-
Notifications
You must be signed in to change notification settings - Fork 6
/
Reset-FullDevice.ps1
111 lines (98 loc) · 4.87 KB
/
Reset-FullDevice.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
<#
.SYNOPSIS
Performs Full Device Wipe from AirWatch for a list of SerialNumbers
WARNING!!! This is really best for iOS only. Android Enterprise will work, however because multiple device records can share the same Serial Number, you might not wipe the record you want to if multiples exist.
macOS requires setting a device pin, which will be covered with a different script.
.DESCRIPTION
Performs Full Device Wipe from AirWatch for a list of SerialNumbers
WARNING!!! This is really best for iOS only. Android Enterprise will work, however because multiple device records can share the same Serial Number, you might not wipe the record you want to if multiples exist.
macOS requires setting a device pin, which will be covered with a different script.
.PARAMETER file
Path of a CSV file with a list of Serial Numbers. This is required.
.PARAMETER fileColumn
Column title in CSV file containing SerialNumber values. This is optional, with a default value of "SerialNumber".
.INPUTS
AirWatchConfig.json
Serials.csv
.OUTPUTS
NO OUTPUT CURRENTLY:Outputs a CSV log of actions
.NOTES
Version: 1.7
Author: Joshua Clark @MrTechGadget
Creation Date: 10/02/2018
Update Date: 10/14/2023
Site: https://github.com/MrTechGadget/aw-bulkdevices-script
.EXAMPLE
.\Reset-FullDevice.ps1 -file "Devices.csv" -fileColumn "SerialNumber"
#>
[CmdletBinding()]
Param(
[Parameter(Mandatory = $True, Position = 0, ValueFromPipeline = $true, HelpMessage = "Path to file listing SerialNumbers.")]
[string]$file,
[Parameter(HelpMessage = "Name of Id column in file, default is SerialNumber")]
[string]$fileColumn = "SerialNumber"
)
Import-Module .\PSairwatch.psm1
Write-Log -logstring "$($MyInvocation.Line)"
$Logfile = "$PSScriptRoot\FullDeviceWipe.log"
$list = Read-File $file $fileColumn
Write-Log -logstring "$($MyInvocation.Line)" -logfile $Logfile
$acknowledge = $Host.UI.PromptForChoice(
"WARNING!!! This is really best for iOS only. Android Enterprise will work, however because multiple device records can share the same Serial Number, you might not wipe the record you want to if multiples exist.
macOS requires setting a device pin, which will be covered with a different script. \n
Would you like to proceed?",
"",
@('&Yes', '&No'), 1)
if ($acknowledge -eq 0) {
$decision = $Host.UI.PromptForChoice(
"Attention! If you proceed, " + $list.count + " devices will be Device Wiped back to factory settings from AirWatch",
"",
@('&Yes', '&No'), 1)
if ($decision -eq 0) {
Write-Log -logstring "Wiping $($list.count) devices back to factory settings from AirWatch" -logfile $Logfile
$json = '{
"deviceWipe": {
"disableActivationKey": true
}
}'
foreach ($item in $list) {
Write-Progress -Activity "Deleting Devices..." -Status "Batch $($list.IndexOf($item)+1) of $($list.Count)" -CurrentOperation "$item" -PercentComplete ((($list.IndexOf($list) + 1) / ($list.Count)) * 100)
$endpointURL = "mdm/devices/commands/DeviceWipe/device/SerialNumber/${item}"
try {
$result = Send-Post -endpoint $endpointURL -body $json -version "application/json;version=2"
if ($result -ne "") {
$err = ($Error[0].ErrorDetails.Message | ConvertFrom-Json)
if ($err.errorCode -in 400, 5100) {
Write-Warning ("Error Wiping Device: $item : Error " + $err.errorCode + ", might be an Android device, retrying with different parameters")
$result = Send-Post -endpoint $endpointURL -body "{}" -version "application/json;version=2"
if ($result -ne "") {
$err = ($Error[0].ErrorDetails.Message | ConvertFrom-Json)
Write-Warning ("Error Wiping Device: $item : " + $err.errorCode + " " + $err.message)
Write-Log -logstring ("Error Wiping Device: $item : " + $err.errorCode + " " + $err.message) -logfile $Logfile
} else {
Write-Host "$item Wiped $result"
Write-Log -logstring "$item Wiped $result" -logfile $Logfile
}
} else {
Write-Warning ("Error Wiping Device: $item : Error", $err.errorCode, $err.message)
Write-Log -logstring ("Error Wiping Device: $item : Error", $err.errorCode, $err.message) -logfile $Logfile
}
} else {
Write-Host "$item Wiped $result"
Write-Log -logstring "$item Wiped $result" -logfile $Logfile
}
}
catch {
$err2 = ($Error[0].ErrorDetails.Message)
Write-Warning "Error Sending Device Wipe Command: $item $err2"
Write-Log -logstring "Error Sending Device Wipe Command: $item $err2" -logfile $Logfile
}
}
} else {
Write-Host "Deletion Cancelled"
Write-Log -logstring "Deletion Cancelled" -logfile $Logfile
}
} else {
Write-Host "Deletion Cancelled"
Write-Log -logstring "Deletion Cancelled" -logfile $Logfile
}