Apple Device Management with Intune and Jamf: Deep Dive

                        
# Install Microsoft.Graph.Intune Module (if not already installed)
# Install-Module Microsoft.Graph.Intune

# Connect to Microsoft Graph
try {
    Connect-MgGraph -Scopes "DeviceManagementManagedDevices.Read.All" -ErrorAction Stop
} catch {
    Write-Error "Failed to connect to Microsoft Graph: $($_.Exception.Message)"
    return
}

# Get all managed devices
try {
    $devices = Get-MgDeviceManagementManagedDevice -ErrorAction Stop
} catch {
    Write-Error "Failed to retrieve managed devices: $($_.Exception.Message)"
    return
}

# Filter for iOS/macOS devices
$appleDevices = $devices | Where-Object {$_.OperatingSystem -in ("iOS", "macOS")}

# Loop through devices and retrieve compliance status
foreach ($device in $appleDevices) {
    try {
        $complianceStatus = Get-MgDeviceManagementDeviceComplianceDeviceStatus -ManagedDeviceId $device.Id -ErrorAction Stop
        Write-Host "Device: $($device.DeviceName), Compliance Status: $($complianceStatus.ComplianceGracePeriodExpirationDateTime)"
    } catch {
        Write-Error "Failed to retrieve compliance status for device $($device.DeviceName): $($_.Exception.Message)"
    }
}
                        
                    

                        
# Jamf Pro API Configuration
$jamfProUrl = "https://your-jamf-pro-url.com/JSSResource/"
$jamfProUser = "api_user"
$jamfProPassword = "api_password"

# Encode credentials for Basic Authentication
$credentials = "$jamfProUser:$jamfProPassword"
$encodedCredentials = [Convert]::ToBase64String([Text.Encoding]::ASCII.GetBytes($credentials))
$headers = @{Authorization = "Basic $encodedCredentials"}

# Example: Retrieve all computers
$uri = "$jamfProUrl/computers"

try {
    $response = Invoke-RestMethod -Uri $uri -Headers $headers -Method Get -ErrorAction Stop
    foreach ($computer in $response.computers.computer) {
        Write-Host "Computer Name: $($computer.name)"
    }
} catch {
    Write-Error "Failed to retrieve computers from Jamf Pro: $($_.Exception.Message)"
}
                        
                    

                        
# Microsoft Graph API Connection
try {
    Connect-MgGraph -Scopes "DeviceManagementApps.Read.All" -ErrorAction Stop
} catch {
    Write-Error "Failed to connect to Microsoft Graph: $($_.Exception.Message)"
    return
}

# Get all applications
try {
    $apps = Get-MgDeviceAppManagementMobileApp -ErrorAction Stop
} catch {
    Write-Error "Failed to retrieve mobile apps: $($_.Exception.Message)"
    return
}

# Filter for iOS/macOS apps
$appleApps = $apps | Where-Object {$_.OperatingSystem -in ("iOS", "macOS")}

# Loop through apps and retrieve deployment status
foreach ($app in $appleApps) {
    try {
        $deploymentStatus = Get-MgDeviceAppManagementMobileAppAssignment -MobileAppId $app.Id -ErrorAction Stop
        Write-Host "App: $($app.DisplayName), Deployment Status: $($deploymentStatus.AssignmentType)"
    } catch {
        Write-Error "Failed to retrieve deployment status for app $($app.DisplayName): $($_.Exception.Message)"
    }
}
                        
                    

                        
# Jamf Pro API Configuration (same as above)
$jamfProUrl = "https://your-jamf-pro-url.com/JSSResource/"
$jamfProUser = "api_user"
$jamfProPassword = "api_password"

# Encode credentials (same as above)
$credentials = "$jamfProUser:$jamfProPassword"
$encodedCredentials = [Convert]::ToBase64String([Text.Encoding]::ASCII.GetBytes($credentials))
$headers = @{Authorization = "Basic $encodedCredentials"}

# Example: Create a new computer group
$groupName = "New Computer Group"
$groupXml = @"

    $groupName

"@

$uri = "$jamfProUrl/computergroups/id/0"

try {
    $response = Invoke-RestMethod -Uri $uri -Headers $headers -Method Post -Body $groupXml -ContentType "application/xml" -ErrorAction Stop
    Write-Host "Computer Group '$groupName' created with ID: $($response.computer_group.id)"
} catch {
    Write-Error "Failed to create computer group '$groupName': $($_.Exception.Message)"
}