Admins need to see the devices registered by a user in Microsoft Entra ID to monitor and manage access to corporate resources, ensuring that only authorized and compliant devices are used. This helps identify potential security risks, such as outdated, unmanaged, or compromised devices, that could threaten the organization's overall security posture.
Before using the Get-MgUserRegisteredDevice cmdlet, ensure the following:
Install-Module Microsoft.Graph -Scope CurrentUser
Connect-MgGraph -Scopes "User.Read.All","Group.ReadWrite.All","Directory.Read.All"
The Get-MgUserRegisteredDevice cmdlet can be used in Microsoft Graph PowerShell to fetch Microsoft Entra ID user-registered devices. Here's the syntax:
Get-EntraUserRegisteredDevice
-UserId <String>
[-All]
[-Top <Int32>]
[-Property <String[]>]
[<CommonParameters>]
List the devices registered by a particular user
Get-MgUserRegisteredDevice -UserId <"user_id"> | Select-Object Id -ExpandProperty AdditionalProperties
In this command, replace user_id with the user's ID for whom you would like to list the user-registered devices.
The following table contains some parameters that can be used along with the Get-MgUserRegisteredDevice command to fetch Microsoft Entra ID user-registered devices efficiently.
| Parameters | Description |
|---|---|
| -All | This parameter retrieves all user-registered devices without default pagination limits. |
| -UserId | This parameter retrieves user-registered devices based on their unique identifiers, such as user principal name or object ID. |
| -Property | This parameter retrieves specific attributes of user-registered devices. |
Bid adieu to complicated PowerShell scripts with ManageEngine ADManager Plus. ADManager Plus is a powerful Microsoft 365 management and reporting solution that can help you perform complicated, administrative tasks from a single, user-friendly console.