Collect-RemediationLogs
2.0.0
Collects:
- Remediation-related Intune Management Extension logs
- Custom Intune Remediation logs [$customLogPath]
- Custom registry checkpoint paths [$CheckpointPath]
- IME service information
- HealthScripts cache inventory
- Relevant registry information
- DeviceManagement Enterprise Diagnostics event log
- Device and enrollment summary
- Recent I
- Remediation-related Intune Management Extension logs
- Custom Intune Remediation logs [$customLogPath]
- Custom registry checkpoint paths [$CheckpointPath]
- IME service information
- HealthScripts cache inventory
- Relevant registry information
- DeviceManagement Enterprise Diagnostics event log
- Device and enrollment summary
- Recent I
Collects:
- Remediation-related Intune Management Extension logs
- Custom Intune Remediation logs [$customLogPath]
- Custom registry checkpoint paths [$CheckpointPath]
- IME service information
- HealthScripts cache inventory
- Relevant registry information
- DeviceManagement Enterprise Diagnostics event log
- Device and enrollment summary
- Recent IME log entries containing remediation-related terms
Run from an elevated PowerShell session. Creates a timestamped ZIP file
in .\CollectedRemediationLogs relative to the current directory by default.
Use -System to download PsExec, verify its Microsoft signature, and
relaunch this script interactively as SYSTEM. The relaunch preserves
OutputPath, DaysOfEvents, CustomLogPath, and CheckpointPath and automatically
enables IncludeCachedScripts.
If already running as SYSTEM, no download or relaunch occurs; specify
-IncludeCachedScripts explicitly to include cached script contents.
Without -System, cached script contents are excluded. Specifying
-IncludeCachedScripts without -System causes the script to stop.
Show more
- Remediation-related Intune Management Extension logs
- Custom Intune Remediation logs [$customLogPath]
- Custom registry checkpoint paths [$CheckpointPath]
- IME service information
- HealthScripts cache inventory
- Relevant registry information
- DeviceManagement Enterprise Diagnostics event log
- Device and enrollment summary
- Recent IME log entries containing remediation-related terms
Run from an elevated PowerShell session. Creates a timestamped ZIP file
in .\CollectedRemediationLogs relative to the current directory by default.
Use -System to download PsExec, verify its Microsoft signature, and
relaunch this script interactively as SYSTEM. The relaunch preserves
OutputPath, DaysOfEvents, CustomLogPath, and CheckpointPath and automatically
enables IncludeCachedScripts.
If already running as SYSTEM, no download or relaunch occurs; specify
-IncludeCachedScripts explicitly to include cached script contents.
Without -System, cached script contents are excluded. Specifying
-IncludeCachedScripts without -System causes the script to stop.
Installation Options
Owners
Package Details
Author(s)
- Jeff Gilbert
Functions
Write-CollectionLog Export-RegistryTree
Dependencies
This script has no dependencies.
Release Notes
10.13.26 v1.0.3 Initial release.
10.23.26 v2.0.0 Added -System switch to download PsExec and enable cached log collection with required SYSTEM privileges.
FileList
- Collect-RemediationLogs.nuspec
- Collect-RemediationLogs.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 2.0.0 (current version) | 17 | 10/23/2026 |