Back to all tools
PS ScriptTroubleshooting

Get-AutopilotDiagnosticsCommunity

A PowerShell diagnostic script for analyzing Windows Autopilot deployments. Provides comprehensive details about Autopilot profile settings, policies, apps, and certificate profiles tracked via Enrollment Status Page, with support for local PC analysis and captured log files.

Works with
WindowsAutopilot
Created by
Andrew Taylor
Andrew Taylor
GitHubDownload

Security Analysis

4of 6
2 Issues Found

50 files scanned on Jul 12, 2026

Issues Detected
No Remote Execution
No download-and-execute patterns
IEX with WebClient download in Powershell Scripts/AVD/avd-box-config-generic.ps1 ([lines: 224](https://github.com/andrew-s-taylor/public/blob/main/Powershell Scripts/AVD/avd-box-config-generic.ps1#L224))
No Data Exfiltration
No suspicious outbound data transfers
Large-scale backup of user data is performed by copying numerous directories (Documents, Music, Signatures, RoamCache, Favourites, Chrome bookmarks, PSTs, Word/Excel/UI templates, Sticky Notes, Start Menu items, etc.) to OneDrive and OneDriveCommercial. This constitutes broad data exfiltration to cloud storage. While intended as backup, it risks exposing highly sensitive data (e.g., PST/Outlook data, RoamCache, email signatures) and raises privacy/data governance concerns. Recommend data minimization, encryption at rest/in transit, strict access controls, and explicit user consent policies.
Passed Checks
No Obfuscated Code
No Credential Theft
No Malicious Patterns
No Hardcoded Secrets
AI Analysis

The code largely implements a broad backup/restore workflow that copies extensive user data to OneDrive locations. While this can be legitimate in managed environments, it triggers significant data exfiltration/privacy concerns due to inclusion of highly sensitive data (PSTs, emails, RoamCache) and involves invisible execution wrappers that can obscure activity. No remote script downloads, credential harvesting, or hardcoded secrets observed. Recommend data minimization, encryption, access controls, user notification, signing/auditing of invisible executables, and alignment with organizational data governance policies.

You might also like

PS Script

Get-IntuneManagementExtensionDiagnostics

A PowerShell script for analyzing Intune Management Extension logs and creating timeline reports. Tracks Win32App deployments, WinGetApp packages, PowerShell scripts, Proactive Remediations, Custom Compliance, and Autopilot ESP phases with HTML reports and integrated LogViewerUI.

Petri PaavolaPetri Paavola
PS Script

Intune Device Details GUI

A PowerShell-based GUI tool for visualizing comprehensive Intune device information. Shows Azure AD group memberships, Intune filter assignments, application and configuration targeting, BitLocker recovery keys, LAPS passwords, Autopilot profiles, and remediation script status with color-coded assignment states.

Petri PaavolaPetri Paavola
PS Script

Endpoint Analytics Remediation Scripts

A community-driven repository of 86+ PowerShell detection and remediation scripts for Microsoft Intune Endpoint Analytics. Includes scripts for system health, security hardening, device management, application management, optimization, and diagnostics.

Jannik ReinhardJannik Reinhard
PS Script

Intune Log Collector

Intune Log Collector is an Azure-based solution that collects logs from Intune-managed devices, including files, directories, and event logs. It deploys a Function App, Storage Account, and Key Vault, with the Remediation script driving log collection per LogsGatherRules.json and uploading a compressed archive to the logs container. Deployments support Azure Template Spec (Bicep/ARM) or direct ARM templates, with optional UI and post-deployment steps.

Nickolaj AndersenNickolaj Andersen