Atliso Tools
Tested PowerShell, ready for Intune.
Free scripts for the problems IT admins hit most. Every one is lab-tested, MIT licensed and open on GitHub.
- Tools
- 8
- Licence
- MIT
- Runs on
- PowerShell 5.1+
Intune
Detection and remediation pairs, ready to upload as Intune Remediations.
- Intune Drive Mapper
Maps network drives on Intune-managed devices with retry logic, group filtering and safe re-runs.
- PowerShell 5.1+
- Tested 18 Jul 2026
- MIT
- BitLocker Escrow
Confirms each BitLocker recovery key really reached Entra ID, and forces the backup when it did not.
- PowerShell 5.1+
- Intune ready
- MIT
- BitLocker Protection Fix
Fixes drives that are encrypted but show Protection Off or waiting for activation. Never decrypts.
- PowerShell 5.1+
- Intune ready
- MIT
- Apple Token Audit
Lists the Apple push certificate, ADE and VPP tokens in Intune with expiry dates and the Apple ID behind each. Read-only, exports CSV.
- PowerShell 5.1+
- Read-only, Graph
- MIT
- LAPS Rotation Audit
Checks Windows LAPS is really rotating the local admin password, and forces a rotation when it is not.
- PowerShell 5.1+
- Intune ready
- MIT
Windows
Fixes for Windows 11 changes that break things in the field.
- SMB Health Check
Audits SMB signing and guest access on Windows 11 24H2 and finds the servers the new defaults break.
- PowerShell 5.1+
- Tested 22 Jul 2026
- MIT
- Windows 11 End of Support Audit
Lists every Intune-managed Windows device with its edition and the real end of support date. Read-only, exports CSV.
- PowerShell 5.1+
- Read-only, Graph
- MIT
- Security Log Guard
Catches the Security log lockout before it happens and clears CrashOnAuditFail when it already has.
- PowerShell 5.1+
- Intune ready
- MIT
Atliso Pro
Run these checks across your whole tenant every morning, with the fix one click away.
Suggested reading

Apple MDM push certificate expired in Intune? Check all 3 Apple dates
Intune has three Apple dates that expire every year. Miss the push certificate and every iPhone and Mac re-enrols. Check all three with one free script.

Windows 11 24H2 end of support: find every Intune device on it
Windows 11 24H2 Home and Pro lose support on 13 October 2026, Enterprise in 2027. Same build, two dates. Find the right devices in Intune by edition.

BitLocker Waiting for Activation: Fix Protection Off with PowerShell and Intune
BitLocker waiting for activation or Protection Off on a fully encrypted drive? Detect and fix fleet-wide with a free Intune remediation PowerShell script.
Get free IT tools
Drop your email and we'll send you our PowerShell toolkit. Free scripts for Intune, Windows deployment, and automation. No spam.