OpenIntuneBaseline
A community-driven security baseline framework for Microsoft Intune. Provides pre-configured security policies for Windows, Windows 365, and macOS aligned with NCSC, CIS Benchmarks, ACSC Essential Eight, and Microsoft best practices. Importable via IntuneManagement tool or native Intune import.
Security Analysis
3 files scanned on Jun 11, 2026
No security issues detected in the provided code snippets. The OpenIntuneBaseline scripts implement manifest management and standard Intune/Windows management tasks without obfuscated payloads, remote code execution, credential harvesting, data exfiltration, malicious patterns, or hardcoded secrets. Recommendations: ensure script signing and access controls on policy manifests, maintain proper logging and monitor changes to PolicyManifest.json, and review location-related settings for privacy impact within organizational policy.
You might also like
Mace
M.A.C.E. is a native macOS app that lets security teams build, customize, audit, and deploy macOS compliance baselines using the mSCP 2.0 framework without scripting. It offers a visual, three-panel editor with 500+ rules, real-time audit results, and exportable configuration profiles for MDMs such as Intune and Jamf. The tool prioritizes ease of use, cross-MDM readiness, and reproducible baselines.
Cody KeatsIntune Baselines
Intune Baselines provides curated JSON Intune profiles that implement CIS, compliance, and security baselines across Windows, macOS, iOS/iPadOS, Android, and enterprise apps. Built from best practices, Zero Trust concepts, and official CIS benchmarks, these profiles are designed for rapid import into Intune (via Micke-K's IntuneManagement tool). Regularly updated, they support scalable Modern Workplace deployments and testing in diverse environments.
Jan MulderIntune Mac Admins
A community-driven documentation hub for macOS management within Microsoft Intune. Features guides, scripts, tools, and best practices contributed by IT professionals and Microsoft MVPs. Includes a Copilot assistant for macOS management queries and integration with the Open Intune Baseline (OIB) project for curated device management settings.
Ugur Koc +4Intune Make Enrollment User Admin
This Intune-deployable script elevates the enrollment user to a local administrator on Windows devices. Packaged as an .INTUNEWIN app, it is deployed through Microsoft Intune to targeted users with install and uninstall commands to grant or revoke admin rights after enrollment. It uses a requirements check for detection and can be reconfigured later, providing an Autopilot-like capability fully managed by Intune.
Niklas Rast