Setting an Asset Tag on ThinkPads using Intune Proactive Remediations

Asset Tag Icon

For the unaware, Lenovo provides a Windows Utility to Read and Write Asset ID Information, specifically for ThinkPad. With this utility, you are able to set asset ID data such as an Owner Name, Owner Location, Asset Number and several other pieces of information.

Refer to the ReadMe for all available group names and their associated fields, as well as supported models.

The USERASSETDATA.ASSET_NUMBER is available through WMI by querying the SMBIOSAssetTag field of the Win32_SystemEnclosure class.

This solution will focus on setting:

Asset Tag
Owner Name
Department
Location

Intune Requirements

Device must be enrolled into Endpoint Analytics

Valid licenses for enrolled devices to use Microsoft Endpoint Manager.

Proactive Remediations

Detection/Remediation scripts can be downloaded on my GitHub

Sign-in to the Microsoft Endpoint Manager admin center and navigate to Reports > Endpoint Analytics > Proactive Remediations

Click Create new script package. Provide a Name and description (if necessary)

Create custom script

On the Settings section, upload both the Detection script file and the Remediation script file by browsing to the location where the .ps1 files were saved.

Configure the option to Run script in 64-bit PowerShell to Yes

Create custom script

Assign any scope tags and a group to deploy the script package to. For testing purposes, I set the schedule to run every hour.

A reboot is required before the tag is populated in WMI.

Monitor script package

Check the overview of your detection and remediation status under Reporting > Endpoint Analytics - Proactive remediations. Review the Device status to get details for each device.

Create custom script

Warning

Remember to change the Owner Data variables in the remediation script. The USERASSETDATA.ASSET_NUMBER is based off the UniqueID of the device and is what I decided to use for this scenario.