ScriptShare

This script fixes the Windows CIS Benchmark check 1.1.4: "Ensure 'Minimum password length' is set to '14 or more character(s)'."

This PowerShell script provides a comprehensive solution for analyzing and reporting user access within Microsoft Exchange Online. It automates the discovery of Distribution Group memberships and Shared Mailbox permissions for specified users, making it an invaluable tool for IT administrators, security teams, and compliance officers.

How It Works The script performs the following operations:

Exports Exchange Online Resources:

Retrieves all Distribution Groups and exports them to a CSV Retrieves all Shared Mailboxes and exports them to a CSV Processes User Aliases:

Imports user aliases from a provided CSV file Resolves each alias to discover all associated email addresses Creates a comprehensive mapping of users and their email identities Analyzes Group Memberships and Mailbox Permissions:

Identifies Distribution Group memberships for each user Discovers Shared Mailbox permissions for each user Provides real-time console feedback with color coding for easy monitoring Signals when matches are found with audio alerts Generates Detailed Reports:

Creates individual CSV reports for each user showing their specific access Produces consolidated reports for organization-wide analysis Exports alias resolution details for verification Why Use This Script Simplifies Auditing: Automates the otherwise tedious process of checking mailbox permissions and group memberships. Migration Planning: Essential for planning user migrations or transitions. Offboarding Assistance: Helps ensure all access is properly transferred when users leave. Security Reviews: Quickly identify who has access to which resources. Compliance Support: Generate documentation for compliance audits. Robust Error Handling: Built-in safeguards to handle exceptions gracefully. Visual Feedback: Clear console output helps monitor progress in real-time. This script saves hours of manual work by automating the discovery and documentation of Exchange Online access permissions, making it an essential tool for any organization managing Microsoft 365 environments.

Download and run 'updatedlANDmbx.ps1' once you have authenticated and loaded exchangeonlinemanagment module for powershell v7+ an example of the input file is found as users.csv

verify the code and use at your own risk.

This script fixes the Windows CIS Benchmark check 18.10.49.1: "Ensure 'Enable news and interests on the taskbar' is set to 'Disabled'."

This PowerShell script detects the presence of VLC Media Player software on the system for Microsoft Intune Win32 app deployment. Returns correct exit codes and STDOUT output for proper Intune detection logic. Supports both 32-bit and 64-bit installations.

Parameters

SearchPaths Array of path patterns where VLC executable should be located. Default: 64-bit and 32-bit Program Files directories

.OUTPUTS System.String Returns detection status ONLY when application is found (for Intune STDOUT requirement)

Example(s)

PS> .\Detect-VLCMediaPlayer-Intune.ps1VLC Media Player found - Version: 3.0.18.0 (64-bit)(Exit code 0 = App detected)PS> .\Detect-VLCMediaPlayer-Intune.ps1(No output, Exit code 1 = App not detected)

Notes

File Name : Detect-VLCMediaPlayer-Intune.ps1 Author : ctrlaltnod.com Prerequisite : PowerShell 3.0 or higher Creation Date : September 16, 2025 Purpose/Change : Intune Win32 app detection with proper STDOUT handling Context : Runs in SYSTEM context via Intune Management Extension

Related Links

• https://ctrlaltnod.com Original Source: DetectionScript-VLC.ps1

This script fixes the Windows CIS Benchmark check 17.5.2: "Ensure 'Audit Group Membership' is set to include 'Success'."

This script fixes the Windows CIS Benchmark check 18.10.62.1: "Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'."

This script fixes the Windows CIS Benchmark check 18.10.17.2: "Ensure 'Enable App Installer Experimental Features' is set to 'Disabled'."

This script fixes the Windows CIS Benchmark check 5.28: "Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'."

This script fixes the Windows CIS Benchmark check 17.3.1: "Ensure 'Audit PNP Activity' is set to include 'Success'."