Reset-FullDevice.ps1

<#
.SYNOPSIS
  Performs Full Device Wipe from AirWatch for a list of SerialNumbers
  WARNING!!! This is really best for iOS only. Android Enterprise will work, however because multiple device records can share the same Serial Number, you might not wipe the record you want to if multiples exist.
  macOS requires setting a device pin, which will be covered with a different script.
.DESCRIPTION
  Performs Full Device Wipe from AirWatch for a list of SerialNumbers
  WARNING!!! This is really best for iOS only. Android Enterprise will work, however because multiple device records can share the same Serial Number, you might not wipe the record you want to if multiples exist.
  macOS requires setting a device pin, which will be covered with a different script.
.PARAMETER file 
    Path of a CSV file with a list of Serial Numbers.  This is required. 
.PARAMETER fileColumn 
    Column title in CSV file containing SerialNumber values.  This is optional, with a default value of "SerialNumber". 
.INPUTS
  AirWatchConfig.json
  Serials.csv
.OUTPUTS
  NO OUTPUT CURRENTLY:Outputs a CSV log of actions
.NOTES
  Version:        1.7
  Author:         Joshua Clark @MrTechGadget
  Creation Date:  10/02/2018
  Update Date:    10/14/2023
  Site:           https://github.com/MrTechGadget/aw-bulkdevices-script
.EXAMPLE
  .\Reset-FullDevice.ps1 -file "Devices.csv" -fileColumn "SerialNumber"
#>


[CmdletBinding()] 
Param(
  [Parameter(Mandatory = $True, Position = 0, ValueFromPipeline = $true, HelpMessage = "Path to file listing SerialNumbers.")]
  [string]$file,
	
  [Parameter(HelpMessage = "Name of Id column in file, default is SerialNumber")]
  [string]$fileColumn = "SerialNumber"
)

Import-Module .\PSairwatch.psm1
Write-Log -logstring "$($MyInvocation.Line)"

$Logfile = "$PSScriptRoot\FullDeviceWipe.log"

$list = Read-File $file $fileColumn

Write-Log -logstring "$($MyInvocation.Line)" -logfile $Logfile

$acknowledge = $Host.UI.PromptForChoice(
  "WARNING!!! This is really best for iOS only. Android Enterprise will work, however because multiple device records can share the same Serial Number, you might not wipe the record you want to if multiples exist.
    macOS requires setting a device pin, which will be covered with a different script. \n
    Would you like to proceed?", 
  "",
  @('&Yes', '&No'), 1)

if ($acknowledge -eq 0) {
  $decision = $Host.UI.PromptForChoice(
    "Attention! If you proceed, " + $list.count + " devices will be Device Wiped back to factory settings from AirWatch",
    "",
    @('&Yes', '&No'), 1)

  if ($decision -eq 0) {
    Write-Log -logstring "Wiping $($list.count) devices back to factory settings from AirWatch" -logfile $Logfile
    $json = '{
        "deviceWipe": {
          "disableActivationKey": true
        }
      }'

    foreach ($item in $list) {
      Write-Progress -Activity "Deleting Devices..." -Status "Batch $($list.IndexOf($item)+1) of $($list.Count)" -CurrentOperation "$item" -PercentComplete ((($list.IndexOf($list) + 1) / ($list.Count)) * 100)
      $endpointURL = "mdm/devices/commands/DeviceWipe/device/SerialNumber/${item}"
      try {
        $result = Send-Post -endpoint $endpointURL -body $json -version "application/json;version=2"
        if ($result -ne "") {
          $err = ($Error[0].ErrorDetails.Message | ConvertFrom-Json)
          if ($err.errorCode -in 400, 5100) {
            Write-Warning ("Error Wiping Device: $item : Error " + $err.errorCode + ", might be an Android device, retrying with different parameters")
            $result = Send-Post -endpoint $endpointURL -body "{}" -version "application/json;version=2"
            if ($result -ne "") {
              $err = ($Error[0].ErrorDetails.Message | ConvertFrom-Json)
              Write-Warning ("Error Wiping Device: $item : " + $err.errorCode + " " + $err.message)
              Write-Log -logstring ("Error Wiping Device: $item : " + $err.errorCode + " " + $err.message) -logfile $Logfile
            } else {
              Write-Host "$item Wiped $result"
              Write-Log -logstring "$item Wiped $result" -logfile $Logfile
            }
          } else {
            Write-Warning ("Error Wiping Device: $item : Error", $err.errorCode, $err.message)
            Write-Log -logstring ("Error Wiping Device: $item : Error", $err.errorCode, $err.message) -logfile $Logfile
          }
                
        } else {
          Write-Host "$item Wiped $result"
          Write-Log -logstring "$item Wiped $result" -logfile $Logfile
        }
      }
      catch {
        $err2 = ($Error[0].ErrorDetails.Message)
        Write-Warning "Error Sending Device Wipe Command: $item $err2"
        Write-Log -logstring "Error Sending Device Wipe Command: $item $err2" -logfile $Logfile
      }
    }
  } else {
    Write-Host "Deletion Cancelled"
    Write-Log -logstring "Deletion Cancelled" -logfile $Logfile
  }
} else {
  Write-Host "Deletion Cancelled"
  Write-Log -logstring "Deletion Cancelled" -logfile $Logfile
}