Delete Stale Devices in AzureAD with Microsoft.Graph PowerShell

Andres Bohren

2023-02-08

Hi All,

While checking the Devices in my M365 Tenant i was stumbled over the Stale Devices.

The List shows Devices that have an acivity more than 6 Months ago

Let’s check if we can get that Information with Microsoft.Graph PowerShell

Connect-MgGraph -Scopes Directory.ReadWrite.All, Directory.AccessAsUser.All
Get-MgDevice

Now we need to get the Devices that are older than six Months

$Devices = Get-MgDevice
$Devices | where {$_.ApproximateLastSignInDateTime -lt (Get-Date).AddMonths(-6)}

We can format that a little better

$Devices | where {$_.ApproximateLastSignInDateTime -lt (Get-Date).AddMonths(-6)}  | ft DisplayName,AccountEnabled,OperatingSystem,OperatingSystemVersion,ProfileType,IsManaged,IsCompliant,OnPremisesSyncEnabled,ApproximateLastSignInDateTime

Let’s remove these Devices

$StaleDevices = $Devices | where {$_.ApproximateLastSignInDateTime -lt (Get-Date).AddMonths(-6)}
Foreach ($StaleDevice in $StaleDevices)
{
    Write-Host "DisplayName: $($StaleDevice.DisplayName) ApproximateLastSignInDateTime: $($StaleDevice.ApproximateLastSignInDateTime)"
    $DeviceId = $StaleDevice.Id
    Write-Host "Delete Id: $DeviceId" -ForegroundColor Yellow
    Remove-MgDevice -DeviceId $DeviceId 
}