Finding Unauthorized/Unapproved Software Instances in Intune Using PowerShell

Swahela Mulla 95

I need assistance in using PowerShell to find unauthorized software instances on endpoints managed by Microsoft Intune. Is there a PowerShell script, command, or API that can help me retrieve this information? I would greatly appreciate step-by-step guidance or a reference to relevant documentation.

Thank you for your assistance

1 answer

Crystal-MSFT 49,271 Reputation points Microsoft Vendor

2023-10-18T01:45:07.89+00:00
@Swahela Mulla, Thanks for posting in Q&A. Based on my researching, I didn't find the PowerShell script to find unauthorized software instances.

For your request, here are some of my thoughts:

We can run command to get the installed software on the device. Get-WmiObject -Class Win32_Product -ComputerName $computerName | Select-Object Name, Version https://stackoverflow.com/questions/53161112/full-listing-of-installed-programs-using-powershell Note: Non-microsoft link, just for the reference.

Then compare with the approved app list in your environment to see if there's any not approved app there.

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
Swahela Mulla 95 Reputation points

2023-10-20T09:39:31.2966667+00:00

Hi @Crystal-MSFT ,

I saw this command but one thing I want to ask you, how can we run this in users' devices? we need to create PowerShell script and push it in users' devices with the help of Intune, right?

I know this way but instead of doing this, means without pushing PS script into users' devices is there any option to take required output? with Graph API or any other way.

Get-WmiObject -Class Win32_Product -ComputerName $computerName | Select-Object Name, Version

Crystal-MSFT 49,271 Reputation points Microsoft Vendor

2023-10-23T02:29:52.8366667+00:00

@Swahela Mulla, Thanks for the reply. For Intune Graph, currently, it can only get the apps which are deployed via Intune or discovered apps

https://learn.microsoft.com/en-us/mem/intune/apps/app-discovered-apps#details-of-discovered-apps

If the unauthorized software does not belong to the above, it can not be found via Intune graph.

Then we can find if the PowerShell script to do this and try to deploy it via Intune.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Finding Unauthorized/Unapproved Software Instances in Intune Using PowerShell

1 answer

Your answer