powershell

A collection of my PowerShell scripts

Active Directory

Name	Description
Generate-RandomUser	Generates random user accounts in Active Directory.
Update-DynamicGroup	Automates Active Directory group membership by adding/removing users based on a dynamic attribute filter, with detailed logging.

Microsoft Intune (Compliance)

Name	Description
Check-AttackSurfaceReduction	Script checks status of all Attack Surface Reduction rules on device.
Check-BitLockerOnAllDrives	Script checks if device has all drives encrypted with BitLocker.
Check-MicrosoftDefenderForEndpoint	Script checks for basic Microsoft Defender for Endpoint configuration.
Check-Template	This template was designed for use in Device Compliance in Microsoft Intune.
Check-UnwantedProgramInstalled	Script checks if an unwanted program is installed.
Check-WindowsUpdates	Script checks for outdates updates.

Windows Security

Name	Description
Disable-ExecutionFromDirectory	Script forcing an execution restriction on a directory location (example: %UserProfile%\Downloads)
Test-ASRObfuscatedScript	This is a script that will test "Block execution of potentially obfuscated scripts" Attack Surface Reduction rule in Microsoft Defender for Endpoint.

Miscellaneous

Name	Description
New-Template	A ready-to-use template PowerShell for miscellaneous purposes.