Tech / IT Support · advanced
Enterprise Endpoint Fleet Automation with Intune and Graph API
A PowerShell automation layer over Microsoft Graph that manages policy assignment, compliance reporting, and remediation across a simulated device fleet — no console clicking.
Project overview
The gap between help-desk work and endpoint engineering is scale — anyone can configure one laptop in a console, but managing hundreds requires automation. This project is the clearest demonstration that you have crossed that line, and it is the natural capstone above the Autopilot project.
Real-world use case
An IT team managing 800 devices needs a nightly compliance report and automatic remediation for machines that drift out of policy, without an engineer manually reviewing the Intune console every morning.
Tools and technologies
- Microsoft Graph API
- PowerShell
- Microsoft Intune
- Entra ID
- Azure Automation
Skills you can demonstrate
Endpoint Management at Scale, Graph API Automation, PowerShell Scripting, Compliance Reporting
Build roadmap
- Set up the tenant and app registration
Use an M365 Developer tenant. Register an app in Entra ID, grant it the Graph scopes you need, and authenticate from PowerShell with the Microsoft.Graph module. - Populate a simulated fleet
Enroll several VMs, or script the creation of test device records, so your automation has meaningful data to operate on. A fleet of one proves nothing. - Build the compliance reporter
Write the script from the AI prompt below. Get it exporting a clean CSV of non-compliant and stale devices grouped by reason. - Automate policy assignment
Script the assignment of configuration profiles to dynamic groups, so a device landing in a group receives the right policy with no manual step. - Add remediation
Write a proactive remediation script pair — detection plus fix — for a common drift case like BitLocker being disabled. Deploy it and watch it correct a device. - Schedule it in the cloud
Move the reporting script into an Azure Automation runbook on a nightly schedule. Capture a week of reports so you can show the fleet trending toward compliance.
Ways to extend the project
Deploy the scripts as a scheduled Azure Automation runbook that emails a formatted compliance digest, so the automation runs without your laptop being on.
How to showcase your work
- GitHub: Repo with your scripts, a sample compliance report, and a README documenting the required Graph scopes and how to authenticate.
- LinkedIn: Post the time comparison — manual console review across a fleet versus one scheduled script, with the actual numbers.
- Resume: Focus on "Microsoft Graph API automation", "Endpoint management at scale", and "Compliance reporting".