Invoke-M365TenantAudit

1.0.2

Connects to Microsoft Graph with read-only permissions, checks common
Microsoft 365 / Entra ID security baseline items and writes a
self-contained HTML report.

THIS SCRIPT MAKES NO CHANGES TO YOUR TENANT.

Checks:
- Licensing (Entra ID P1/P2 detection)
- Security Defaults / Conditional Access (MFA for all, legacy auth block,
admin MFA, break-glass exclusions, report-only policies)
- Global Administrator count
- MFA registration (all users + admins)
- Stale / never-used accounts and guests
- User consent to apps, guest invite settings, app creation
- App registration secrets/certificates (expired / expiring)
- Microsoft Secure Score
- Intune compliance policies
- Email DNS: SPF, DMARC, DKIM for each custom domain
- Password expiration policy

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Script -Name Invoke-M365TenantAudit -RequiredVersion 1.0.2

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More