Loading
Other
Verified
Updated Aug 2026IntuneLinuxBaseline
IntuneLinuxBaseline is a modular baseline for Linux devices managed with Microsoft Intune. It delivers custom compliance policies, configuration scripts, and an automated enrollment workflow to establish a consistent, secure Ubuntu posture. The baseline includes an autoinstall ready enrollment, full-disk LUKS encryption, and recurring, idempotent scripts to re-apply settings and maintain compliance.
Security Analysis
6of 6
All Checks Passed
13 files scanned on Sep 20, 2026
No Obfuscated Code
No Remote Execution
No Credential Theft
No Data Exfiltration
No Malicious Patterns
No Hardcoded Secrets
AI Analysis
Key risk areas in the IntuneLinuxBaseline suite are weighted toward remote code execution risk (onboarding/install flow downloads and executes a script from a URL without integrity checks) and potential credential/data exposure around the onboarding blob. There is also a policy-visibility trade-off risk from disabling telemetry, and a minor misconfiguration in cron scheduling. Recommended hardening steps: enforce integrity verification for downloaded installers (signatures or checksums), prefer signed packages from official Microsoft channels, minimize on-disk sensitive material with robust cleanup, document telemetry/visibility policy, and fix cron cadence to match documented intent.
You might also like
Other
Darren Milne
Adobe DC (Computer) ADMX
Adobe DC (Computer) ADMX provides machine-level Group Policy and Intune management templates for Adobe Acrobat DC and Reader DC on Windows. It ships as a combined AdobeDC.admx/ADML pair (plus separate x64 and x86 files) and enables 552 policies covering cloud connectors, security hardening, trust, UI, updates, and upsell controls via HKLM. The documentation notes per-architecture deployment, unified installer considerations, and inverted registry values for some bToggle policies, ensuring consistent Enabled/Disabled behavior in GPO and Intune.
Darren MilneOtherDarren Milne
Adobe DC (User) ADMX Templates
Per-user Adobe Acrobat DC and Reader DC ADMX/ADML templates for Intune, enabling HKCU policy management on Windows. The v1.10 User bundle includes 501 policies (across Reader and Acrobat), with security hardening, nags reduction, and full documentation to configure per-user preferences via Intune or GPO. It ships AdobeDC_User.admx/adml files and user-scoped policy controls for per-user settings.
Darren MilneOther
Jon Jarvis
Deploy Windows 365
Professional-grade PowerShell script that automates deploying Windows 365 Cloud PC environments in Azure and Microsoft Entra ID. It creates or reuses security groups, applies user/admin settings policies, and provisions Cloud PCs regionally with intelligent Enterprise assignment preservation. It uses a lightweight Microsoft Graph authentication module and includes robust error handling, scalable naming conventions, and license-driven provisioning.
Jon JarvisOther
Martin Himken
FixMyADMX
FixMyADMX is a script-based tool that automatically repairs ADMX/ADML templates for Intune administrative templates. It replaces unsupported controls (comboBox) with textBox, injects explainText attributes for policies, and attempts to remove or report on Windows.admx references to improve import reliability. It builds on the approach used in Citrix ADMX cleanup and aims to streamline ADMX ingestion for Intune deployments.
Martin Himken