> For the complete documentation index, see [llms.txt](https://docs.cipp.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cipp.app/user-documentation/endpoint/mem/devices.md).

# Devices

The Devices page lists the devices managed by Intune in the selected tenant, and is where most day-to-day device management is carried out. From here you can sync, rename, reboot, and locate devices, retrieve recovery keys, local admin passwords and BIOS passwords, run Defender scans, offboard devices from Defender for Endpoint, reset or wipe a device, add devices to groups, and remove devices from management. Which actions are available for a given device depends on its operating system.

## Action Buttons

<details>

<summary>Sync DEP</summary>

Synchronises the tenant's Apple Device Enrollment Program tokens, bringing in newly purchased devices. The sync runs in the background and can take several minutes, and can only be started once every 15 minutes.

</details>

## Table Details

The properties returned are for the Graph resource type `managedDevice`. For more information on the properties please see the [Graph documentation](https://learn.microsoft.com/graph/api/resources/intune-devices-manageddevice?view=graph-rest-beta#properties).

Selecting a row opens a flyout showing the device name and its assigned user.

## Table Actions

<table><thead><tr><th>Action</th><th>Description</th><th data-type="checkbox">Bulk Action Available</th></tr></thead><tbody><tr><td>View Device</td><td>Opens the device's <a data-mention href="/pages/53qiEHCERgnji7WBbBIL">/pages/53qiEHCERgnji7WBbBIL</a> page in CIPP, with its full details, applications, and users.</td><td>false</td></tr><tr><td>View in Intune</td><td>Opens the device in the Microsoft Intune admin center in a new tab.</td><td>false</td></tr><tr><td>Change Primary User</td><td>Sets a different user as the device's primary user.</td><td>true</td></tr><tr><td>Add to Group</td><td>Adds the device to one or more Entra ID groups. Groups are listed with their name and type, and several can be selected at once, with the device added to each. Devices cannot be added to Distribution List or Mail-Enabled Security groups, and selecting one returns an error for that group rather than failing the whole action.</td><td>true</td></tr><tr><td>Rename Device</td><td>Changes the device's name to one you specify.</td><td>true</td></tr><tr><td>Sync Device</td><td>Asks the device to check in with Intune, so that pending policies and applications are applied sooner than the next scheduled sync.</td><td>true</td></tr><tr><td>Reboot Device</td><td>Restarts the device.</td><td>true</td></tr><tr><td>Locate Device</td><td>Requests the device's current location.</td><td>true</td></tr><tr><td>Retrieve LAPS password</td><td>Retrieves the local administrator password held for the device by Windows LAPS. Windows devices only.</td><td>true</td></tr><tr><td>Rotate Local Admin Password</td><td>Forces the local administrator password to be changed and a new one stored. Windows devices only.</td><td>true</td></tr><tr><td>Retrieve BIOS Password</td><td>Retrieves the BIOS password Intune holds for the device. A password only exists where the device is targeted by a BIOS configuration profile that manages per-device passwords, otherwise the action reports that none was found. Windows devices only.</td><td>true</td></tr><tr><td>Retrieve BitLocker Keys</td><td>Retrieves the BitLocker recovery keys escrowed for the device. Windows devices only.</td><td>true</td></tr><tr><td>Retrieve FileVault Key</td><td>Retrieves the FileVault recovery key escrowed for the device. macOS devices only.</td><td>true</td></tr><tr><td>Reset Passcode</td><td>Resets the device's passcode. Android devices only.</td><td>true</td></tr><tr><td>Remove Passcode</td><td>Removes the device's passcode. iOS devices only.</td><td>true</td></tr><tr><td>Windows Defender Full Scan</td><td>Starts a full Microsoft Defender scan on the device.</td><td>true</td></tr><tr><td>Windows Defender Quick Scan</td><td>Starts a quick Microsoft Defender scan on the device.</td><td>true</td></tr><tr><td>Update Windows Defender</td><td>Updates the Microsoft Defender signatures on the device.</td><td>true</td></tr><tr><td>Offboard from Defender for Endpoint</td><td>Offboards the device from Microsoft Defender for Endpoint, so that it stops reporting to Defender. The device is matched to its Defender record by its Entra ID device ID, and every matching record that is still onboarded is offboarded. Where the device has no Entra ID device ID, or has no matching Defender record that is currently onboarded, the action reports an error and nothing is offboarded. Offboarding cannot be undone from CIPP, and the device has to be re-onboarded to return it to Defender. Windows devices only.</td><td>true</td></tr><tr><td>Fresh Start (Remove user data)</td><td>Reinstalls Windows on the device and removes the user's data. Windows devices only.</td><td>true</td></tr><tr><td>Fresh Start (Do not remove user data)</td><td>Reinstalls Windows on the device while retaining the user's data. Windows devices only.</td><td>true</td></tr><tr><td>Wipe Device, keep enrollment data</td><td>Wipes the device but retains its enrolment data, so it remains managed. Windows devices only.</td><td>true</td></tr><tr><td>Wipe Device, remove enrollment data</td><td>Wipes the device and removes its enrolment data, so it is no longer managed. Windows devices only.</td><td>true</td></tr><tr><td>Wipe Device, keep enrollment data, and continue at powerloss</td><td>As above, retaining enrolment data, but the wipe resumes if the device loses power part-way through. Windows devices only.</td><td>true</td></tr><tr><td>Wipe Device, remove enrollment data, and continue at powerloss</td><td>As above, removing enrolment data, but the wipe resumes if the device loses power part-way through. Windows devices only.</td><td>true</td></tr><tr><td>Wipe Device</td><td>Erases all content and settings on the device, which cannot be undone. A <strong>Recovery PIN (optional, 6 digits)</strong> can be supplied, and is needed to unlock Intel Macs that have no T2 security chip once the wipe has finished. macOS devices only.</td><td>true</td></tr><tr><td>Autopilot Reset</td><td>Resets the device and re-runs the Autopilot provisioning process. Windows devices only.</td><td>true</td></tr><tr><td>Delete device</td><td>Deletes the device record from Intune.</td><td>true</td></tr><tr><td>Retire device</td><td>Removes company data and management from the device while leaving the user's personal data in place.</td><td>true</td></tr><tr><td>More Info</td><td>Opens the Extended Info flyout with the full details for the selected row.</td><td>false</td></tr></tbody></table>

***

## Feature Requests / Ideas

We value your feedback and ideas. Please raise any [feature requests](https://github.com/CyberDrain/CIPP/issues/new?template=feature.yml) on GitHub.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.cipp.app/user-documentation/endpoint/mem/devices.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.