This script uses WMI to retrieve properties needed for a customer to register a device with Windows Autopilot. Note that it is normal for the resulting CSV file to not collect a Windows Product ID (PKID) value since this is not required to register a device. Only the serial number and hardware hash will be populated.

Creates Win32 apps, AAD groups and Proactive Remediations to keep apps updated

Analyze and audit Microsoft Intune policy assignments. Check user, group, and device assignments, simulate group membership changes, search policies and settings, generate HTML reports, and more.

Enables RemoteHelp, grabs the latest installer, packages and deploys including AAD Groups

PowerShell functions for Intune management operations

PowerShell module for Microsoft Defender for Endpoint (MDE).

ConfigMgr healthcheck reporting

Lists all discovered apps with drill-down

A PowerShell module for decrypting, inspecting and testing web.config and application config files in remote and local scenarios without the WebAdministration module.

Backs up Intune and AAD policies to Github then restores from any Commit. Flat file backups. Displays a GUI to select what to backup and which restore point to use

Build and Configure a System Center Configuration Manager site server

Creates a Windows 10/11 ISO using the latest download and auto-injects Autopilot JSON

Synchronises All Intune managed devices

Creates a new Winget repo

Copies any Intune Policy via Microsoft Graph to "Copy of (policy name)". Displays list of policies using GridView to select which to copy. Cross tenant version

Runs the Symantec Endpoint Protection VIE tool against any currently configured drives along with any newly added drives. Config example available on project site.

Microsoft Endpoint Manager Configuration Manager Site Health Assessment Tools.Special thanks to contributions from Chad Simmons and Phil Pritchett

Packages and deploys Teams Machine Wide installer to Intune

The scripts will create a local CSV-file cache, and then add warranty and/or product specifications for every serialnumber that is queried, and store it to the cache. If the serialnumber/model-code does not exist in cache (eg. first time queried), the script will go online and fetch warranty and/or product spec info from Lenovo web-services. In add... More info

Lists users who are at or over device enrollment limit in either AAD or Intune Displays all users in GridView Clicking on a user displays the devices, enrollment/registration date and the date last seen Checks through all Intune policies to find the one with the highest priority applicable to user