# RealmJoin vNext

## English

- [RealmJoin Documentation](https://docs.realmjoin.com/readme.md): Application Lifecycle and Management Companion to Microsoft Intune
- [Overview](https://docs.realmjoin.com/overview.md): What RealmJoin is, which problems it solves next to Microsoft Intune, and what you need to run it.
- [Navigation](https://docs.realmjoin.com/introduction/navigation.md): RealmJoin Portal navigation from the About me page, with areas that adapt to your permission level.
- [Useful Links](https://docs.realmjoin.com/introduction/useful-links.md): Key RealmJoin links to bookmark for quick access.
- [RealmJoin Unlocked Vodcast](https://docs.realmjoin.com/introduction/realmjoin-unlocked-vodcast.md): Welcome to RealmJoin Unlocked, our official video podcast series. This series is designed to bridge the gap between technical innovation and practical application for our customers and partners.
- [Getting Started](https://docs.realmjoin.com/deployment/getting-started.md): A decision matrix to choose between the standard and extended RealmJoin deployment guides based on required features and scope.
- [Extended Guide](https://docs.realmjoin.com/deployment/getting-started/extended-guide.md): This will guide you through all steps to deploy RealmJoin for an enterprise-grade environment with advanced requirements e.g. Runbooks, Logging etc.
- [Onboarding](https://docs.realmjoin.com/deployment/onboarding-realmjoin-portal.md): Step by step guide on deploying the RealmJoin Portal to a new tenant
- [Advanced Setup](https://docs.realmjoin.com/deployment/onboarding-realmjoin-portal/advanced-setup.md): The Advanced Setup allows you to assign permissions in a more granular and customized way. This approach is more flexible but more complex and requires running the RealmJoin PowerShell module.
- [Required Permissions](https://docs.realmjoin.com/deployment/required-permissions.md): Microsoft Graph and Azure permissions required by the RealmJoin Portal apps for self-service and administrative functionality.
- [Infrastructure Considerations](https://docs.realmjoin.com/deployment/infrastructure.md): RealmJoin infrastructure and network requirements: connection endpoints, Azure Front Door, proxy guidance, and BranchCache-based peer-to-peer content delivery.
- [Limiting the Scope of RealmJoin Portal](https://docs.realmjoin.com/deployment/infrastructure/limiting-the-scope-of-realmjoin-portal.md): Use of Administrative Units with RealmJoin
- [AVD Templates](https://docs.realmjoin.com/deployment/infrastructure/avd-templates.md): RealmJoin AVD templates apply application sets unattended via RealmJoin Client to build golden images for Azure Virtual Desktop hosts.
- [Architecture Overview](https://docs.realmjoin.com/deployment/architecture-overview.md): A high-level overview of the RealmJoin architecture: the cloud backend, how managed devices and administrators connect, and which resources RealmJoin uses in your own Microsoft tenant.
- [Overview](https://docs.realmjoin.com/ugd-management/user-group-device-management.md): Manage Entra ID users, groups, and devices in one RealmJoin view combining Intune, Defender, Autopilot, and sign-in data.
- [Organization Details](https://docs.realmjoin.com/ugd-management/organization-details.md): RealmJoin organization details show an Azure tenant overview: user and group counts, Intune and runbook stats, and recent app changes.
- [User Profile](https://docs.realmjoin.com/ugd-management/user-profile.md): The RealmJoin User Profile tab gives users quick access to their apps, account, devices, and groups, with directory roles for admins.
- [User, Group and Device Lists](https://docs.realmjoin.com/ugd-management/user-list.md): Search and browse users, groups, and devices, and open any object's details page from RealmJoin Portal.
- [User Details](https://docs.realmjoin.com/ugd-management/user-list/user-details.md): RealmJoin user details show a single user object's summary and glanceable status such as enabled and member state.
- [Group Details](https://docs.realmjoin.com/ugd-management/user-list/group-details.md): RealmJoin group details for Entra static and dynamic groups, Exchange Online mail-enabled groups and distribution groups, and Microsoft 365 groups.
- [Device Details](https://docs.realmjoin.com/ugd-management/user-list/device-details.md): RealmJoin device details show a single device's logged-on user, installed apps, and security recommendations with status.
- [User and Group Settings](https://docs.realmjoin.com/ugd-management/user-and-group-settings.md): RealmJoin Client settings and features like LAPS applied at tenant, group, or user scope, with narrower scopes overriding broader ones.
- [Available RealmJoin Policies](https://docs.realmjoin.com/ugd-management/user-and-group-settings/additional-settings.md): Reference of available RealmJoin Client settings and policies configurable per user or group.
- [Advanced Search](https://docs.realmjoin.com/analyze-and-export/advanced-search.md): Experience nearly load-free access to your data
- [Advanced Search examples](https://docs.realmjoin.com/analyze-and-export/advanced-search/advanced-search-syntax.md): This page lists some typical use cases when working with the Advanced Search. There are many more variables and search queries - please contact us if you have questions or miss something.
- [Data Export](https://docs.realmjoin.com/analyze-and-export/data-export.md): Export Data of queried tables to perform filtering and analysis with your tenant data
- [Software Reporting](https://docs.realmjoin.com/analyze-and-export/software-reporting.md): RealmJoin Software Reporting shows apps installed across all company devices, with versions and deployment methods from Microsoft Intune.
- [Deployment Methods: RealmJoin Agent vs. Intune](https://docs.realmjoin.com/application-management/deployment-methods.md): Comparison of native Intune deployment (intunewin + Intune Management Extension) and RealmJoin Agent deployment for Windows packages — and the additional capabilities the Agent adds.
- [Packages](https://docs.realmjoin.com/application-management/packages.md): RealmJoin's catalogue of ready-to-use Windows and macOS application packages deployable via RealmJoin Client or Microsoft Intune.
- [Package Store](https://docs.realmjoin.com/application-management/packages/package-store.md): The RealmJoin Package Store is a maintained library of ready-to-use packages deployable via RealmJoin Client or Intune.
- [Package Subscription Options](https://docs.realmjoin.com/application-management/packages/package-store/package-store-details.md): Subscribe to RealmJoin Package Store packages as managed or basic and deploy them via Intune or the RealmJoin agent.
- [Package Migration](https://docs.realmjoin.com/application-management/packages/package-store/package-migration.md): Packages can be migrated to "Managed" if previously deployed as "Basic".
- [Package Management Overview](https://docs.realmjoin.com/application-management/packages/package-management.md): RealmJoin Package Management lists all packages across RealmJoin and Microsoft Intune to filter, search, sort, and manage version updates.
- [Package Configuration and Assignments](https://docs.realmjoin.com/application-management/packages/package-deployment.md): RealmJoin package subscriptions and assignment types such as Main (Required) and Available, for deploying software via RealmJoin or Intune, and how conflicting user and device assignments are prioriti
- [Update Group](https://docs.realmjoin.com/application-management/packages/update-group.md): Keep Intune "Available" managed apps up to date with the optional per-package Update Group, which temporarily assigns outdated devices as Required.
- [Android Apps (Managed Google Play)](https://docs.realmjoin.com/application-management/packages/android-apps-managed-google-play.md): Deploy Android apps from Managed Google Play through the RealmJoin Portal: prerequisites in Intune, required permission, activation and subscribing apps.
- [Package Details](https://docs.realmjoin.com/application-management/packages/package-details.md): The RealmJoin package details page shows a single package's properties and manages its user assignments and updates.
- [Package Settings](https://docs.realmjoin.com/application-management/packages/package-settings.md): This page details the different settings available for deployed packages
- [Packaging Requests](https://docs.realmjoin.com/application-management/packages/packaging-requests.md): RealmJoin provides Packaging‑as‑a‑Service (PACKaaS) for applications not available in the RJ Store or for outdated packages. For details, contact your RealmJoin consultant, partner, or support team.
- [Packaging Roles & Responsibilities](https://docs.realmjoin.com/application-management/packages/packaging-requests/packaging-roles-and-responsibilities.md): RealmJoin maintained versus unmaintained package types and update responsibilities split between the Packaging Factory and customers.
- [Application Package Testing](https://docs.realmjoin.com/application-management/packages/packaging-requests/application-package-testing.md): RealmJoin's four-stage package testing cycle validates installation mechanics, exit codes, and deployment behavior for packaging requests.
- [Organic Packages](https://docs.realmjoin.com/application-management/packages/packaging-requests/organic-packages.md): RealmJoin organic packages build from uploaded .zip files and publish automatically to the Package Store for binary file transport.
- [Migration Guide: RealmJoin to Intune Managed Packages](https://docs.realmjoin.com/application-management/packages/migration-guide-realmjoin-to-intune-managed-packages.md): This document outlines the best practices for transitioning package management from RealmJoin managed packages to Intune managed packages.
- [Connecting Azure Automation](https://docs.realmjoin.com/automation/connecting-azure-automation.md): Connect an Azure Automation Account to RealmJoin Portal with the RealmJoin PowerShell module, so RealmJoin can deploy, run and monitor runbooks in your tenant.
- [Switching to the RealmJoin managed app](https://docs.realmjoin.com/automation/connecting-azure-automation/managed-app-migration.md): Replace the per-tenant RealmJoin Runbook Management app registration and its client secret with the RealmJoin managed multi-tenant app, using the RealmJoin PowerShell module.
- [Runbook Management App Permissions](https://docs.realmjoin.com/automation/connecting-azure-automation/required-permissions.md): How RealmJoin authenticates against your Azure Automation Account, and which Azure permissions it needs to sync and run runbooks.
- [Runbook Execution Requirements](https://docs.realmjoin.com/automation/connecting-azure-automation/azure-ad-roles-and-permissions.md): This wiki pages addresses what requirements and (system-level) permissions have to be given, so that runbooks can be executed.
- [Runbooks](https://docs.realmjoin.com/automation/runbooks.md): Automate day-to-day operations in your environment.
- [Runbook Customization](https://docs.realmjoin.com/automation/runbooks/runbook-customization.md): Adapt RealmJoin's generic runbooks to your environments' needs.
- [Runbook Logs](https://docs.realmjoin.com/automation/runbooks/runbook-logs.md): Review recent and archived RealmJoin runbook executions, scoped by type and category, with search and sort.
- [Runbook Job Details](https://docs.realmjoin.com/automation/runbooks/runbook-logs/runbook-job-details.md): View RealmJoin runbook job metadata, real-time console output, and details from Azure Automation jobs.
- [Runbook Naming Conventions](https://docs.realmjoin.com/automation/runbooks/naming-conventions.md): RealmJoin runbook naming conventions: how context and category map shared repository runbook names into Azure Automation and the portal.
- [Runbook Parameters](https://docs.realmjoin.com/automation/runbooks/runbooks.md): RealmJoin runbook parameters such as TenantID and SubscriptionID that connect to Azure Automation and enable process automation.
- [Runbook Permissions](https://docs.realmjoin.com/automation/runbooks/runbook-permissions.md): How to grant/deny access to certain runbooks.
- [Hybrid Runbook Worker](https://docs.realmjoin.com/automation/runbooks/hybrid-runbook-worker.md): Run RealmJoin runbooks on a Hybrid Runbook Worker so they can reach on-premises and private-network resources that the Azure cloud cannot.
- [Runbook References](https://docs.realmjoin.com/automation/runbooks/runbook-references.md)
- [Overview](https://docs.realmjoin.com/automation/runbooks/runbook-references/overview.md)
- [Device Runbooks](https://docs.realmjoin.com/automation/runbooks/runbook-references/device.md)
- [AVD](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/avd.md)
- [Restart Host](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/avd/restart-host.md): Restart this AVD session host and return it to service
- [Toggle Drain Mode](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/avd/toggle-drain-mode.md): Enable or disable drain mode on this AVD session host
- [General](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general.md)
- [Assign Groups By Template](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/assign-groups-by-template.md): Add this device to a predefined set of groups
- [Change Grouptag](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/change-grouptag.md): Assign a new Autopilot group tag to this device
- [Check Device Compliance](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/check-device-compliance.md): Check the Intune compliance status of this device
- [Check Updatable Assets](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/check-updatable-assets.md): Check whether this device is enrolled in Windows Update for Business
- [Enroll Updatable Assets](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/enroll-updatable-assets.md): Enroll this device in Windows Update for Business
- [Outphase Device](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/outphase-device.md): Wipe this Windows device and clean up Intune, Autopilot and Entra ID
- [Remove Primary User](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/remove-primary-user.md): Remove the primary user from this device
- [Rename Device](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/rename-device.md): Rename this device in Intune and Autopilot
- [Set Primary User](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/set-primary-user.md): Set a new primary user on this device
- [Unenroll Updatable Assets](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/unenroll-updatable-assets.md): Unenroll this device from Windows Update for Business
- [Wipe Device](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/wipe-device.md): Wipe this Windows or macOS device and clean up its records
- [Wipe Managed App Data](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/wipe-managed-app-data.md): Remove company app data from this MAM-managed device
- [Security](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security.md)
- [Check Defender Status](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/check-defender-status.md): Check this device in Entra ID and Defender for Endpoint
- [Enable Or Disable Device](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/enable-or-disable-device.md): Enable or disable this device in Entra ID
- [Enable Or Disable Lost Mode](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/enable-or-disable-lost-mode.md): Enable or disable Lost Mode on this supervised iOS or iPadOS device
- [Isolate Or Release Device](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/isolate-or-release-device.md): Isolate this device from the network or release it
- [Reset Mobile Device Pin](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/reset-mobile-device-pin.md): Reset the passcode of this mobile device
- [Restrict Or Release Code Execution](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/restrict-or-release-code-execution.md): Restrict this device to Microsoft-signed code or lift the restriction
- [Show Bitlocker Recovery Key](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/show-bitlocker-recovery-key.md): Show the BitLocker recovery keys of this device
- [Show Filevault Recovery Key](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/show-filevault-recovery-key.md): Show the FileVault recovery key of this Mac
- [Show Laps Password](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/show-laps-password.md): Show the local admin password of this device
- [Group Runbooks](https://docs.realmjoin.com/automation/runbooks/runbook-references/group.md)
- [Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/devices.md)
- [Check Updatable Assets](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/devices/check-updatable-assets.md): Check Windows Update for Business enrollment of this group's devices
- [Unenroll Updatable Assets Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/devices/unenroll-updatable-assets_scheduled.md): Unenroll this group's devices from Windows Update for Business
- [General](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general.md)
- [Add Or Remove Nested Group](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/add-or-remove-nested-group.md): Add a nested group to this group or remove it
- [Add Or Remove Owner](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/add-or-remove-owner.md): Add an owner to this group or remove one
- [Add Or Remove User](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/add-or-remove-user.md): Add a user to this group or remove one
- [Change Visibility](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/change-visibility.md): Make this group public or private
- [List All Members](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/list-all-members.md): List all members of this group, nested groups included
- [List Owners](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/list-owners.md): List the owners of this group
- [List User Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/list-user-devices.md): List the devices registered to this group's members
- [Remove Group](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/remove-group.md): Delete this group and its Microsoft 365 resources
- [Rename Group](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/rename-group.md): Rename this group or change its description
- [Mail](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/mail.md)
- [Enable Or Disable External Mail](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/mail/enable-or-disable-external-mail.md): Allow or block external senders for this Microsoft 365 group
- [Show Or Hide In Address Book](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/mail/show-or-hide-in-address-book.md): Show or hide this group in the address book
- [Teams](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/teams.md)
- [Archive Team](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/teams/archive-team.md): Archive the team of this group
- [Organization Runbooks](https://docs.realmjoin.com/automation/runbooks/runbook-references/org.md)
- [Applications](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications.md)
- [Add Application Registration](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/add-application-registration.md): Create an application registration in Entra ID
- [Add Gsa Application Registration](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/add-gsa-application-registration.md): Create a Global Secure Access application with its access group
- [Delete Application Registration](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/delete-application-registration.md): Delete an application registration and its service principal
- [Delete Gsa Application Registration](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/delete-gsa-application-registration.md): Delete a Global Secure Access application and its access group
- [Export Enterprise Application Users](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/export-enterprise-application-users.md): Export the owners and users of all enterprise applications
- [List Inactive Enterprise Applications](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/list-inactive-enterprise-applications.md): List enterprise applications with no recent sign-ins
- [Report Application Registration](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/report-application-registration.md): Report all application registrations, including deleted ones
- [Report Expiring Application Credentials Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/report-expiring-application-credentials_scheduled.md): Report expiring client secrets and certificates of app registrations
- [Update Application Registration](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/update-application-registration.md): Update redirect URIs, SAML and sign-in settings of an app registration
- [Collab](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/collab.md)
- [Check Onedrive Status](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/collab/check-onedrive-status.md): Check whether a user's OneDrive is active, locked or deleted
- [List Sharepoint Sitecollection Permission](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/collab/list-sharepoint-sitecollection-permission.md): List the administrators and members of a SharePoint site
- [Report Sharepoint Tenant Storage Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/collab/report-sharepoint-tenant-storage_scheduled.md): Monitor SharePoint storage and alert when limits are exceeded
- [Report Teams Channels Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/collab/report-teams-channels_scheduled.md): List private and shared channels of all teams with their owners
- [Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices.md)
- [Add Autopilot Device](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/add-autopilot-device.md): Register a Windows device in Windows Autopilot
- [Add Device Via Corporate Identifier](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/add-device-via-corporate-identifier.md): Register a device in Intune by its corporate identifier
- [Auto Approve Driver Updates Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/auto-approve-driver-updates_scheduled.md): Approve pending driver updates in Intune driver update policies
- [Cleanup Autopilot Devices Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/cleanup-autopilot-devices_scheduled.md): Remove orphaned and never-enrolled Autopilot registrations
- [Create Endpoint Analytics Baseline](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/create-endpoint-analytics-baseline.md): Create an Endpoint Analytics baseline with a naming schema
- [Dedup Device Names Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/dedup-device-names_scheduled.md): Rename Intune devices that share a display name
- [Delete Stale Devices Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/delete-stale-devices_scheduled.md): Delete Intune devices that have been inactive for too long
- [Get Bitlocker Recovery Key](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/get-bitlocker-recovery-key.md): Look up a BitLocker recovery key by its key ID
- [List Mobile Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/list-mobile-devices.md): List managed mobile devices with inventory and network details
- [Notify Users About Low Diskspace Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/notify-users-about-low-diskspace_scheduled.md): Email users whose devices are running out of disk space
- [Notify Users About Stale Devices Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/notify-users-about-stale-devices_scheduled.md): Email users about devices they have not used for a while
- [Outphase Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/outphase-devices.md): Wipe and clean up several devices at once
- [Rename Devices By Group Tag Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/rename-devices-by-group-tag_scheduled.md): Name Autopilot devices after their group tag and serial number
- [Report Devices Low Diskspace Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-devices-low-diskspace_scheduled.md): Report devices that are running out of disk space
- [Report Devices Without Primary User Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-devices-without-primary-user_scheduled.md): Report Intune devices without a primary user
- [Report Primary User Mismatch Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-primary-user-mismatch_scheduled.md): Compare primary users and logons between Intune and RealmJoin
- [Report Realmjoin Agent Contact Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-realmjoin-agent-contact_scheduled.md): Report devices whose RealmJoin agent stopped reporting
- [Report Stale Devices Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-stale-devices_scheduled.md): Report devices that have been inactive for too long
- [Report Users With More Than 5 Devices Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-users-with-more-than-5-devices_scheduled.md): Report users with more than five registered devices
- [Report Windows Devices Without Autopilot Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-windows-devices-without-autopilot_scheduled.md): Report Windows devices in Entra ID without an Autopilot record
- [Sync Device Serialnumbers To Entraid Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/sync-device-serialnumbers-to-entraid_scheduled.md): Copy Intune serial numbers into an Entra ID extension attribute
- [General](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general.md)
- [Add Devices Of Users To Group Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-devices-of-users-to-group_scheduled.md): Add the devices of a user group's members to a device group
- [Add Management Partner](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-management-partner.md): List or add a Partner Admin Link (PAL) for the tenant
- [Add Microsoft Store App Logos](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-microsoft-store-app-logos.md): Add missing logos to Microsoft Store apps in Intune
- [Add Office365 Group](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-office365-group.md): Create a Microsoft 365 group, optionally with a team
- [Add Or Remove Safelinks Exclusion](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-or-remove-safelinks-exclusion.md): Allow a URL pattern in a Safe Links policy or remove it
- [Add Or Remove Smartscreen Exclusion](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-or-remove-smartscreen-exclusion.md): Allow, warn or block a URL in Defender SmartScreen
- [Add Or Remove Trusted Site](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-or-remove-trusted-site.md): Add a URL to the Intune trusted sites list or remove it
- [Add Primary Users Of Devices To Group Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-primary-users-of-devices-to-group_scheduled.md): Keep a group in sync with the primary users of Intune devices
- [Add Security Group](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-security-group.md): Create a security group in Entra ID
- [Add User](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-user.md): Create a new user account in Entra ID
- [Add Viva Engange Community](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-viva-engange-community.md): Create a Viva Engage community with owners
- [Assign Groups By Template Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/assign-groups-by-template_scheduled.md): Add the users of a group to a predefined set of groups
- [Bulk Delete Devices From Autopilot](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/bulk-delete-devices-from-autopilot.md): Delete several Autopilot registrations by serial number
- [Bulk Retire Devices From Intune](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/bulk-retire-devices-from-intune.md): Retire several Intune devices by serial number
- [Check Aad Sync Status Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/check-aad-sync-status_scheduled.md): Check the last Entra Connect sync and alert when it is off
- [Check Assignments Of Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/check-assignments-of-devices.md): Show which Intune policies and apps target given devices
- [Check Assignments Of Groups](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/check-assignments-of-groups.md): Show which Intune policies and apps target given groups
- [Check Assignments Of Users](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/check-assignments-of-users.md): Show which Intune policies and apps target given users
- [Check Autopilot Serialnumbers](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/check-autopilot-serialnumbers.md): Check which serial numbers are registered in Autopilot
- [Check Device Onboarding Exclusion Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/check-device-onboarding-exclusion_scheduled.md): Keep unenrolled Autopilot devices in a compliance exclusion group
- [Enrolled Devices Report Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/enrolled-devices-report_scheduled.md): Report first-time device enrollments of the last weeks
- [Export All Autopilot Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/export-all-autopilot-devices.md): List or export all Windows Autopilot devices
- [Export All Intune Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/export-all-intune-devices.md): Export all Intune devices with their primary users' usage location
- [Export Cloudpc Usage Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/export-cloudpc-usage_scheduled.md): Write daily Windows 365 usage data to an Azure table
- [Export Non Compliant Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/export-non-compliant-devices.md): Export non-compliant Intune devices with their failing settings
- [Export Policy Report](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/export-policy-report.md): Export Intune and Entra ID policies as a Markdown report
- [Invite External Guest Users](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/invite-external-guest-users.md): Invite an external person as a guest user
- [List All Administrative Template Policies](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/list-all-administrative-template-policies.md): List administrative template policies with their assignments
- [List Group License Assignment Errors](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/list-group-license-assignment-errors.md): List groups whose license assignments have errors
- [Monitor Service Health Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/monitor-service-health_scheduled.md): Alert by email about new Microsoft 365 service health issues
- [Office365 License Report](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/office365-license-report.md): Report Microsoft 365 license usage and availability
- [Report Apple Mdm Cert Expiry Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/report-apple-mdm-cert-expiry_scheduled.md): Alert before Apple MDM certificates and tokens expire
- [Report Intune Enrollment Readiness](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/report-intune-enrollment-readiness.md): Report which users can enroll devices in Intune
- [Report License Assignment Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/report-license-assignment_scheduled.md): Alert when license availability crosses thresholds
- [Report Pim Activations Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/report-pim-activations_scheduled.md): Report the PIM role activations of the last month by email
- [Sync All Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/sync-all-devices.md): Trigger an Intune sync on all Windows devices
- [Sync Apple Tokens](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/sync-apple-tokens.md): Sync Apple enrollment and VPP tokens with Intune
- [Sync Channel Or Group Members Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/sync-channel-or-group-members_scheduled.md): Mirror members between a Teams shared channel and a group
- [Sync Shared Channel Owners Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/sync-shared-channel-owners_scheduled.md): Make a group's members owners of mapped teams and shared channels
- [Mail](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail.md)
- [Add Distribution List](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-distribution-list.md): Create a classic Exchange Online distribution group
- [Add Equipment Mailbox](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-equipment-mailbox.md): Create an equipment mailbox with optional booking delegates
- [Add Mail Contact](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-mail-contact.md): Create a mail contact for an external address
- [Add Or Remove Public Folder](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-or-remove-public-folder.md): Create or remove an Exchange Online public folder
- [Add Or Remove Teams Mailcontact](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-or-remove-teams-mailcontact.md): Give a Teams channel a friendly email address or remove it
- [Add Or Remove Tenant Allow Block List](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-or-remove-tenant-allow-block-list.md): Add or remove a Tenant Allow/Block List entry
- [Add Room Mailbox](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-room-mailbox.md): Create a room mailbox with optional booking delegates
- [Add Shared Mailbox](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-shared-mailbox.md): Create a shared mailbox with optional delegate
- [Hide Mailboxes Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/hide-mailboxes_scheduled.md): Hide or show all Bookings calendars in the address book
- [Set Booking Config](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/set-booking-config.md): Configure the Microsoft Bookings settings of the tenant
- [Phone](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/phone.md)
- [Add Or Remove Call Queue Agents](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/phone/add-or-remove-call-queue-agents.md): Add or remove agents of a Teams call queue
- [Add Or Remove Call Queue Authorized Users](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/phone/add-or-remove-call-queue-authorized-users.md): Add or remove authorized users of a Teams call queue
- [Get Teams Phone Number Assignment](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/phone/get-teams-phone-number-assignment.md): Check whether a phone number is assigned in Microsoft Teams
- [Security](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security.md)
- [Add Defender Indicator](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/add-defender-indicator.md): Add an allow or block indicator to Defender for Endpoint
- [Backup Conditional Access Policies](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/backup-conditional-access-policies.md): Back up all Conditional Access policies to Azure Storage
- [Find Sms Auth Phone Number](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/find-sms-auth-phone-number.md): Find the user who holds an SMS sign-in phone number
- [List Admin Users](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-admin-users.md): List all Entra ID admins and check their MFA methods
- [List Expiring Role Assignments](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-expiring-role-assignments.md): List Entra ID role assignments that expire soon
- [List Inactive Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-inactive-devices.md): List devices with no recent sign-in or Intune sync
- [List Inactive Users](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-inactive-users.md): List users with no recent interactive sign-in
- [List Information Protection Labels](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-information-protection-labels.md): List the sensitivity labels of the tenant with their IDs
- [List Pim Rolegroups Without Owners Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-pim-rolegroups-without-owners_scheduled.md): Alert on PIM role groups that have no owner
- [List Users By Mfa Methods Count](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-users-by-mfa-methods-count.md): List users by how many MFA methods they registered
- [List Vulnerable App Regs](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-vulnerable-app-regs.md): List app registrations possibly affected by CVE-2021-42306
- [Monitor Pending Epm Requests Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/monitor-pending-epm-requests_scheduled.md): Alert by email about pending EPM elevation requests
- [Notify Changed Ca Policies](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/notify-changed-ca-policies.md): Alert by email about Conditional Access policy changes
- [Report Epm Elevation Requests Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/report-epm-elevation-requests_scheduled.md): Report EPM elevation requests by status and age
- [Sync Mfa Secure Users To Group Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/sync-mfa-secure-users-to-group_scheduled.md): Keep a group filled with users who registered a secure MFA method
- [User Runbooks](https://docs.realmjoin.com/automation/runbooks/runbook-references/user.md)
- [AVD](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/avd.md)
- [User Signout](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/avd/user-signout.md): Sign this user out of their AVD sessions
- [Collab](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/collab.md)
- [Pre Provision Onedrive](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/collab/pre-provision-onedrive.md): Pre-provision the OneDrive of a user
- [General](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general.md)
- [Assign Groups By Template](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/assign-groups-by-template.md): Add this user to a predefined set of groups
- [Assign Or Unassign License](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/assign-or-unassign-license.md): Assign or remove a license for this user via a license group
- [Assign Windows365](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/assign-windows365.md): Provision a Windows 365 Cloud PC for this user
- [Check Intune Enrollment Readiness](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/check-intune-enrollment-readiness.md): Check whether this user can enroll devices in Intune
- [List Group Memberships](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/list-group-memberships.md): List the group memberships of this user
- [List Group Ownerships](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/list-group-ownerships.md): List the groups this user owns
- [List Manager](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/list-manager.md): Show the manager of this user
- [Offboard User Permanently](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/offboard-user-permanently.md): Permanently offboard this user
- [Offboard User Temporarily](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/offboard-user-temporarily.md): Temporarily offboard this user
- [Reprovision Windows365](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/reprovision-windows365.md): Reprovision the Windows 365 Cloud PC of this user
- [Resize Windows365](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/resize-windows365.md): Resize the Windows 365 Cloud PC of this user
- [Unassign Windows365](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/unassign-windows365.md): Remove the Windows 365 Cloud PC of this user
- [Mail](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail.md)
- [Add Or Remove Email Address](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/add-or-remove-email-address.md): Add an email address to this user's mailbox or remove one
- [Assign Owa Mailbox Policy](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/assign-owa-mailbox-policy.md): Assign an Outlook on the web policy to this user's mailbox
- [Convert To Shared Mailbox](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/convert-to-shared-mailbox.md): Convert this user's mailbox to a shared mailbox or back
- [Delegate Full Access](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/delegate-full-access.md): Grant or remove full access to this user's mailbox
- [Delegate Send As](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/delegate-send-as.md): Grant or remove Send As permission on this user's mailbox
- [Delegate Send On Behalf](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/delegate-send-on-behalf.md): Grant or remove Send on Behalf permission on this user's mailbox
- [Hide Or Unhide In Addressbook](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/hide-or-unhide-in-addressbook.md): Hide this user's mailbox in the address book or show it
- [List Mailbox Permissions](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/list-mailbox-permissions.md): List who has access to this user's mailbox
- [List Room Mailbox Configuration](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/list-room-mailbox-configuration.md): Show the booking configuration of this room mailbox
- [Manage Archive Mailbox](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/manage-archive-mailbox.md): Enable, disable or check the archive mailbox of this user
- [Remove Mailbox](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/remove-mailbox.md): Permanently delete this shared mailbox, room or Bookings calendar
- [Set Out Of Office](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/set-out-of-office.md): Set or remove automatic replies for this user
- [Set Room Mailbox Configuration](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/set-room-mailbox-configuration.md): Configure the booking rules and booking delegates of this room mailbox
- [Phone](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/phone.md)
- [Disable Teams Phone](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/phone/disable-teams-phone.md): Remove Teams phone number and voice policies from this user
- [Get Teams User Info](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/phone/get-teams-user-info.md): Show the Teams voice setup of this user
- [Grant Teams User Policies](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/phone/grant-teams-user-policies.md): Assign Teams voice and meeting policies to this user
- [Set Teams Permanent Call Forwarding](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/phone/set-teams-permanent-call-forwarding.md): Forward this user's calls immediately or turn forwarding off
- [Set Teams Phone](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/phone/set-teams-phone.md): Assign a phone number and voice policies to this user
- [Security](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security.md)
- [Confirm Or Dismiss Risky User](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/confirm-or-dismiss-risky-user.md): Confirm this user as compromised or dismiss the risk
- [Create Temporary Access Pass](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/create-temporary-access-pass.md): Create a Temporary Access Pass for this user
- [Enable Or Disable Password Expiration](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/enable-or-disable-password-expiration.md): Turn password expiration on or off for this user
- [List Mfa Methods](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/list-mfa-methods.md): List the MFA and authentication methods of this user
- [List Signin Events](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/list-signin-events.md): Show the recent sign-ins of this user and their failures
- [Reset Mfa](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/reset-mfa.md): Remove this user's app, phone, OATH and FIDO2 MFA methods
- [Reset Password](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/reset-password.md): Set a new password for this user
- [Revoke Or Restore Access](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/revoke-or-restore-access.md): Block this user's sign-in and sessions, or restore access
- [Set Or Remove Mobile Phone Mfa](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/set-or-remove-mobile-phone-mfa.md): Set or remove the mobile phone MFA method of this user
- [Userinfo](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/userinfo.md)
- [Rename User](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/userinfo/rename-user.md): Change this user's sign-in name (UPN) and mailbox alias
- [Set Photo](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/userinfo/set-photo.md): Set the profile photo of this user from a URL
- [Update User](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/userinfo/update-user.md): Update profile details, groups and mailbox settings of this user
- [Runbook Report Settings](https://docs.realmjoin.com/automation/runbooks/runbook-report-settings.md): Configure centralized email and storage delivery settings for reporting runbooks.
- [Runbook Scheduling](https://docs.realmjoin.com/automation/runbooks/scheduling.md): Execute Runbooks repeatedly over time
- [Runbook Release Notes](https://docs.realmjoin.com/automation/runbooks/release-notes.md)
- [Remediation Scripts](https://docs.realmjoin.com/automation/remediation-scripts.md): RealmJoin's managed, continuously updated Intune remediation scripts that detect and fix issues on Windows clients.
- [Deploying the Agent](https://docs.realmjoin.com/realmjoin-agent/installation.md): Deploy the RealmJoin Agent to Windows clients with the ready-to-use intunewin package from the Package Store via Intune.
- [Recommended Packages](https://docs.realmjoin.com/realmjoin-agent/recommended-packages.md): Packages we recommend deploying from the Package Store alongside the RealmJoin Agent to get the most out of it.
- [Features](https://docs.realmjoin.com/realmjoin-agent/realmjoin-client.md): Optional RealmJoin Agent features for Windows clients: ESP, app deployment, LAPS, notifications, AnyDesk, and compliance checks.
- [Local Admin Password Solution (LAPS)](https://docs.realmjoin.com/realmjoin-agent/realmjoin-client/local-admin-password-solution-laps.md): RealmJoin LAPS generates strong local account passwords stored in your own Azure Key Vault, audited via Application Insights or Log Analytics.
- [KeyVault](https://docs.realmjoin.com/realmjoin-agent/realmjoin-client/local-admin-password-solution-laps/keyvault.md): Create an Azure Key Vault and access policy to securely store the local account passwords generated by RealmJoin LAPS.
- [Application Insights](https://docs.realmjoin.com/realmjoin-agent/realmjoin-client/local-admin-password-solution-laps/application-insights.md): Create an Azure Application Insights instance for RealmJoin LAPS auditing and send its instrumentation key to Support.
- [Multi-user Shared Devices](https://docs.realmjoin.com/realmjoin-agent/realmjoin-client/multi-user-devices.md): Provision multi-user devices with RealmJoin Agent-based software deployment.
- [RealmJoin ESP](https://docs.realmjoin.com/realmjoin-agent/realmjoin-client/realmjoin-esp.md): RealmJoin ESP shows its own Enrollment Status Page so mandatory installs and configurations finish before the Windows desktop appears.
- [RealmJoin App Notification](https://docs.realmjoin.com/realmjoin-agent/realmjoin-client/deploy-apps.md): RealmJoin Agent app notifications, including the customizable hero image, inform users about package installations.
- [Notifications](https://docs.realmjoin.com/realmjoin-agent/realmjoin-client/showing-notifications.md): Send scheduled, category-based desktop notifications to users from RealmJoin to share information or important issues.
- [Native Choco Runtime](https://docs.realmjoin.com/realmjoin-agent/realmjoin-client/native-choco-runtime.md): The Native Choco Runtime is RealmJoin's own in-process package installation engine that replaces the outdated Chocolatey 0.10.3 binary while staying fully compatible with existing packages.
- [AnyDesk Integration](https://docs.realmjoin.com/realmjoin-agent/realmjoin-client/anydesk-integration.md): AnyDesk integration with RealmJoin grants remote device access and elevates rights via LAPS using per-device IDs instead of shared IDs.
- [AnyDesk configuration](https://docs.realmjoin.com/realmjoin-agent/realmjoin-client/anydesk-integration/customer-tasks.md): AnyDesk configuration for RealmJoin: host the end-user client on a public URL and request the supporter client as a custom package.
- [Advanced Telemetry](https://docs.realmjoin.com/realmjoin-agent/realmjoin-client/advanced-telemetry.md): What the RealmJoin Agent reports about a device by default, what the RealmJoin Telemetry Package adds on top, and where that information appears in the RealmJoin Portal.
- [User Interface](https://docs.realmjoin.com/realmjoin-agent/client-menu.md): Two ways users interact with RealmJoin on their device: the classic RealmJoin Tray and the web-based Self-Service Portal.
- [RealmJoin Tray](https://docs.realmjoin.com/realmjoin-agent/client-menu/realmjoin-tray.md): The RealmJoin Tray menu provides customizable web links and installs or updates software packages from the device.
- [Self Service Portal](https://docs.realmjoin.com/realmjoin-agent/client-menu/self-service-portal.md): The RealmJoin Self-Service Portal lets users manage their devices, software, and identity attributes via Entra ID single sign-on.
- [Settings Overview](https://docs.realmjoin.com/administration-and-settings/settings.md): Overview of RealmJoin Portal settings for customizing the portal and managing features, permissions, and Microsoft Azure resources.
- [General](https://docs.realmjoin.com/administration-and-settings/general.md): General RealmJoin settings, including runbook sync from the public repository and package automation defaults.
- [Roles and Permissions](https://docs.realmjoin.com/administration-and-settings/permission.md): Delegate RealmJoin Portal access to Entra users with pre-defined roles or flexible custom roles.
- [Pre-defined Roles](https://docs.realmjoin.com/administration-and-settings/permission/pre-defined-roles.md): Assign RealmJoin pre-defined roles to Entra groups, optionally via PIM, and review the permissions each role grants.
- [Custom Roles](https://docs.realmjoin.com/administration-and-settings/permission/custom-roles.md): RealmJoin custom roles define granular permissions as JSON and bind to Entra groups or users via the built-in JSON editor.
- [Available Permissions](https://docs.realmjoin.com/administration-and-settings/permission/custom-roles/available-permissions.md): Complete reference of the granular permissions you can assign to RealmJoin custom roles, grouped by area.
- [Implementing Privileged Identity Management (PIM) with RealmJoin Portal](https://docs.realmjoin.com/administration-and-settings/permission/implementing-privileged-identity-management-pim-with-realmjoin-portal.md): Implement Microsoft Entra PIM for Groups with RealmJoin Portal for just-in-time admin access and less persistent privilege.
- [Group Namespaces](https://docs.realmjoin.com/administration-and-settings/groups.md): RealmJoin group namespaces map name prefixes to descriptive titles so it can categorize Microsoft Entra groups like app assignment groups.
- [Workplace Cloud Storage](https://docs.realmjoin.com/administration-and-settings/workplace-cloud-storage.md): RealmJoin Workplace Cloud Storage manages files referenced by Intune policies, such as managed favourites, backgrounds, and Outlook signatures.
- [Self Service Forms](https://docs.realmjoin.com/administration-and-settings/self-service-forms.md): RealmJoin Self Service Forms collect structured data from users, such as incident reports or change requests, once enabled by Support.
- [MSP & Advanced Features](https://docs.realmjoin.com/administration-and-settings/msp-and-advanced-features.md): This section covers advanced features designed for Managed Service Providers (MSPs) and power users who need enhanced control and flexibility within RealmJoin.
- [Third-party integrations](https://docs.realmjoin.com/administration-and-settings/third-party-integrations.md): Overview of third-party services and hardware that integrate with RealmJoin.
- [LaMetric Time](https://docs.realmjoin.com/administration-and-settings/third-party-integrations/lametric-time.md): Display the number of RealmJoin-managed Modern Workplace devices on a physical LaMetric Time device.
- [Connecting Azure Log Analytics Workspace](https://docs.realmjoin.com/monitoring-and-logs/log-analytics.md): Connect an Azure Log Analytics workspace to RealmJoin Portal with the RealmJoin PowerShell module to store audit, operational and runbook logs in your own tenant.
- [Migrating to the Log Ingestion API](https://docs.realmjoin.com/monitoring-and-logs/log-ingestion-api-migration.md): Microsoft is retiring the Log Analytics HTTP Data Collector API. Migrate RealmJoin to the DCR-based Logs Ingestion API with the RealmJoin PowerShell module.
- [Audit Log](https://docs.realmjoin.com/monitoring-and-logs/audit-log.md): The RealmJoin audit log records portal actions such as group membership, runbook jobs, and app management once Log Analytics is configured.
- [RealmJoin API](https://docs.realmjoin.com/dev-reference/realmjoin-api.md): Integrate RealmJoin in your applications and workflows
- [Authentication](https://docs.realmjoin.com/dev-reference/realmjoin-api/authentication.md): Authenticate to the RealmJoin backend API with application credentials in a Base64-encoded HTTP Basic Authorization header.
- [Report Functions](https://docs.realmjoin.com/dev-reference/report-functions.md): Helper functions used by reporting runbooks to deliver results via email or Azure Storage.
- [Send-RjRbReportEmail](https://docs.realmjoin.com/dev-reference/report-functions/send-rjrbreportemail.md): Send branded HTML report emails from Azure Automation runbooks via Microsoft Graph using Markdown content.
- [Get-RjRbBrandingMailParams](https://docs.realmjoin.com/dev-reference/report-functions/get-rjrbbrandingmailparams.md): Resolve the RJReport.Branding tenant settings into ready-to-use parameters for Send-RjRbReportEmail.
- [Publish-RjRbFilesToStorageContainer](https://docs.realmjoin.com/dev-reference/report-functions/publish-rjrbfilestostoragecontainer.md): Upload local files to an Azure Storage container from Azure Automation runbooks and return time-limited SAS download links.
- [Export-RjRbXlsx](https://docs.realmjoin.com/dev-reference/report-functions/export-rjrbxlsx.md): Export objects from Azure Automation runbooks to styled native Excel workbooks (.xlsx) without any external module dependencies.
- [Runbook Output Data](https://docs.realmjoin.com/dev-reference/runbook-output-data.md): Render runbook results as sortable, filterable tables in the RealmJoin Portal, and write runbooks that emit structured objects.
- [Interacting with Runbooks](https://docs.realmjoin.com/dev-reference/interacting-with-runbooks.md): Run runbooks and query their status using RealmJoins API
- [Simulating a Runbook Environment](https://docs.realmjoin.com/dev-reference/simulating-a-runbook-environment.md): To develop new runbooks, you might need to enable RealmJoin.RunbookHelper to authenticate as if you were running inside a Runbook.
- [Local Admin Password Management](https://docs.realmjoin.com/dev-reference/local-admin-password-management.md): RealmJoin manages individualized local admin (LAPS) accounts via API, with passwords stored encrypted in Azure Key Vault.
- [Custom Protocol](https://docs.realmjoin.com/dev-reference/custom-protocol.md): RealmJoin custom protocol (realmjoin:) handlers that trigger sync, install, upgrade, and remote support actions for packages by package ID.
- [Security & Privacy](https://docs.realmjoin.com/security-and-privacy/security-and-privacy.md): RealmJoin information security, data processing, and privacy FAQ, covering data centers, storage, and quality assurance.
- [FAQ](https://docs.realmjoin.com/troubleshooting-and-faq/faq.md): RealmJoin FAQ: maintaining your own software packages and runbooks, expected Azure resource costs, and how RealmJoin integrates with Microsoft Intune.
- [Troubleshooting](https://docs.realmjoin.com/troubleshooting-and-faq/troubleshooting.md): Troubleshooting for common RealmJoin issues, including LAPS account problems and failed package installations.
- [Package Installation Issues](https://docs.realmjoin.com/troubleshooting-and-faq/troubleshooting/package-installation-issues.md): Troubleshooting Guide for failed software package installations
- [Collecting Logfiles](https://docs.realmjoin.com/troubleshooting-and-faq/troubleshooting/package-installation-issues/collecting-logfiles.md): How to easily collect logfiles required for troubleshooting
- [Logfiles Structure](https://docs.realmjoin.com/troubleshooting-and-faq/troubleshooting/package-installation-issues/logfiles-structure.md): Detailed explanation of the different log files collected by RealmJoin
- [Analysing chocolatey.log](https://docs.realmjoin.com/troubleshooting-and-faq/troubleshooting/package-installation-issues/analysing-chocolatey.log.md): This part will focus on how to troubleshoot failed chocolatey package installations.
- [Troubleshooting failed chocolatey packages](https://docs.realmjoin.com/troubleshooting-and-faq/troubleshooting/package-installation-issues/troubleshooting-failed-chocolatey-packages.md): Diagnose failed Chocolatey package installs by understanding the install stages and finding error messages in the logs.
- [Troubleshooting failed craft packages](https://docs.realmjoin.com/troubleshooting-and-faq/troubleshooting/package-installation-issues/troubleshooting-failed-craft-packages.md): Diagnose failed craft package installs by reading tray.log for user scope or realmjoin.log for system scope.
- [Fixes for common issues](https://docs.realmjoin.com/troubleshooting-and-faq/troubleshooting/package-installation-issues/fixes-for-common-issues.md): Targeted fixes for common RealmJoin package installation problems, such as BranchCache errors, for specific scenarios.
- [Intunewin Debugging](https://docs.realmjoin.com/troubleshooting-and-faq/troubleshooting/package-installation-issues/intunewin-debugging.md): Debug intunewin package installs using the RjImeHost, package installer, and Intune Management Extension log files.
- [LAPS Issues](https://docs.realmjoin.com/troubleshooting-and-faq/troubleshooting/laps-issues.md): Troubleshooting common LAPS issues
- [LAPS account passwords cannot be retrieved](https://docs.realmjoin.com/troubleshooting-and-faq/troubleshooting/laps-issues/laps-account-passwords-cannot-be-retrieved.md): Checking Azure Key Vault
- [Requested LAPS Accounts are not being created](https://docs.realmjoin.com/troubleshooting-and-faq/troubleshooting/laps-issues/requested-laps-accounts-are-not-being-created.md): Fix RealmJoin LAPS Supporter Accounts stuck in 'Requested' by logging off on- demand admin sessions or rebooting the device.
- [Offboarding](https://docs.realmjoin.com/troubleshooting-and-faq/offboarding.md): How to offboard RealmJoin from your tenant, covering both Intune-only and full RealmJoin deployments and what tenant deletion means for your data, portal access, and devices.
- [Licensing](https://docs.realmjoin.com/legal/licensing.md): RealmJoin's user-based subscription model: how Intune User License Seats are counted and the minimum number of subscribed users.
- [Microsoft Marketplace](https://docs.realmjoin.com/legal/licensing/microsoft-marketplace.md): Purchase RealmJoin via Microsoft Marketplace: prerequisites, the user-segment pricing model, base fees, and invoicing.
- [Cleverbridge](https://docs.realmjoin.com/legal/licensing/cleverbridge.md)
- [Support & Service Level](https://docs.realmjoin.com/legal/support.md): RealmJoin support eligibility, what support services cover, and how to open a ticket.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
This site has an agentic ask interface you may use to query the documentation dynamically by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.realmjoin.com/index.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.