🚫 Disable Dell SupportAssist

Intune Remediation · Stops and disables Dell SupportAssist services fleet-wide

Test in a pilot group before you point this at the fleet. Detection exits 1 to trigger remediation, 0 to stay put.

Detection Script

Detect active SupportAssist services detection

Exits 1 (non-compliant) to trigger remediation. Exits 0 if clean.

›

# Flags Dell SupportAssist services that are not disabled.
$svc = Get-Service *SupportAssist*, DellClientManagementService -ErrorAction SilentlyContinue |
    Where-Object { $_.Status -eq 'Running' -or $_.StartType -ne 'Disabled' }

if ($svc) {
    Write-Output 'Non-compliant: SupportAssist active'
    exit 1
}

Write-Output 'Compliant'
exit 0

Remediation Script

Stop and disable the services remediation

Runs only when detection exits 1.

›

# Stops and disables every Dell SupportAssist service.
Get-Service *SupportAssist*, DellClientManagementService -ErrorAction SilentlyContinue | ForEach-Object {
    Stop-Service $_.Name -Force -ErrorAction SilentlyContinue
    Set-Service $_.Name -StartupType Disabled
}

Intune Remediation Settings

Run this script using the logged on credentials No

Enforce script signature check No

Run script in 64-bit PowerShell host Yes

Schedule (recommended) Daily