Finding Unauthorized/Unapproved Software Instances in Intune Using PowerShell

Swahela Mulla 90 Reputation points
2023-10-17T13:18:55.2633333+00:00

I need assistance in using PowerShell to find unauthorized software instances on endpoints managed by Microsoft Intune. Is there a PowerShell script, command, or API that can help me retrieve this information? I would greatly appreciate step-by-step guidance or a reference to relevant documentation.

Thank you for your assistance

Microsoft Intune Security
Microsoft Intune Security
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
370 questions
Microsoft Intune Reporting
Microsoft Intune Reporting
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Reporting: The process of giving an account of something that has been observed, heard, done, or investigated.
65 questions
Microsoft Intune Compliance
Microsoft Intune Compliance
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Compliance: Adhering to rules, standards, policies, and laws.
143 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,649 questions
PowerShell
PowerShell
A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
2,256 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Crystal-MSFT 45,486 Reputation points Microsoft Vendor
    2023-10-18T01:45:07.89+00:00

    @Swahela Mulla, Thanks for posting in Q&A. Based on my researching, I didn't find the PowerShell script to find unauthorized software instances.

    For your request, here are some of my thoughts:

    1. We can run command to get the installed software on the device. Get-WmiObject -Class Win32_Product -ComputerName $computerName | Select-Object Name, Version https://stackoverflow.com/questions/53161112/full-listing-of-installed-programs-using-powershell Note: Non-microsoft link, just for the reference.
    2. Then compare with the approved app list in your environment to see if there's any not approved app there.

    Hope the above information can help.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.