User diagnostics
Run local diagnostics without local administrator rights to review device registration state, Hybrid Join signals, Intune enrollment evidence, PRT status, and the support context needed before any repair action.
Tool Detail
SmartM365 Device Registration Tool
Standalone local diagnostics for Microsoft Entra device registration and Hybrid Join support, with a User mode for evidence review, guarded Admin actions, and support-ready outputs.
First public standalone release
Released on Tuesday, July 28, 2026, this standalone package runs diagnostics locally, ships Authenticode-signed PowerShell scripts, and excludes any installer or third-party binaries. Optional support email can send a summary or bundle only when an operator configures it.
Guarded admin actions
Unlock Admin mode only when support needs guarded repair actions such as dsregcmd-based leave or join workflows, removal of stale MDM enrollment traces, triggering Intune auto-enrollment, or starting the Automatic-Device-Join scheduled task.
Support-ready outputs
Export support bundles, keep evidence files local, and package a standalone release that can be reviewed, verified, and launched without a separate installer, Python runtime, or bundled third-party binaries.
Use cases
When this tool fits best
Use SmartM365 Device Registration Tool when one device needs fast local evidence for Entra registration, Hybrid Join, Intune enrollment, or Primary Refresh Token troubleshooting before you escalate to broader repair tooling.
It is designed for support sessions where User mode should stay diagnostic-first, while Admin mode remains available for guarded actions after the device identity, tenant context, and local state have been reviewed.
Security and confidentiality
Local analysis with guarded repair gates
The tool has no automatic telemetry or HTTP upload feature. Diagnostics and generated files are created locally, although Windows registration actions can contact the Microsoft services configured for the device.
Exports and support bundles are not anonymized. They can contain computer, user, domain, device, tenant, enrollment, policy, file-path, and Windows event-log evidence. Review and protect them before sharing through an approved support channel.
If SupportEmail is configured, the default Draft mode opens an Outlook draft. Send mode can transmit the summary or bundle through the current Outlook profile and should be enabled only when direct sending is explicitly intended.
Distribution and updates
Standalone ZIP, no automatic updater
Version 1.0 is a standalone Windows ZIP. The included launchers use Windows PowerShell 5.1 and the WPF GUI requires a Windows desktop session. User diagnostics do not require local administrator rights; Admin repair actions require elevation.
No PowerShell Gallery package is published for this tool, and Install-Module or Update-Module do not apply. To update, download a newer GitHub release when available, verify its SHA-256 value and Authenticode signatures, and extract it to a separate folder before carrying forward a reviewed local configuration.
Quick start
Download, verify, extract, and choose the right mode
1. Download the standalone ZIP package from GitHub Releases.
2. Verify the ZIP against the published SHA-256 file and expected hash 0A897737AB3C5FB2D4C761E55197BA97724AB7F102845DD11A9B404CF808CC26.
3. Extract the complete ZIP to a local folder.
4. Run Start-SmartM365-DeviceRegistration-Tool-User.cmd for the default diagnostic workflow.
5. Use Start-SmartM365-DeviceRegistration-Tool-Admin.cmd only when guarded repair actions are required, and accept the Windows UAC prompt if elevation is needed.
Current source path
GitHub remains the source of truth.
The current GitHub code path is SmartM365/Devices/DeviceRegistrationTool. The public release tag is device-registration-tool-v1.0, the published source commit is ac2e352227d005cc8c97d57da0512f5b3f5340c6, and the repository license is GPL-3.0-only. View source commit.