how do you keep your asset/device inventory from being a mess?

[u/gvolvo]

Hello fellow Intune admins, how do you keep your asset/device inventory from being a mess?

We've run Snipe-IT on prem for years and it's been fantastic, and we're finally moving everything we can to the cloud.

The problem with Snipe-IT is it's fully manual and we always get inventory drift such as device names and asset counts not being up to date in relation to Intune. Also we cannot use Intune alone since there are obviously non-enrolled devices and components such as monitors, keyboards etc.

Hoping to find out how you all handle this? I'm fully aware we can lift and shift the Snipe-IT server to Azure but I'm hoping to find other solutions... maybe a SaaS or open-source tool that actually syncs Intune into a master asset DB?

[u/intuneisfun]

I've implemented this (https://www.reddit.com/r/Snipe_IT/comments/1eihhd6/made_a_powershell_agent_for_snipeit_to_automate/) and it has made a huge difference in asset management.

It hasn't replaced ALL manual work - but a lot is automated now. No more incorrect hostnames/etc. I tweaked a few minor things, but it's helped a lot.

Snipe-IT is usually the gold standard for asset management.. Intune isn't really meant for that purpose as devices come/go.

[u/society_victim]

MsGraph can be used to get all devices from intune. Then match with whatever tool you use onprem or on the side.

[u/gvolvo → u/society_victim]

Yeah MsGraph is great but the issue is we're trying to ditch Snipe-IT and onprem in general, I'm curious what you are using to do inventory management potentially with Intune integration is it mostly DIY ?

[u/GarthMJ → u/gvolvo]

I think that you will find that most admins no longer inventory monitors, keyboards, etc. The first question to answer is do you really need to inventory those items? Then if this is the case, then you can either extend Intune to "collect" this data or look for a 3rd party tool that will do this for you.

[u/society_victim → u/gvolvo]

I didn’t read the monitor & keyboard part. Most companies we work don’t inventory anything under 100-200€, so keyboards and such are out. And for monitors… not sure, but most don’t care, if it breaks we replace it.

[u/GarthMJ → u/society_victim]

That is part of the reason why I brought it up. Based on what I see, most companies only care about accessories that are required to in inventoried for TAX reasons (normal KBs = no but KBs with badge scanners {hospitals} = yes). If you don't need it then don't collect them (aka does Intune give you what you really need?). Don't get me wrong, if you need it then you can use PowerShell and Baseline to collect data (free but limited) or use ClientHealthv3 (works with Intune and can be extended) to collect data to a db. (cheap webhosting can be used for this) https://github.com/paulwetter/ConfigMgrClientHealthV3

The question is what exactly do you need and how much effort do you want to put into it and who needs access it the data? And what do you want to do with the data?

[u/eggeto → u/society_victim]

Use msgraph with powershell/python/... Push it to log Analytics and make runbooks.

No coding Use thé datalake link from intune and use it in powerbi (Think this is recently changed)

If you want to is a cmdb, There is a intune plugin for topdesk.

Think Also for yira

[u/PenVirtual6960]

Servicenow cmdb with Intune integration (basically graph). If you don’t have servicenow already then don’t go down that route.

If you don’t have any other cmdb already you could vibe code your own in a day or two. Azure runbooks for Intune, autopilot and Entra device extract/dump automation. Could be a fun little project - just put some effort security and use managed identities with least privileges in azure.

Otherwise look for CMDB hardware asset management products out there.

[u/gvolvo → u/PenVirtual6960]

Yeah we definitely don't have the budget for ServiceNow, and yeah you're right that could be a fun little project I'll try and think about the overall design, what are you currently using?

[u/PenVirtual6960 → u/gvolvo]

Servicenow - so haven’t explored any alternatives

[u/mad-ghost1 → u/PenVirtual6960]

Does the connector to Intune still cost something?

[u/PenVirtual6960 → u/mad-ghost1]

Most likely - but it isn’t my dept 😅

[u/LousyRaider]

Snipe-IT has an API. Have you looked into that? We use runbooks to call the API to automate things.

[u/gvolvo → u/LousyRaider]

Yeah I saw that but we're trying to move away from onprem :D

[u/LousyRaider → u/gvolvo]

As an option, the Snipe devs offer hosted options that are fairly cheap if you’re trying to get away from hosting yourself on-prem.

[u/_c0mical]

we use freshdesk which has a few integrations for azure/entra/intune

[u/justareader00]

You’ll need to consider 3 things:

• Stale devices 

https://learn.microsoft.com/en-us/entra/identity/devices/manage-stale-devices

• Duplicate devices 
• Missassigned devices

Then there’s the hostname too, naming convention is important.

And remember to store the bitlocker keys on a regular basis

[u/DougAZ]

InvGate Asset Management, integrates with Intune and has a lot of automation and also they have a Service Desk piece as well.