Intune Articles

Detection & Remediation 10 min read

PowerShell script comparing expected configuration baseline values against actual device settings with drift highlighted

Detecting Configuration Drift Against Your Baseline with PowerShell

Catch devices that fell out of your Intune baseline: param-driven drift detection plus a check-then-change remediation that only touches listed values.

Detection & Remediation 9 min read

PowerShell script verifying a BitLocker recovery password key protector and escrow to Entra ID

Detecting BitLocker Recovery Key Escrow Problems with PowerShell

A PowerShell pair that finds devices whose OS volume lacks a RecoveryPassword protector and idempotently re-attempts BitLocker key escrow to Entra ID via Intune.

Detection & Remediation 8 min read

PowerShell console reporting BitLocker encryption status for the fixed drives of a Windows device

Detecting BitLocker Encryption Status Across Drives with PowerShell

A read-only PowerShell detection script that reports BitLocker status, encryption percentage, and key protectors for every fixed drive, ready for Intune.

Device Enrollment 9 min read

How to Enroll Linux in Intune: Ubuntu and RHEL with Microsoft's Linux Client

Enroll Ubuntu and RHEL in Intune with Microsoft's Linux client: repo install commands, Company Portal sign-in, conditional access, compliance scripts, real limits.

Detection & Remediation 9 min read

PowerShell detection workflow for Windows Autopilot enrollment readiness on a Windows device

Detecting Windows Autopilot Enrollment Problems with PowerShell

A read-only PowerShell script that checks Entra join state, provisioning artifacts, and Autopilot event log errors to find devices with broken Autopilot provisioning.

Detection & Remediation 9 min read

PowerShell detection of Intune Win32 app installs stuck in the installing state

Detecting Applications Stuck in the Installing State with PowerShell

Detect AgentExecutor.exe processes running far too long and IME installs that never finish, then clear them safely with a gated PowerShell remediation.

Troubleshooting 9 min read

Intune Enrollment Failures: The Complete Troubleshooting Guide

Fix Windows Intune enrollment failures: error codes 0x80180018 through 0x801c0021, MDM diagnostics, dsregcmd, device caps, platform restrictions, and a helpdesk runbook.

Design diagram of Intune app protection policies separating organization data from personal data on a mobile device

Intune 12 min read

Intune App Protection Policy Design Guide for MAM-First Organizations

A field-tested design framework for Intune app protection policies: data protection levels, iOS and Android settings, conditional launch, and a pilot-to-production plan.