Bulk Operations
Execute management actions on enrolled devices through Microsoft Intune. Perform sync, restart, rename, and other administrative tasks individually or in bulk across your managed device fleet.
Available Actions
Sync
Force the device to check in with Intune immediately. Retrieves latest policies, apps, and compliance status.
Platforms: Windows, macOS, iOS, Android
Restart
Remotely restart the device. User is notified before restart on supervised devices.
Platforms: Windows, macOS, iOS (supervised)
Rename Device
Change the device name in Intune and on the device itself. Useful for standardizing naming conventions.
Platforms: Windows, macOS, iOS (supervised)
Collect Diagnostics
Gather device logs and diagnostic data for troubleshooting without user intervention.
Platforms: Windows
Rotate BitLocker Keys
Generate new BitLocker recovery keys. Previous keys are immediately invalidated.
Platforms: Windows
Update Windows Defender
Force Windows Defender to download and apply the latest security intelligence updates.
Platforms: Windows
Run Quick Scan
Initiate a Windows Defender quick scan to check for threats in common locations.
Platforms: Windows
Run Full Scan
Initiate a comprehensive Windows Defender scan of all files and running programs.
Platforms: Windows
Action Matrix by Platform
| Action | Windows | macOS | iOS | Android |
|---|---|---|---|---|
| Sync | Yes | Yes | Yes | Yes |
| Restart | Yes | Yes | Supervised | — |
| Rename | Yes | Yes | Supervised | — |
| Collect Diagnostics | Yes | — | — | — |
| Rotate BitLocker Keys | Yes | — | — | — |
| Rotate FileVault Keys | — | Yes | — | — |
| Defender Scan | Yes | — | — | — |
| Lost Mode | — | — | Supervised | Yes |
Bulk Actions
Execute actions on multiple devices simultaneously by selecting from device lists or using filters:
Selection Methods
- Manual device selection
- Filter by device group
- Filter by compliance status
- Filter by platform/OS version
- Filter by last sync time
Bulk Action Limits
- Maximum 100 devices per batch
- Actions queued and processed sequentially
- Progress tracking in action history
- Email notification on completion
Action History
Track all device actions with complete audit trail:
| Timestamp | Device | Action | Initiated By | Status |
|---|---|---|---|---|
| 2024-01-15 14:32 | DESKTOP-ABC123 | Sync | admin@company.com | Completed |
| 2024-01-15 14:28 | MacBook-XYZ | Restart | admin@company.com | Pending |
| 2024-01-15 14:15 | iPhone-Sales01 | Lost Mode | security@company.com | Completed |
Permissions
Basic Actions
Sync, collect diagnostics, run scans — requires Managed Device Read/Update permission.
Restart/Shutdown
Remote restart and shutdown — requires additional Remote Tasks permission.
Key Rotation
BitLocker/FileVault key rotation — requires Security Baselines permission.
API Reference
POST /api/devices/:id/sync— Trigger device syncPOST /api/devices/:id/restart— Restart device remotelyPOST /api/devices/:id/rename— Rename devicePOST /api/devices/:id/collect-diagnostics— Collect device diagnosticsPOST /api/devices/:id/rotate-bitlocker— Rotate BitLocker keysPOST /api/devices/bulk-action— Execute bulk device actionGET /api/devices/action-history— Get action audit history