- Defender for Endpoint offboarding (#11): optional, disabled by default, enabled from the Prerequisites dialog
- Corporate Identifier Stale Report (#41): new Playbook 11
- Actionable 403 errors (#52, #53): offboarding failures now name the likely missing admin role instead of raw JSON; required roles are documented in the README
- Safer offboarding (#47, #49, #50, #56): strict Graph-ID/exact-serial identity matching, deletes only on resolved object IDs, confirmation dialog shows the exact IDs
- LAPS passwords (#13) shown alongside BitLocker/FileVault keys in the confirmation dialog
- Multi-Admin Approval detection (#58): protected operations are reported as "Requires Multi-Admin Approval" per service
Also fixed
- Crash after copying a BitLocker key in RDP sessions (#38)
- Device-name search 400 errors from empty Autopilot displayNames (#37)
- Autopilot device left behind after offboarding (#17)
- Partial serial number search (#9), Device ID search (#54)
- Dashboard platform filtering (#40), grid filtering and shift-click range selection (#33)
- Saved authentication config auto-load (#48), audit log with
SENSITIVE-prefixed key logging (#35) - OData filter escaping — device names with apostrophes no longer break searches
- Dashboard cards show a loading indicator instead of appearing frozen
- Graph reliability: retry with backoff,
$batchrequests,$count-based dashboard statistics,$selecton all GET calls
See the Changelog for the complete list.
Install / Update
Install-Script DeviceOffboardingManager -Force