John, in practice there is a lot of nuance with these features that is not immediately apparent with this. For example, just from memory, certain models of Samsung and Blackberry mobile devices will trigger the entire mobile device wipe when only the application wipe is triggered (deleting all their personal contacts, and any family pictures they may have on an enrolled personal device). Fortunately you can target the devices using powershell to filter them out, but you still need to know ahead of time which models are problematic. There are also issues with Intune not actually clearing/wiping devices remotely even when queued to do so. This occurred when the devices were enrolled in hybrid environments (i.e. any regulated industry that requires journaling for regulatory affairs). The best we could come up with in terms of guarantees for this was pushing out a powershell script that would force the TPM to clear its bitlocker keys to protect data/prevent boot up, but obviously that doesn't retire the device or reset it to an OOBE state and prevents boot. Doing this in combination with a USB recovery stick that reimages to stock seemed to work, but the guarantees for data governance are still not technically there since its technically only encrypted until the image reapplies, and controls aren't there to guarantee the end-user does that. We were working with Co-pilot at the time, but it didn't seem to work properly in these areas at all. Trying to walk a end-user through a safe-mode/PE reimaging process remotely over the phone in a global environment is not ideal.

Do you know how to get a PowerShell script to do more than 100 items, if we have a lot of phones / devices that we want to wipe or retire or restart!?

I want to be a system admin/cloud administrator. My organization is using intune. What should I learn from your course? Do I need to learn Azure and intune or is it the same thing?