All free toolsFree tool · Identity
How many old devices are still trusted in your tenant?
List every Entra ID device that hasn’t signed in for 30, 60 or 90 days, filter by operating system, and clean up in bulk with a preview first.
- Entra Stale Devices Cleanup
- Output: Excel report
- Free, no trial or account needed
Check your inbox
The link is on its way
We sent the download link to . It works for 7 days. Can’t find it? Check your junk folder.
While you wait: see Griffin31What it finds
- Devices inactive longer than your threshold, with days since last sign-in
- A breakdown by operating system, trust type and management
- Which stale devices are still enabled
- A log of every disable or delete, if you choose to act
Why it matters
Stale devices clutter the directory, distort compliance reports, and can be abused while they’re still trusted.
How it works
- 01Get the toolLeave your details and we email you the download link. Review the script before you run it.
- 02Run itOpen PowerShell 7 and run stale-devices-cleanup.ps1. Sign in with an admin account when asked.
- 03Open the reportAn Excel workbook with a summary, the full device list and an action log.
- 04Fix what mattersStart with the highest-risk items. Need help? Book a call with our team.
Requirements
- PowerShell 7 (Windows or macOS)
- Microsoft Graph and ImportExcel modules (install automatically)
- Read permissions: Device.Read.All, Directory.Read.All (Device.ReadWrite.All only to disable or delete)
What it can touch
Report-only by default. Disabling or deleting needs a preview and a typed YES.
Griffin31
This tool checks one area. Griffin31 checks your whole tenant.
More than 370 Microsoft 365 security settings, the evidence behind every result, what to fix first, and an email when a setting slips back.
More free tools
Conditional AccessConditional Access Policy AnalyzerScore your Conditional Access policies and find the gaps attackers use.IdentityEntra App Registration AuditFind risky app permissions, expiring credentials and unused apps.Data and collaborationSharePoint Sites AuditFind the sites, OneDrives and Teams shared too widely.