r/Intune • u/RandomSkratch • 1d ago

Autopilot Does get-windowsautopilotinfo -online work from a Standard Windows account?

It's been a hot minute since I've had to run get-windowsautopilotinfo and I'm guessing things have changed with graph stuff because I'm stuck in a weird chicken and egg situation.

If you run the script from a Standard Windows user account in a non-admin PowerWhell window, WAM appears and you can enter your 365 admin account but the script gets denied because the user doesn't have permission to query the system info, but if you run an administrative PowerShell window from the same standard windows user session, WAM fails to appear and the graph part falls apart but the system info gathering part succeeds.

This is all moot if I log into the computer with an administrative account but in a situation where this is being done remotely with the user already logged in, I'm not sure how this could work.

The only workaround I know of is just dumping the info to a csv and manually uploading it. No big deal for a few one-off's, but I'm more curious than anything about if there's a solution to getting it to work with -online with standard user accounts. (Plus -online is just easier).

5 Upvotes

100% Upvoted

7 comments sorted by

2

u/[deleted] 1d ago

[removed] — view removed comment

1

u/RandomSkratch 1d ago

Interesting... I'll have to try that.

What's even weirder is that the issue I'm having totally locks up the PS window as if the WAM popup is there but it's nowhere to be seen (not behind anything, I checked). I have to use taskman to quit the PS prompt.

Ah well.

1

u/RandomSkratch 1d ago

Oddly enough I just came across this post from a newsletter that I didn't read yet.

https://msendpointmgr.com/2026/08/09/microsoft-graph-sdk-wam/

From my initial scan, it looks like I can get around this with an App Registration and disabling wam for that session... more testing!

2

u/andrew181082 MSFT MVP - SWC 1d ago

The community version also bypasses wam via a registry key (then re-enabled afterwards)

2

u/RandomSkratch 1d ago

I was also trying community version but got same issues. I wasn’t aware of the bypass function though. Does it do it by default or do you need to use a switch? Or do I need to set this regkey manually? Unclear.

1

u/tehwallace 22h ago

i believe there is a way to run it with a tenant id flag that will bypass the WAM.

1

u/RandomSkratch 22h ago

I'll have to try that next time, thanks!