Microsoft Intune Remediation Scripts

Build Status

Overview

A comprehensive collection of Microsoft Intune remediation scripts and configurations designed for enterprise endpoint management, device compliance enforcement, and automated system fixes. This repository provides production-ready PowerShell scripts that integrate seamlessly with Intune's remediation framework.

Key Features

• Device Compliance: Automated scripts to detect and fix common compliance issues
• Security Remediation: Security-focused fixes for endpoint vulnerabilities
• Performance Optimization: Scripts to optimize device performance and user experience
• Modern PowerShell: Supports -WhatIf and ShouldProcess for safe testing
• Comprehensive Logging: Standardized logging with Write-Information

Quick Start

1. Browse Examples: Start with docs/examples/intune-import/ for a complete detection/remediation pair
2. Test Scripts: Always run with -WhatIf parameter first to preview changes safely
3. Deploy via Intune: Follow the deployment guide for step-by-step Intune configuration

Canonical Example

Here's a complete detection and remediation pair demonstrating proper structure:

Detection Script (detect-example.ps1)

[CmdletBinding()]
param()

try {
    $condition = Get-SomeCondition
    if ($condition) {
        Write-Information "Issue detected" -InformationAction Continue
        exit 1  # Issue found - remediation needed
    } else {
        Write-Information "No issues found" -InformationAction Continue
        exit 0  # Compliant - no remediation needed
    }
} catch {
    Write-Error "Detection failed: $_"
    exit 1
}

Remediation Script (remediate-example.ps1)

[CmdletBinding(SupportsShouldProcess=$true)]
param()

try {
    if ($PSCmdlet.ShouldProcess("System", "Apply Remediation")) {
        # Apply fix here
        Write-Information "Remediation applied successfully" -InformationAction Continue
        exit 0  # Success
    }
} catch {
    Write-Error "Remediation failed: $_"
    exit 1  # Failure
}

Usage in Intune

1. Create new Remediation in Intune admin center
2. Upload detection script, set to run in system context
3. Upload remediation script, configure schedule
4. Assign to device groups and monitor results

Directory Map

• detection-scripts/: Device and software compliance detection scripts
• remediation-scripts/: Corresponding remediation scripts for detected issues
• security-management/: Security baseline and vulnerability remediation tools
• compliance-reporting/: Compliance status reporting and analytics
• browser-password-management/: Browser security and password policy enforcement
• device-lifecycle/: Device provisioning, maintenance, and retirement scripts
• graph-api-scripts/: Microsoft Graph API integration and reporting tools
• network-automation/: Network connectivity and configuration management
• performance-monitoring/: System performance analysis and optimization
• modern-automation/: PowerShell 7 and cross-platform automation capabilities
• docs/: Comprehensive documentation and deployment guides
• docs/examples/: Sample implementations and import templates

CI/Quality

Our continuous integration pipeline ensures code quality through:

• PowerShell Script Analyzer: Automated linting and best practice validation
• Link Validation: Automated checking of documentation links
• Security Scanning: CodeQL analysis for security vulnerabilities
• Testing: Automated validation of script syntax and functionality

All scripts follow PowerShell best practices:

• Support for -WhatIf and ShouldProcess where applicable
• Standardized error handling and logging
• Proper exit codes for Intune integration
• Security-conscious design (no Set-ExecutionPolicy usage)

Contribution/Support

Contributing

• 📖 Read our Contributing Guidelines
• 🐛 Report issues via GitHub Issues
• 💡 Submit feature requests and improvements
• 🔀 Create pull requests following our guidelines

Support

• 📚 Browse our comprehensive documentation
• 🛠️ Check the troubleshooting guide
• 🔐 Review our security policy
• ⭐ Star this repo if you find it helpful!

Community

• Follow @a-ariff for updates
• Join discussions in our GitHub Discussions
• Share your use cases and improvements

---

License

MIT License - see LICENSE file for details.

Made with ❤️ for the IT community