Website · LinkedIn · X · YouTube

Intune custom compliance scripts

Type: Collection · Status: Community project

Overview

PowerShell scripts for Microsoft Intune Custom Compliance policies and device configuration checks.

This repository contains Microsoft Intune custom compliance discovery scripts and their matching JSON definitions. Each folder covers one practical Windows compliance check.

Quickstart

1. Open the folder for the check you want to use.
2. Review and test the PowerShell discovery script on a test device.
3. In the Microsoft Intune admin center, create a custom compliance policy.
4. Upload the .ps1 discovery script and import the matching .json definition.
5. Assign the policy to a test group before a wider rollout.

Note: Always review the expected values in the JSON file. Adjust them to match your own compliance requirements.

Available Checks

Check	Purpose
Check-AvEnabled	Confirm that antivirus protection is enabled
Check-FirewallEnabled	Confirm that Windows Firewall is enabled
Check-FreeStorage	Check available storage
Check-IfAppIsInstalled	Detect whether a required application is installed
Check-IfDeviceIsEncrypted	Check device encryption
Check-IfDeviceIsUpToDate	Check the Windows update state
Check-IfUnathorizedLocalAdmins	Detect unexpected local administrators

License

This project is available under the terms in LICENSE.

---

Articles and guides · Repository index