Capture Dell Trusted Device Telemetry with Microsoft Intune

1. Log in to your organizations Microsoft Intune portal and go to Endpoint Security > Device Compliance > Scripts > Add > Windows 10 and later.

Figure 1: (English Only) Click Add Windows 10 and later

2. Provide a Name for the custom script and click next.

Figure 2: (English Only) Provide a Name for the customer script

3. Locate the Trusted Device Agent Script downloaded from the prerequisite steps in this article and extract the .zip file. Right-click the Get-TrustedDeviceResults.ps1 file and Open with Notepad.

Figure 3: (English Only) Open Get-TrustedDeviceResults.ps1

4. In Notepad click Edit and then, click Select all.

Figure 4: (English Only) Click Edit and Select All

5. Back in the Microsoft Intune console window Right-click in the Detection Script area and select Paste.

Figure 5: (English Only) Right-click in the Detection Script area and select Paste

6. Set Run this script using the logged on credentials to No.

Figure 6: (English Only) Set Run this script using the logged on credentials to No

7. Set Enforce script signature check to No.

Figure 7: (English Only) Set Enforce script signature check to No

8. Set Run script in 64-bit PowerShell Host to Yes.

Figure 8: (English Only) Set Run script in 64-bit PowerShell Host to Yes

9. At the bottom of the page, Click Next.

Figure 8: (English Only) Click Next

10. On the Review + create screen review your configuration and click Create.

Figure 10: (English Only) Click Create

1. Log in to your organizations Microsoft Intune portal and go to Endpoint Security > Device Compliance > Polices and click Create Policy.

Figure 11: (English Only) Click Create Policy

2. In the Create a policy tab, select Platform Windows 10 and later and Profile type Windows 10/11 compliance policy. Then click create.

Figure 12: (English Only) Click Create

3. Provide the Windows 10/11 compliance policy name and click Next.

Figure 13: (English Only) Provide Policy Name and Click Next

4. On the Compliance settings screen, click Custom Compliance to expand the settings.

Figure 14: (English Only) Click Custom Compliance

5. Set Custom compliance to Require.

Figure 15: (English Only) Set Customer compliance to Require

6. For Select your discovery script, click to select and search for the script previously created the custom script (step 2) and then click Select.

Figure 16: (English Only) Select the script and click Select

7. For Upload and validate the JSON file with your custom compliance settings, click the Folder icon to launch file explorer and browse to where you extracted the prerequisite files. In the File Explorer, select the TrustedDeviceComplianceRules.json file and click Open.

Figure 17: (English Only) Open TrustedDeviceComplianceRules.json

8. Review the compliance settings and then click Next.

Figure 18: (English Only) Review and click Next

9. On Actions for noncompliance set any additional noncompliance sequences you would like to happen and then click Next.

Figure 19: (English Only) Set additional noncompliance sequences and click Next

10. On Assignments click Add Groups and on the Select groups to include tab locate your custom group for Dell devices and click the checkbox next to them. Then click select.

Figure 20: (English Only) Select Groups and click select

Note: If you do not have a group already created you can reference, Create a group to manage users , article to help in group creation.

11. On the Windows 10/11 compliance policy page, confirm that your group was added and click Next.

Figure 21: (English Only) Confirm that your group was added and click Next

12. On the Review + create page review the configuration and click Create.

Figure 22: (English Only) Click Create

13. The compliance policy configuration is now complete, Intune starts collecting data based on the script and compliance values. To see compliance status, you can return to Endpoint Security > Device compliance > Compliance Polices > Compliancy Policy Name created in Step 3 and click View Report.

Figure 23: (English Only) Dell trusted Device Compliance Policy