> ## Documentation Index
> Fetch the complete documentation index at: https://docs.truu.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# TruU PowerShell module

> Query TruU product, version, and enrolled-user information from PowerShell to automate checks with Intune, SCCM, or your own scripts.

The TruU PowerShell module lets administrators query a Windows device for TruU information from PowerShell. Use it to check which TruU product is installed, its version, and which users are enrolled, so your scripts can make decisions based on the device's TruU state. For example, you can use it in an Intune remediation, an SCCM compliance check, or an inventory report.

## What's included

The module ships with the TruU installer for both **TruU Windows Authenticator** and **Frontline Access**. You don't need to download or enable anything separately.

<table>
  <colgroup>
    <col width="184" />

    <col width="743" />
  </colgroup>

  <thead>
    <tr>
      <th />

      <th>Details</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>**Install location**</td>
      <td>`C:\Program Files\WindowsPowerShell\Modules\TruU`</td>
    </tr>

    <tr>
      <td>**Scope**</td>
      <td>All users (system level). Any account on the device can use it, including the SYSTEM account that Intune and SCCM run as.</td>
    </tr>

    <tr>
      <td>**PowerShell versions**</td>
      <td>Windows PowerShell 5.1 (built into Windows 10 and 11) and PowerShell 7</td>
    </tr>

    <tr>
      <td>**Architectures**</td>
      <td>x64 and ARM64</td>
    </tr>

    <tr>
      <td>**Updates and removal**</td>
      <td>The module updates when you upgrade TruU and is removed when you uninstall TruU.</td>
    </tr>
  </tbody>
</table>

## Available commands

All commands use the `truu` alias, which is the same for both products.

<table>
  <colgroup>
    <col width="159" />

    <col width="418" />

    <col width="199" />
  </colgroup>

  <thead>
    <tr>
      <th>Command</th>
      <th>Description</th>
      <th>Windows Authenticator</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>`truu -help`</td>
      <td>Lists the available commands.</td>
      <td>Yes</td>
    </tr>

    <tr>
      <td>`truu -version`</td>
      <td>Shows the installed TruU product version.</td>
      <td>Yes</td>
    </tr>

    <tr>
      <td>`truu -producttype`</td>
      <td>Shows which TruU Windows Authenticator in us smartcard or FIDO2</td>
      <td>Yes</td>
    </tr>

    <tr>
      <td>`truu -enrollments`</td>
      <td>Lists the users enrolled on the device.</td>
      <td>Yes</td>
    </tr>
  </tbody>
</table>

### Enrollment details

On Windows Authenticator, `truu -enrollments` returns the following for each enrolled user:

* User principal name (UPN)
* Enrollment date
* Authentication type: Smartcard or FIDO2
* Whether face is enrolled
* Whether fingerprint is enrolled

If no users are enrolled on the device, the command reports that there are no enrollments.

## Use the module

**1. Open PowerShell**

Open Windows PowerShell 5.1 or PowerShell 7 on a device where TruU is installed. The module loads automatically, so you don't need to run `Import-Module`.

**2. Confirm the module is available**

Run the help command to list the commands available for the installed product.

```powershell theme={null}
truu -help
```

**3. Run the commands you need**

```powershell theme={null}
truu -producttype
truu -version
truu -enrollments
```

## Use the module in management scripts

Because the module is installed for all users, scripts that Intune or SCCM run as SYSTEM can call it directly. Check that the module is present before you call it, so the script handles devices where TruU isn't installed.

```powershell theme={null}
if (Get-Module -ListAvailable -Name TruU) {
    truu -producttype
    truu -version
    truu -enrollments
} else {
    Write-Output "TruU PowerShell module not found"
    exit 1
}
```

> [!TIP]
>
> Before you build logic that parses command output, such as checking for enrolled users, run the commands on a test device to confirm the exact output for your TruU version.

## Notes

> [!NOTE]
>
> Users who enrolled before their device was upgraded to a TruU version that includes the module may show an unknown enrollment date or biometric status. Re-enrolling the user updates these values.

***

[Install TruU Windows Authenticator manually](https://docs.truu.ai/docs/manual-install-truu-wa.md)

[Windows Authenticator Uninstallation](https://docs.truu.ai/docs/windows-authenticator-uninstall-guide.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.