Custom Compliance Scripts

PowerShell scripts for Microsoft Intune Custom Compliance policies and device configuration checks.

_{Open-Source Collection · PowerShell · Practical by design}

Overview

This repository contains Microsoft Intune custom compliance discovery scripts and their matching JSON definitions. Each folder covers one practical Windows compliance check.

Available Checks

Check	Purpose
Check-AvEnabled	Confirm that antivirus protection is enabled
Check-FirewallEnabled	Confirm that Windows Firewall is enabled
Check-FreeStorage	Check available storage
Check-IfAppIsInstalled	Detect whether a required application is installed
Check-IfDeviceIsEncrypted	Check device encryption
Check-IfDeviceIsUpToDate	Check the Windows update state
Check-IfUnathorizedLocalAdmins	Detect unexpected local administrators

Quickstart

1. Open the folder for the check you want to use.
2. Review and test the PowerShell discovery script on a test device.
3. In the Microsoft Intune admin center, create a custom compliance policy.
4. Upload the .ps1 discovery script and import the matching .json definition.
5. Assign the policy to a test group before a wider rollout.

Note: Always review the expected values in the JSON file. Adjust them to match your own compliance requirements.

License

This project is available under the terms in LICENSE.

---

_{Built and maintained by Jannik Reinhard · Microsoft MVP for Security and AI Platform.}

Support the open-source work

Stay healthy, Cheers Jannik