Security Manager has a connector to Endpoint Manager/InTune that supports automating any function exposed in their API. If you're using InTune to manage devices, you can automate (and schedule) actions to be triggered and then reported out as an audit.