Get-AutopilotDeviceAssociation
1.3.0
device association lifecycle. It exports the genuine TPM-backed DeviceLink identity
package that Windows produces (WinRT DeviceLinkUtilities), inspects that package and
recovers the real RSA-PSS salt length, imports the unchanged Data value into Intune
through the Microsoft Graph be
device association lifecycle. It exports the genuine TPM-backed DeviceLink identity
package that Windows produces (WinRT DeviceLinkUtilities), inspects that package and
recovers the real RSA-PSS salt length, imports the unchanged Data value into Intune
through the Microsoft Graph beta importTenantAssociatedDevice endpoint, polls the record
until it is pre-associated, runs native Windows discovery and link calls, reads the local
Device Link UEFI markers by hash and status only, and removes the association locally and
- with an explicit switch - in Intune after verified local removal.
The exported Data value is uploaded exactly as Windows produced it; the script does not
fabricate, alter or re-sign identities, and HTTP mutations have zero automatic retries.
It supports interactive device-code sign-in by default and certificate or client-secret
app-only authentication for unattended runs. This is a diagnostic and lab toolkit that
calls Windows DeviceLink interfaces and Microsoft Graph beta endpoints that can change;
test it before using it in an operational workflow.
Installation Options
Owners
Copyright
(c) 2026 Rudy Ooms. All rights reserved.
Package Details
Author(s)
- Rudy Ooms
Tags
Windows Autopilot Intune DeviceAssociation DeviceLink Autopilot-Device-Preparation OOBE
Functions
Resolve-DLRequestedAction Add-DLRedaction Protect-DLText Protect-DLObject Get-DLSha256 Get-DLAuthenticationMethod Initialize-DLLogging Write-DLLog Write-DLVerboseLog Get-DLActionPlan Initialize-DLStepPlan Invoke-DLStep ConvertTo-DLHeaders ConvertTo-DLBodyLog Get-DLHttpFailure Save-DLHttpRecord Invoke-DLRestMethod Write-DLExportSummary Invoke-DLExport Invoke-DLLink Initialize-DLFirmwareInterop Get-DLFirmwareVariable Clear-DLFirmwareVariable Get-DLFirmwareAssociationState Remove-DLFirmwareAssociation Get-BlobFromCsv Resolve-Csv Get-DLDelegatedGraphScopes Get-DLInteractiveGraphToken Get-GraphToken U Invoke-Inspect BI Graph-Headers Get-DLIdentifierHash ConvertTo-DLNormalizedUuid Get-DLLocalDeviceIdentity Test-DLAssociationRecordMatch Assert-DLCloudRemovalParameters Resolve-DLCloudAssociation Invoke-DLCloudAssociationDelete Wait-DLCloudAssociationDeletion Wait-PreAssociated Invoke-Upload Show-LinkResult
Dependencies
This script has no dependencies.
Release Notes
Version 1.3.0 renames the script and published command to Get-AutopilotDeviceAssociation and adds a .DESCRIPTION block for PowerShell Gallery publishing. Export, Inspect, Upload, Discover, Link, ReadAssociation and RemoveAssociation behaviour is unchanged; the console banner, work folder and diagnostic file names are unchanged.
Version 1.2.0 keeps the normal console concise, moves diagnostic events to -Verbose, and selects the first returned Device Preparation policy when no policy ID or name is supplied.
FileList
- Get-AutopilotDeviceAssociation.nuspec
- Get-AutopilotDeviceAssociation.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 1.8.0 | 27 | 9/3/2026 |
| 1.5.0 | 3 | 9/3/2026 |
| 1.3.0 (current version) | 13 | 9/1/2026 |