@lukemurraynz : great blog on vm applications. Read both link listed above and modify little. works great. thx for your all your help

i tried those, it only give me extension but not vm application

Lukemurraynz thank you so much. thats exactly what i was looking for...I will test it.

VM Applications is another service in azure where you can publish file definition in Azure Gallery and install through extenstion+application as shown below. I am curious if i can install through azure extension through PowerShell.

yes it did .. thx

Thanks for your reply. I am familiar with limitation on set of attributes,
"you can prefix the device name with the site, etc." would you please let me know on this, I would like to tag during AutoPilot or something so when I can create query.

thanks for all your explanation. Again, yes i can create attribute and assigned value. Is there way i can assigned value during AutoPilot.

In Intune there is a attribute 'Wi-Fi IPv4 address', how can retrieve this value... Any idea?

I don't see "accept Answer" option under my name. so i can't

@shashishailaj This is very nice description. I think you should blog this. I will put your description in my OneNote for future reference.

thanks again and it did resolved my issue.

so the idea is to Get AllUsers active members userid accounts (means they are not guest accounts) and with acounts won't start with "Z-" (excludes accounts Z-).

you mentioned as OR which might not work.

so i tried with this query without any luck..

(user.objectId -ne null) -and (user.userType -eq "Member") -and -not (user.userPrincipalName -startswith "Z-")

hope this clarify

Anyone??? thanks for help in advance

Plus, i tried link listed above. Function doesn't work as people listed under comment mentioned.

it is amazing using 3rd party to retrieve azure key...Don't you think MS needs to straight up these for administrator?

i have send you an emailt to azcommunity....running on other upn, didn't give me any output...

hi, good to know this cmdlet... No i am trying to implement intune but there is no policy applied yet. As soon it joined to AAD, it encrypts the device and put key in AAD. I was looking for AAD cmdlet to fine it...