Atliso Vault
11 tested PowerShell tools, free and MIT licensed. Your email is your key.
Free forever. Unsubscribe any time.
What's inside
Intune Drive Mapper
Maps network drives on Intune-managed devices. Replaces GPO drive map preferences with retry logic, group filtering, and safe idempotent re-runs.
MIT · PowerShell 5.1+ · v1.0.0
Atliso SMB Health Check
Audits SMB signing and guest-auth posture on Windows 11 24H2+ devices. Finds the servers that break under the new defaults, and the devices someone already relaxed. Audit / Bridge / Restore modes.
MIT · PowerShell 5.1+ · v1.0.0
Atliso LAPS Rotation Audit
Confirms Windows LAPS is really rotating the local admin password when Intune shows compliant but the password never changes. Reads the real backup event, forces a rotation when nothing is confirmed. Detection and remediation pair.
MIT · PowerShell 5.1+ · v1.0.1
Atliso BitLocker Escrow
Forces a missing BitLocker recovery key to escrow to Entra ID or Active Directory when Intune reports it backed up but Entra never received it. Detection and remediation pair, Intune remediation ready.
MIT · PowerShell 5.1+ · v1.0.1
Atliso BitLocker Protection Fix
Fixes an OS drive that is fully encrypted but unprotected: BitLocker waiting for activation, Protection Off, or a suspension that never resumed. Adds the missing TPM protector or resumes protection without decrypting. Detection and remediation pair, Intune remediation ready.
MIT · PowerShell 5.1+ · v1.0.0
Atliso Windows 11 End of Support Audit
Lists every Intune-managed Windows device with its edition and the real last day of security updates for that edition. 24H2 Home/Pro ends 13 Oct 2026, Enterprise 12 Oct 2027, LTSC never flagged. Read-only, exports CSV.
MIT · PowerShell 5.1+ · Microsoft Graph · v1.1.0
Atliso Apple Token Audit
Lists the Apple MDM push certificate, every ADE enrolment token and every Apps and Books (VPP) token in Intune, with expiry date, days left and the Apple ID behind each. Flags personal Apple IDs and invalid tokens. Read-only, exports CSV.
MIT · PowerShell 5.1+ · Microsoft Graph · v1.0.0
Atliso Stale Device Audit
Lists Intune devices that stopped checking in, cross-checked against Entra sign-in activity, plus Entra-only devices and duplicate records left by re-enrolment. Flags BitLocker keys, Autopilot and hybrid joined devices before you delete anything. Read-only, exports CSV.
MIT · PowerShell 5.1+ · Microsoft Graph · v1.0.0
Atliso Noncompliant Device Audit
Lists every Intune device that is non-compliant, in its grace period or in error, with the policy and setting that fails and when the grace period ends. Shows what each compliance policy does on failure and whether anyone in IT is told. Read-only, exports CSV.
MIT · PowerShell 5.1+ · Microsoft Graph · v1.0.0
Atliso BitLocker Key Access Audit
Lists every BitLocker recovery key viewed in Entra ID: who read it, when, for which device, and whether the key was rotated since. Flags failed attempts and anyone reading keys for several devices. Read-only, exports CSV.
MIT · PowerShell 5.1+ · Microsoft Graph · v1.0.0
Atliso Security Log Guard
Stops the Windows Security event log filling up and locking non-admins out with the "only admins can log on" error. Clears the lockout and stops it recurring. Detection and remediation pair.
MIT · PowerShell 5.1+ · v1.0.1
AtlisoFor MSPs on Microsoft Intune
Nightly checks on every device in every client tenant for the problems these tools fix, and the tested fix one click away. Every plan starts with a 30-day free trial. See your first results before you add a card, and if you cancel before the trial ends you pay nothing.
See how it works →