This script performs a read only, Windows Autopatch health assessment. It validates OS servicing branch, telemetry level, Intune enrollment and IME activity, co‑management workloads, Windows Update policy authority, WSUS or registry blockers, required services, network endpoints, and scheduled tasks. It runs safely in SYSTEM or user context and out... More info

This script gathers device information for Autopilot v2 Corp Device Identifier CSV. It retrieves the manufacturer, model, and serial number of the device and exports this information to a CSV file. If no output file is specified, it defaults to a path in the Autopilot directory under the Windows system root.

Create-IntuneRemediation scaffolds a local VS Code Workspace project structure for Microsoft Intune remediation development. It creates a dedicated workspace folder under your Documents directory, sets up a standard scripts folder and scratch testing area, and generates a Visual Studio Code workspace with ready-to-use tasks for creating example fil... More info

This script monitors a specified inbox directory for newly created or renamed ZIP files (typically produced by Microsoft Intune diagnostics). When a matching ZIP is detected, the script automatically: - Extracts the ZIP contents - Collects EVTX files into structured folders - Collects and expands CAB files - Extracts MDM Logs (EVTX and LOG) - Conv... More info

This script is intended for deployment through Microsoft Intune Remediations to collect Intune ODC diagnostic information from managed Windows devices.

Get-EPMInfo.ps1 gathers the information most commonly required when creating, validating, or troubleshooting EPM elevation rules.

Collects: - Remediation-related Intune Management Extension logs - Custom Intune Remediation logs [$customLogPath] - Custom registry checkpoint paths [$CheckpointPath] - IME service information - HealthScripts cache inventory - Relevant registry information - DeviceManagement Enterprise Diagnostics event log - Device and enrollment ... More info

This script performs a comprehensive inventory of Microsoft Intune Role-Based Access Control (RBAC) by querying Microsoft Graph and exporting the results into multiple reporting formats. Intune environments often contain dozens of custom roles, assignments, scope tags, and administrative groups that can be difficult to document and audit manually.... More info

Downloads PsExec, verifies its Microsoft signature, and launches the target script as SYSTEM. If already running as SYSTEM, runs the target script directly. Unrecognized arguments are passed through to the target. If the supplied script path does not exist, this launcher will also look for scripts that have previously been installed and are availab... More info