Intune Drive Mapping Generator
A web-based tool that generates PowerShell scripts for network drive mapping on Intune-managed Windows 10 devices. Converts existing Group Policy drive exports to Intune-compatible scripts, supports security group filtering with nested groups, and enables recurring execution.
Security Analysis
16 files scanned on Jun 11, 2026
Overall, the codebase contains normal admin tooling patterns (Intune/Drive Mapping management) but also notable secure-design concerns: (1) a stealthy execution path using VBScript and transcript logging, (2) a persistence mechanism via a scheduled task that can auto-run at user logon, and (3) potential local data exposure through transcripts and LDAP-based group filtering. There are no remote code executions, credential theft, hardcoded secrets, or external data exfiltration detected in these snippets. Review should ensure transparent use of persistence features, proper logging/data protection, and hardened input validation for uploads.
You might also like
OIB Deployer
OIB Deployer automates the deployment of OpenIntuneBaseline configurations within Microsoft Intune, enabling rapid, repeatable rollouts of baseline security policies and device configurations. It supports policy templating, script deployment, and integration with community-provided baseline content, with built-in logging and error reporting for auditability. Ideal for IT admins seeking consistent, scalable endpoint security across devices.
REG2PS
A web-based tool that converts Windows Registry files to PowerShell scripts for Intune remediations. Generates detection scripts to validate registry states and remediation scripts to apply changes. Also available as CLI tool (Reg2CI) for SCCM configuration items.
TenuVault
TenuVault is a safe backup and restore solution for Microsoft Intune configurations. It backs up Intune policies to JSON files, detects configuration drift, and restores by creating new policies with a [Restored] prefix - never overwriting existing ones. It supports multiple export formats (JSON, CSV, HTML), full audit logs, and a read-only backup model with preview mode to ensure non-destructive changes.
Autopilot App Registration Enrollment
A PowerShell script that enrolls devices into Windows Autopilot using Azure App Registration credentials. Works without hybrid Azure AD join or SCCM, enabling unattended deployment via RMM tools. Uses community hardware hash collection module for reliable device registration.
