IntuneLinuxBaseline
IntuneLinuxBaseline is a modular baseline for Linux devices managed with Microsoft Intune. It delivers custom compliance policies, configuration scripts, and an automated enrollment workflow to establish a consistent, secure Ubuntu posture. The baseline includes an autoinstall ready enrollment, full-disk LUKS encryption, and recurring, idempotent scripts to re-apply settings and maintain compliance.
Security Analysis
12 files scanned on Jul 14, 2026
One potential risk identified: telemetry/privacy modifications that reduce observability. No evidence of obfuscated code, remote code execution, credential theft, data exfiltration, malicious persistence, or hardcoded secrets across the provided Intune Linux baseline scripts.
You might also like
Adobe DC (Computer) ADMX
Adobe DC (Computer) ADMX provides machine-level Group Policy and Intune management templates for Adobe Acrobat DC and Reader DC on Windows. It ships as a combined AdobeDC.admx/ADML pair (plus separate x64 and x86 files) and enables 552 policies covering cloud connectors, security hardening, trust, UI, updates, and upsell controls via HKLM. The documentation notes per-architecture deployment, unified installer considerations, and inverted registry values for some bToggle policies, ensuring consistent Enabled/Disabled behavior in GPO and Intune.
Darren MilneAdobe DC (User) ADMX Templates
Per-user Adobe Acrobat DC and Reader DC ADMX/ADML templates for Intune, enabling HKCU policy management on Windows. The v1.10 User bundle includes 501 policies (across Reader and Acrobat), with security hardening, nags reduction, and full documentation to configure per-user preferences via Intune or GPO. It ships AdobeDC_User.admx/adml files and user-scoped policy controls for per-user settings.
Darren MilneDeploy Windows 365
Professional-grade PowerShell script that automates deploying Windows 365 Cloud PC environments in Azure and Microsoft Entra ID. It creates or reuses security groups, applies user/admin settings policies, and provisions Cloud PCs regionally with intelligent Enterprise assignment preservation. It uses a lightweight Microsoft Graph authentication module and includes robust error handling, scalable naming conventions, and license-driven provisioning.
Jon JarvisFixMyADMX
FixMyADMX is a script-based tool that automatically repairs ADMX/ADML templates for Intune administrative templates. It replaces unsupported controls (comboBox) with textBox, injects explainText attributes for policies, and attempts to remove or report on Windows.admx references to improve import reliability. It builds on the approach used in Citrix ADMX cleanup and aims to streamline ADMX ingestion for Intune deployments.
Martin Himken