Every script update

• LTSC devices now get their real last day of updates instead of being skipped. Windows 10 Enterprise LTSC 2021 ends on 12 January 2027, so those devices are flagged as ending soon from mid-November 2026. IoT Enterprise LTSC (SKU 191) gets its longer date (2032 for LTSC 2021, 2034 for LTSC 2024). LTSC 2019 runs to 9 January 2029; LTSB 2016 ended on 13 October 2026.
• Adds Windows 11 26H1 (build 28000), the release for new devices: Home and Pro until 14 March 2028, Enterprise and Education until 13 March 2029. These devices showed as Unknown before.
• Dates from Microsoft's Windows release information pages, checked 23 October 2026.

• Never clears the Security log unless the archive succeeded. In 1.0.0 a failed archive (full disk, no rights) was still followed by a clear, which lost the events. Now it stops, logs why and exits 1 so Intune shows the remediation failed.
• Checks the clear and the switch to overwrite as needed too, and exits 1 if either fails.
• PowerShell Gallery metadata (PSScriptInfo), ready for Install-Script Atliso-SecurityLogGuard.

First release. Read-only audit of stale Intune and Entra devices, duplicates from re-enrolment, BitLocker keys and Autopilot. Guide: https://atliso.com/blog/intune-stale-devices-cleanup

Adds PowerShell Gallery metadata (PSScriptInfo) so the script can be installed with Install-Script Atliso-Win11EndOfSupportAudit. No change to what the script does.

Adds PowerShell Gallery metadata (PSScriptInfo) so the script can be installed with Install-Script Atliso-LapsRotationAudit. No change to what the script does.

Adds PowerShell Gallery metadata (PSScriptInfo) so the script can be installed with Install-Script Atliso-BitLockerEscrow. No change to what the script does.

First release. Lists the Apple MDM push certificate, every ADE enrolment token and every Apps and Books (VPP) token in Intune with expiry date, days left and the Apple ID behind each. Notes the 30-day push certificate grace period, flags personal Apple IDs and invalid VPP tokens, exports a CSV and exits 1 when anything needs renewing. Read-only.

Tested: Pester (10 tests, Graph mocked) on Windows PowerShell 5.1 and PowerShell 7; live run against a lab tenant with no Apple setup (push certificate 404, ADE and VPP empty, exit 0).

Guide: https://atliso.com/blog/intune-apple-mdm-push-certificate-expired

Enterprise Evaluation (SKU 72, 84) is now on the Enterprise track and LTSC Evaluation (129, 130) is never flagged. Found on a real Windows 11 Enterprise Evaluation lab device. When Intune reports a SKU number the script doesn't list, it falls back to the edition name, and only says the edition was not reported when it really wasn't.

Initial public release. MIT licensed. Download the zip below or clone the repo. See README for usage and the linked Atliso guide.

Initial public release. MIT licensed. Download the zip below or clone the repo. See README for usage and the linked Atliso guide.

Initial public release. MIT licensed. Download the zip below or clone the repo. See README for usage and the linked Atliso guide.

Initial public release. MIT licensed. Download the zip below or clone the repo. See README for usage and the linked Atliso guide.

Initial public release. MIT licensed. Download the zip below or clone the repo. See README for usage and the linked Atliso guide.

First public release. Audit, Bridge, and Restore modes. See README for Intune deployment.

First public release. Tested on Windows 11 24H2. See README for deployment.