Entra device cleanup

Deploy an Azure Automation workflow that disables stale Entra devices, archives recovery material, and optionally deletes devices after a later threshold.

Quick start

azd init -t nathanmcnulty/azd-device-cleanup
azd up

Template details

• Repository: azd-device-cleanup
• Tags: Entra ID, Azure Automation, Microsoft Graph, Key Vault, PowerShell
• Language: PowerShell
• Updated: Aug 12, 2026
• Variants: 1

Highlights

• Safe default disables stale devices without deleting them
• Archives LAPS passwords, BitLocker keys, and device metadata
• Publishes cleanup summaries and failure alerts through Logic Apps

Notes

This guide page is generated automatically from the catalog metadata for azd-device-cleanup.