Back to all tools
PS ScriptConfiguration

Feature Update Controller

Feature Update Controller is a remediation package for Microsoft Intune that centralizes Windows feature upgrades with configurable setup, scripts, and custom actions. It generates and manages SetupConfig.ini, prestages Script Modules, and configures Custom Actions to tailor upgrade behavior, including post-install and rollback steps. The solution downloads and applies a manifest.json, stages scripts and actions, and supports updating or removing configurations on devices for a consistent upgrade experience.

Works with
WindowsRemediation Scripts
Created by
Nickolaj Andersen
Nickolaj Andersen
GitHub

Security Analysis

5of 6
1 Issue Found

9 files scanned on Jan 8, 2026

Issues Detected
No Malicious Patterns
No known malware techniques
Dynamic execution of modules loaded from registry keys: The script enumerates HKLM:\SOFTWARE\<CompanyName>\FeatureUpdateController\Modules and dot-sources each module script path. This enables executing arbitrary code if registry entries are tampered or point to untrusted scripts. Lacks integrity checks or signature verification.
Passed Checks
No Obfuscated Code
No Remote Execution
No Credential Theft
No Data Exfiltration
No Hardcoded Secrets
AI Analysis

The codebase shows no obfuscated payloads or hardcoded secrets. The primary security concern is dynamic module execution from registry entries (SetupComplete.ps1), which can lead to arbitrary code execution if registry data is compromised. A placeholder company name indicates a configuration issue. A geo-location collection path in Failure.ps1 raises privacy considerations regarding logging of coordinates, with potential exfiltration risk if logs are transmitted externally.

You might also like

PS Script

IntuneFirewallMigration

IntuneFirewallMigration is a public-preview tool that migrates Group Policy and local firewall rules into Intune as Settings Catalog policies. It supports selecting specific firewall profiles (Domain, Private, Public) and importing only inbound or outbound rules, using Microsoft.Graph.Authentication with Invoke-MgGraphRequest. The script disables telemetry, requires Graph permissions (DeviceManagementConfiguration.ReadWrite.All), and works with PowerShell 5 or 7 to modernize firewall management in Intune.

Nick BentonNick Benton
PS Script

PowerShell ADMX wizard

PowerShell ADMX Wizard creates custom ADMX/ADML templates from a CSV of registry keys, enabling Windows policies via Intune. It generates GUID-based templates, adds registry entries (STRING, DWORD, BINARY), and logs progress. After creation, upload the ADM/ADML to Intune as Imported ADMX to apply through a configuration profile.

Niklas RastNiklas Rast
PS Script

Autopilot Branding

A PowerShell-based customization tool packaged as an Intune Win32 app for configuring Windows 10/11 devices during Autopilot deployment. Customizes start menu layout, background/theme, time zone, removes built-in apps, installs OneDrive, configures language packs, and manages Windows features.

Michael NiehausMichael Niehaus
PS Script

RuleForge

A PowerShell utility for capturing, comparing, and exporting Windows Defender firewall rules for Microsoft Intune deployment. Captures baseline rules, compares post-install changes, and exports to JSON for Intune or CSV formats with interactive menu and CLI modes.

Nathan HutchinsonNathan Hutchinson