How can I delete or remote stale devices in Azure AD using Policy or PowerShell ?

Question

Folks,

How can I delete or remove the old device in Azure AD with ApproximateLastLogonTimeStamp older than 120 days?

Is there any PowerShell or Azure Policy to do that automatically?

Answer 1

Hi @EnterpriseArchitect

Thank you for asking this question on the **Microsoft Q&A Platform. **

It will be this script in PowerShell:

$dt = (Get-Date).AddDays(-120)  
$Devices = Get-AzureADDevice -All:$true | Where {($_.ApproximateLastLogonTimeStamp -le $dt) -and ($_.AccountEnabled -eq $false)}  
foreach ($Device in $Devices) {  
Remove-AzureADDevice -ObjectId $Device.ObjectId  
}  

The following documentation has more details

Hope this helps,
Carlos Solís Salazar

----------

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.
NOTE: To answer you as quickly as possible, please mention me in your reply.

---