IntuneLinuxBaseline
IntuneLinuxBaseline is a modular baseline for Linux devices managed with Microsoft Intune. It delivers custom compliance policies, configuration scripts, and an automated enrollment workflow to establish a consistent, secure Ubuntu posture. The baseline includes an autoinstall ready enrollment, full-disk LUKS encryption, and recurring, idempotent scripts to re-apply settings and maintain compliance.
Security Analysis
13 files scanned on Aug 16, 2026
The Intune Linux baseline includes legitimate onboarding and compliance discovery flows, but notable security concerns exist around the Defender onboarding path. Primary issues are remote installer download without integrity verification (risk of RCE/supply chain compromise), transient handling of a sensitive onboarding blob on disk, and the potential to alter apt sources during onboarding. Telemetry suppression and default org binding also warrant scrutiny for security visibility and tenant scoping. No active credential harvesting or data exfiltration patterns are evident in the provided code.
You might also like
Adobe DC (Computer) ADMX
Adobe DC (Computer) ADMX provides machine-level Group Policy and Intune management templates for Adobe Acrobat DC and Reader DC on Windows. It ships as a combined AdobeDC.admx/ADML pair (plus separate x64 and x86 files) and enables 552 policies covering cloud connectors, security hardening, trust, UI, updates, and upsell controls via HKLM. The documentation notes per-architecture deployment, unified installer considerations, and inverted registry values for some bToggle policies, ensuring consistent Enabled/Disabled behavior in GPO and Intune.
Darren MilneAdobe DC (User) ADMX Templates
Per-user Adobe Acrobat DC and Reader DC ADMX/ADML templates for Intune, enabling HKCU policy management on Windows. The v1.10 User bundle includes 501 policies (across Reader and Acrobat), with security hardening, nags reduction, and full documentation to configure per-user preferences via Intune or GPO. It ships AdobeDC_User.admx/adml files and user-scoped policy controls for per-user settings.
Darren MilneDeploy Windows 365
Professional-grade PowerShell script that automates deploying Windows 365 Cloud PC environments in Azure and Microsoft Entra ID. It creates or reuses security groups, applies user/admin settings policies, and provisions Cloud PCs regionally with intelligent Enterprise assignment preservation. It uses a lightweight Microsoft Graph authentication module and includes robust error handling, scalable naming conventions, and license-driven provisioning.
Jon JarvisFixMyADMX
FixMyADMX is a script-based tool that automatically repairs ADMX/ADML templates for Intune administrative templates. It replaces unsupported controls (comboBox) with textBox, injects explainText attributes for policies, and attempts to remove or report on Windows.admx references to improve import reliability. It builds on the approach used in Citrix ADMX cleanup and aims to streamline ADMX ingestion for Intune deployments.
Martin Himken