![TL;DR-Sweepy-Icon (1).png TL;DR-Sweepy-Icon (1).png](/t5/image/serverpage/image-id/3025i57CF8C0177E81069/image-dimensions/70x70?v=v2)
This page explains how to use Intune V2 scanning targets to scan Android, iOS (iPhone and iPad) and Windows Phone mobile devices enrolled in Intune.
Lansweeper can be used to scan Android, iOS and Windows Phone mobile devices through Intune. To start scanning mobile devices, you'll first need to configure the appropriate credentials. These Microsoft Cloud Service credentials not only enable the scanning of Intune but also maximize the utilization of Modern Authentication and the Microsoft Graph API through application permissions.
With an Intune V2 scanning target you'll be able to scan Android, iOS (iPhone and iPad) and Windows Phone mobile devices enrolled in Intune.
Prerequisites
To scan mobile devices from Intune with a Microsoft Cloud Services Credential, make sure that:
- You've already set up your Microsoft Cloud Services application.
- You're in possession of your Microsoft Cloud Services application's Application (client) ID, Directory (tenant) ID, and Client secret or certificate. These are obtained when creating the application.
Add permissions to the Microsoft Graph application to scan Intune data
- Open your company's Azure portal and navigate to App registrations.
- Select the app you've already created and select the API permissions tab in the left-hand menu.
![Scanning-O365-with-a-Microsoft-cloud-credential-16.jpg Scanning-O365-with-a-Microsoft-cloud-credential-16.jpg](https://community.lansweeper.com/t5/image/serverpage/image-id/1906iB4667CCE346E0980/image-dimensions/675x225?v=v2)
- On the API permissions page, click Add permission and select Microsoft Graph from the API list.
![Scanning_M365_with_a_Microsoft_cloud_credential_6.jpg Scanning_M365_with_a_Microsoft_cloud_credential_6.jpg](https://community.lansweeper.com/t5/image/serverpage/image-id/1889iF81AE1BB3B1D5065/image-dimensions/675x225?v=v2)
- As we are setting up the Microsoft Graph API to enforce modern authentication, you will need to add Application permissions. Start by selecting Application permissions.
![Scanning_with_a_Microsoft_cloud_credential_6.jpg Scanning_with_a_Microsoft_cloud_credential_6.jpg](https://community.lansweeper.com/t5/image/serverpage/image-id/1890iF88D8812A6CB1550/image-dimensions/675x225?v=v2)
- Add the DeviceManagementManagedDevices.Read.All API permission and select Save. This permission is required to scan your Intune data.
![how-to-scan-intune-V2-devices5.jpg how-to-scan-intune-V2-devices5.jpg](https://community.lansweeper.com/t5/image/serverpage/image-id/1920i03F07F00D82FEE41/image-dimensions/675x225?v=v2)
- Admin consent must still be granted. Select Grant admin consent for <organization> and click Grant in the resulting pop-up.
![how-to-scan-intune-V2-devices6.jpg how-to-scan-intune-V2-devices6.jpg](https://community.lansweeper.com/t5/image/serverpage/image-id/1921iB7D8DE6C7C2DDACA/image-dimensions/675x225?v=v2)
The added permissions should now show Granted for <organization>.
![how-to-scan-intune-V2-devices7.jpg how-to-scan-intune-V2-devices7.jpg](https://community.lansweeper.com/t5/image/serverpage/image-id/1922iF3993A75DE016561/image-dimensions/675x225?v=v2)
Set up Lansweeper to scan your Intune data
Add a Microsoft Cloud Service credential
- In your Lansweeper Cloud environment, go to Scanning > Credential vault > My credentials.
- Select Add new credential.
![Scan intune v2 Cloud 2.png Scan intune v2 Cloud 2.png](/t5/image/serverpage/image-id/2529i41F812A6071454EF/image-dimensions/675x365?v=v2)
- In the pop-up, select Microsoft Cloud Service and continue.
- Fill in the fields:
- Name: name for the credential.
- Directory (tenant) ID and Application (client) ID: these are obtained when creating the Microsoft Cloud Services application.
- Authentication method: select either Client Secret or Certificate Thumbprint.
- Client Secret or Certificate Thumbprint: obtained when creating the MS Graph app in Azure.
![Scan intune v2 Cloud 3.png Scan intune v2 Cloud 3.png](/t5/image/serverpage/image-id/2530i9FB93EC6D313DB4F/image-dimensions/588x675?v=v2)
Add an Intune V2 scanning target
- In your Lansweeper Cloud environment, navigate to Scanning > Targets.
- Select Add scanning target.
![Scan intune v2 Cloud 4.png Scan intune v2 Cloud 4.png](/t5/image/serverpage/image-id/2531i62021B308EA0E959/image-dimensions/675x237?v=v2)
- In the pop-up, choose a scan server and select the Intune V2 scanning target.
- Enter a name and description for the new target, and select a scanning schedule.
- Select a Microsoft Cloud Service credential to assign to the Intune V2 scanning target.
![Scan intune v2 Cloud 5.png Scan intune v2 Cloud 5.png](/t5/image/serverpage/image-id/2532i37AD743043B56254/image-dimensions/675x388?v=v2)
- Select Save and exit, or Save target
.
Was this post helpful? Select Yes or No below!
Did you have a similar issue and a different solution? Or did you not find the information you needed? Create a post in our Community Forum for your fellow IT Heroes!
More questions? Browse our Quick Tech Solutions.