Atliso Tools
Tested PowerShell, ready for Intune.
Free scripts for the problems IT admins hit most. Every one is lab-tested, MIT licensed and open on GitHub.
- Tools
- 11
- Licence
- MIT
- Runs on
- PowerShell 5.1+
Intune
Detection and remediation pairs, ready to upload as Intune Remediations.
- Intune Drive Mapper
Maps network drives on Intune-managed devices with retry logic, group filtering and safe re-runs.
- v1.0.0 · Updated 19 Jul 2026
- PowerShell 5.1+
- Tested 18 Jul 2026
- MIT
- BitLocker Escrow
Confirms each BitLocker recovery key really reached Entra ID, and forces the backup when it did not.
- v1.0.1 · Updated 19 Oct 2026
- PowerShell 5.1+
- Intune ready
- MIT
- BitLocker Protection Fix
Fixes drives that are encrypted but show Protection Off or waiting for activation. Never decrypts.
- v1.0.0 · Updated 10 Oct 2026
- PowerShell 5.1+
- Intune ready
- MIT
- Apple Token Audit
Lists the Apple push certificate, ADE and VPP tokens in Intune with expiry dates and the Apple ID behind each. Read-only, exports CSV.
- v1.0.0 · Updated 18 Oct 2026
- PowerShell 5.1+
- Read-only, Graph
- MIT
- Stale Device Audit
Finds Intune and Entra devices that stopped checking in, plus duplicate records from re-enrolment. Flags BitLocker keys and Autopilot before you delete. Read-only, exports CSV.
- v1.0.0 · Updated 22 Oct 2026
- PowerShell 5.1+
- Read-only, Graph
- MIT
- Noncompliant Device Audit
Lists Intune devices that are non-compliant or in their grace period, with the failing setting and hours left. Shows who your compliance policies notify. Read-only, exports CSV.
- v1.0.0 · Updated 31 Oct 2026
- PowerShell 5.1+
- Read-only, Graph
- MIT
- BitLocker Key Access Audit
Lists who viewed each BitLocker recovery key in Entra ID, for which device, and whether the key was rotated since. Read-only, exports CSV.
- v1.0.0 · Updated 31 Oct 2026
- PowerShell 5.1+
- Read-only, Graph
- MIT
- LAPS Rotation Audit
Checks Windows LAPS is really rotating the local admin password, and forces a rotation when it is not.
- v1.0.1 · Updated 19 Oct 2026
- PowerShell 5.1+
- Intune ready
- MIT
Windows
Fixes for Windows 11 changes that break things in the field.
- SMB Health Check
Audits SMB signing and guest access on Windows 11 24H2 and finds the servers the new defaults break.
- v1.0.0 · Updated 20 Jul 2026
- PowerShell 5.1+
- Tested 22 Jul 2026
- MIT
- Windows 11 End of Support Audit
Lists every Intune-managed Windows device with its edition and the real end of support date. Read-only, exports CSV.
- v1.1.1 · Updated 4 Nov 2026
- PowerShell 5.1+
- Read-only, Graph
- MIT
- Security Log Guard
Catches the Security log lockout before it happens and clears CrashOnAuditFail when it already has.
- v1.0.1 · Updated 23 Oct 2026
- PowerShell 5.1+
- Intune ready
- MIT
AtlisoFor MSPs on Microsoft Intune
Run these checks on every device in every client tenant, nightly, with the fix one click away.
Suggested reading
Who viewed a BitLocker recovery key? Check the Entra log
Every BitLocker key view is logged in Entra ID for 7 or 30 days, and viewing a key never rotates it. See who read which key, with a free audit script.
Intune non-compliant devices: find them before users call
Intune marks devices non-compliant and tells nobody in IT. How grace periods and email actions work, and a free script that lists every failing device.
Intune stale devices: clean up without losing BitLocker keys
Find Intune and Entra devices that stopped checking in, spot duplicates from re-enrolment and clean up without deleting BitLocker keys. Free script.
Get free IT tools
Drop your email and we'll send you our PowerShell toolkit. Free scripts for Intune, Windows deployment, and automation. No spam.