A web-based tool that generates PowerShell scripts for network drive mapping on Intune-managed Windows 10 devices. Converts existing Group Policy drive exports to Intune-compatible scripts, supports security group filtering with nested groups, and enables recurring execution.
16 files scanned on Sep 20, 2026
The codebase shows two notable security concerns: (1) an XXE risk in XML parsing of user-provided data, and (2) a persistence mechanism in the generated PowerShell script that can be used for logon-time persistence with hidden execution. No credential theft, data exfiltration, or remote code execution patterns were observed in the analyzed code paths. Remediation should include securing XML parsing, and re-evaluating or documenting the endpoint-persistence approach in enterprise deployments.
OIB Deployer automates the deployment of OpenIntuneBaseline configurations within Microsoft Intune, enabling rapid, repeatable rollouts of baseline security policies and device configurations. It supports policy templating, script deployment, and integration with community-provided baseline content, with built-in logging and error reporting for auditability. Ideal for IT admins seeking consistent, scalable endpoint security across devices.
A web-based tool that converts Windows Registry files to PowerShell scripts for Intune remediations. Generates detection scripts to validate registry states and remediation scripts to apply changes. Also available as CLI tool (Reg2CI) for SCCM configuration items.
A PowerShell script that enrolls devices into Windows Autopilot using Azure App Registration credentials. Works without hybrid Azure AD join or SCCM, enabling unattended deployment via RMM tools. Uses community hardware hash collection module for reliable device registration.
AutopilotGroupTagger is a PowerShell-based utility for bulk updating and managing Windows Autopilot Device Group Tags, with optional unblocking of devices. It supports updating tags by group, manufacturer, model, purchase order, and interactive selection, plus exporting data and creating dynamic Entra ID groups. The tool runs with Microsoft Graph authentication and supports PowerShell 7 on Windows/macOS, including a whatIf simulation mode and Community Tool status.