This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 98%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EOT%3C/text%3E%3C/svg%3E)
Hi,
I am looking for PS commands or Graph endpoint to manage settings which can be accessed:
Intune>Devices>Enroll Devices>Windows Enrollment>Automatic Enrollment
or
Azure portal > Azure Active Directory > Mobility (MDM and MAM) > Microsoft Intune
I would like to change values described in this article https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-enroll in section 'Configure automatic MDM enrollment'.
I could not find any PS commands for this and Intune does not contact Graph when I change these settings.
Hello @Oleg Tserkovnyuk
Thank you for reaching out, I would have this reviewed and get back to you with an answer.
@Harpreet Singh Matharoo Thanks for help.
Get request works fine, but PATCH works only from Graph Explorer.
When I run this code in PS:
$URL = "beta/policies/mobileDeviceManagementPolicies/0000000a-0000-0000-c000-000000000000"
$JSON = @"
{
"appliesTo": "all"
}
"@
Invoke-MgGraphRequest -Uri $URL -Method PATCH -ContentType "application/json" -Body $JSON
I get error: "AccessDenied","message":"The 'scope' claim does not contain the required scopes or was not found"
The same error I get if I run PS command Update-MgPolicyMobileDeviceManagementPolicy, which basically does the same:
$params = @{
"appliesTo" = "all"
}
$mobilityManagementPolicyId = "0000000a-0000-0000-c000-000000000000"
Update-MgPolicyMobileDeviceManagementPolicy -MobilityManagementPolicyId $mobilityManagementPolicyId -BodyParameter $params
Hello @Oleg Tserkovnyuk
I have tested this out with PS, as well as Graph call within PS. If you try to call the Graph API using Access token from User or Application/Service Principal this would not work, as it is not supported.
If you would like to execute this in Microsoft Graph PowerShell, then you would need to perform below:
Connect-MgGraph -Scopes Policy.ReadWrite.MobilityManagement
Select-MgProfile -Name beta
$mobilityManagementPolicyId= "0000000a-0000-0000-c000-000000000000"
$params = @{
"appliesTo" = "All"
}
Get-MgPolicyMobileDeviceManagementPolicy -MobilityManagementPolicyId $mobilityManagementPolicyId
Update-MgPolicyMobileDeviceManagementPolicy -MobilityManagementPolicyId $mobilityManagementPolicyId -BodyParameter $params
I hope this helps. Would request you to please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Thank you for clear and detailed explanation.
It is first time when I face call to the Graph API which does not support access token from User or Application/Service Principal.
I wanted to fully automate this using PS, but seems like this is not possible. Hope in the future MS adds support for access token from User or Application/Service Principal.
Hello @Oleg Tserkovnyuk
I have reviewed the request and understand that you would like to confirm if there is any PowerShell command to edit/manage Mobility (MDM and MAM) settings available in Azure Portal.
We would like to confirm that as of today there is no PowerShell command which would be able to manage or update these settings, however you can use following MS Graph calls to manage these settings. I would request you to please review following API queries that can be used from Microsoft Graph:
I hope this answers your question.
----------
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.