Reset-FullDevice.ps1

<#
.SYNOPSIS
  Performs Full Device Wipe from AirWatch for a list of SerialNumbers, ImeiNumbers, or MacAddresses
  WARNING!!! This is really best for iOS only. Android Enterprise will work, however because multiple device records can share the same Serial Number, you might not wipe the record you want to if multiples exist.
  macOS requires setting a device pin, which will be covered with a different script.
.DESCRIPTION
  Performs Full Device Wipe from AirWatch for a list of SerialNumbers, ImeiNumbers, or MacAddresses
  WARNING!!! This is really best for iOS only. Android Enterprise will work, however because multiple device records can share the same Serial Number, you might not wipe the record you want to if multiples exist.
  macOS requires setting a device pin, which will be covered with a different script.
.PARAMETER file 
    Path of a CSV file with a list of Serial Numbers.  This is required. 
.PARAMETER fileColumn 
    Column title in CSV file containing SerialNumber values.  This is optional, with a default value of "SerialNumber". 
.PARAMETER searchBy 
    Name of identifier to search file, default is SerialNumber. Options include "SerialNumber", "ImeiNumber", and "MacAddress". 
.INPUTS
  AirWatchConfig.json
  Serials.csv
.OUTPUTS
  NO OUTPUT CURRENTLY:Outputs a CSV log of actions
.NOTES
  Version:        1.8
  Author:         Joshua Clark @MrTechGadget
  Creation Date:  10/02/2018
  Update Date:    01/22/2025
  Site:           https://github.com/MrTechGadget/aw-bulkdevices-script
.EXAMPLE
  .\Reset-FullDevice.ps1 -file "Devices.csv" -fileColumn "SerialNumber" -searchBy "SerialNumber"
#>


[CmdletBinding()] 
Param(
  [Parameter(Mandatory = $True, Position = 0, ValueFromPipeline = $true, HelpMessage = "Path to file listing SerialNumbers.")]
  [string]$file,
	
  [Parameter(HelpMessage = "Name of Id column in file, default is SerialNumber")]
  [string]$fileColumn = "SerialNumber",

  [Parameter(HelpMessage="Name of identifier to search file, default is SerialNumber. Options include SerialNumber, ImeiNumber, and MacAddress")]
  [string]$searchBy = "SerialNumber"
)

Import-Module .\PSairwatch.psm1
Write-Log -logstring "$($MyInvocation.Line)"

$Logfile = "$PSScriptRoot\FullDeviceWipe.log"

$list = Read-File $file $fileColumn

Write-Log -logstring "$($MyInvocation.Line)" -logfile $Logfile

$acknowledge = $Host.UI.PromptForChoice(
  "WARNING!!! This is really best for iOS only. Android Enterprise will work, however because multiple device records can share the same Serial Number, you might not wipe the record you want to if multiples exist.
    macOS requires setting a device pin, which will be covered with a different script. \n
    Would you like to proceed?", 
  "",
  @('&Yes', '&No'), 1)

if ($acknowledge -eq 0) {
  $decision = $Host.UI.PromptForChoice(
    "Attention! If you proceed, " + $list.count + " devices will be Device Wiped back to factory settings from AirWatch",
    "",
    @('&Yes', '&No'), 1)

  if ($decision -eq 0) {
    Write-Log -logstring "Wiping $($list.count) devices back to factory settings from AirWatch" -logfile $Logfile
    $json = '{
        "deviceWipe": {
          "disableActivationKey": true
        }
      }'

    foreach ($item in $list) {
      Write-Progress -Activity "Deleting Devices..." -Status "Batch $($list.IndexOf($item)+1) of $($list.Count)" -CurrentOperation "$item" -PercentComplete ((($list.IndexOf($list) + 1) / ($list.Count)) * 100)
      $endpointURL = "mdm/devices/commands/DeviceWipe/device/${searchBy}/${item}"
      try {
        $result = Send-Post -endpoint $endpointURL -body $json -version "application/json;version=2"
        if ($result -ne "") {
          $err = ($Error[0].ErrorDetails.Message | ConvertFrom-Json)
          if ($err.errorCode -in 400, 5100) {
            Write-Warning ("Error Wiping Device: $item : Error " + $err.errorCode + ", might be an Android device, retrying with different parameters")
            $result = Send-Post -endpoint $endpointURL -body "{}" -version "application/json;version=2"
            if ($result -ne "") {
              $err = ($Error[0].ErrorDetails.Message | ConvertFrom-Json)
              Write-Warning ("Error Wiping Device: $item : " + $err.errorCode + " " + $err.message)
              Write-Log -logstring ("Error Wiping Device: $item : " + $err.errorCode + " " + $err.message) -logfile $Logfile
            } else {
              Write-Host "$item Wiped $result"
              Write-Log -logstring "$item Wiped $result" -logfile $Logfile
            }
          } else {
            Write-Warning ("Error Wiping Device: $item : Error", $err.errorCode, $err.message)
            Write-Log -logstring ("Error Wiping Device: $item : Error", $err.errorCode, $err.message) -logfile $Logfile
          }
                
        } else {
          Write-Host "$item Wiped $result"
          Write-Log -logstring "$item Wiped $result" -logfile $Logfile
        }
      }
      catch {
        $err2 = ($Error[0].ErrorDetails.Message)
        Write-Warning "Error Sending Device Wipe Command: $item $err2"
        Write-Log -logstring "Error Sending Device Wipe Command: $item $err2" -logfile $Logfile
      }
    }
  } else {
    Write-Host "Deletion Cancelled"
    Write-Log -logstring "Deletion Cancelled" -logfile $Logfile
  }
} else {
  Write-Host "Deletion Cancelled"
  Write-Log -logstring "Deletion Cancelled" -logfile $Logfile
}