It will take parameters for number of days, weeks, months, or years that you want to go back in time. It will take that and pull all devices that have not logged into AD since that time and remove them from AD and SCCM. There is also a parameter for search base, which is the OU of AD that you want to look in. It includes all of the same help items as well.

Intune
Restrict Computer to a Windows 11 Version
At some point, you may need to lock a computer to a specific version of Windows 11. This could be because of a compatibility issue with a critical app or device, the need to maintain more




