Bulk Device Actions

Perform device operations at scale across your managed M365 environment. Execute bulk actions on multiple devices simultaneously using selection, filters, or CSV import. Ideal for maintenance, security response, and lifecycle management.

Supported Bulk Actions

Bulk Selection Operations

Select multiple devices from the device list and perform actions:

Reset Passwords

Reset passwords for selected device users. Auto-generate or set specific password. Option to require change on next login.

Assign/Remove Licenses

Add or remove licenses from users of selected devices. Toggle specific service plans.

Block Sign-in

Disable sign-in for users of selected devices. Useful for immediate access revocation.

Update Attributes

Set the same value for an attribute across all selected devices (e.g., set Category to “Shared” for 50 devices).

CSV Import for Bulk Actions

Create device actions by uploading a CSV file with device details:

Required Columns

Note: Download the CSV template to ensure correct column headers and formatting. The template includes all supported columns.

Import Process

1. Upload CSV — Select file or drag and drop. Max 5,000 rows per import.
2. Validate Data — System checks for errors: invalid device IDs, unsupported actions, missing fields.
3. Review Preview — Review parsed data and fix any validation errors before proceeding.
4. Execute Actions — Perform device actions. Progress shown in real-time.
5. Download Results — Get report with success/failure status for each device.

Operation Results

Each bulk operation produces results in three categories:

• Succeeded — Operation completed successfully on the device
• Failed — An error occurred (device offline, permissions issue, etc.)
• Skipped — Device already in requested state or not applicable

Download the results CSV to see detailed status for each device including error messages for any failures.

Common Scenarios

Security Incident Response

Bulk lock or wipe compromised devices. Select affected devices from alert, execute immediate lockdown across all impacted endpoints.

Windows Update Rollout

Force sync on devices after deploying new update ring. Ensures devices check in promptly and begin downloading updates.

End of Lease / Decommission

Bulk wipe devices being returned. Select all devices in the decommission group, factory reset, and remove from Intune inventory.

BYOD Offboarding

Retire (not wipe) personal devices when employees leave. Removes corporate data while preserving personal files and apps.

Best Practices

• Start with sync before wipe — Verify device connectivity with a sync action before attempting destructive operations
• Use filters to target precisely — Filter by OS, compliance status, or group membership to avoid acting on wrong devices
• Schedule large operations during off-hours — Reduce user impact by running bulk actions during maintenance windows
• Review results promptly — Check the results CSV for failures and retry or investigate as needed

Warning: Wipe and retire actions are irreversible. Always review the device list carefully before executing destructive bulk operations.

API Reference

• POST /api/automation/bulk-devices/actions — Execute bulk device action
• POST /api/automation/bulk-devices/import — Import device actions from CSV
• GET /api/automation/bulk-devices/jobs/:id — Get bulk operation status
• POST /api/automation/bulk-devices/sync — Bulk sync devices
• POST /api/automation/bulk-devices/wipe — Bulk wipe devices