Toast Notification Script
Toast Notification Script is a Windows 10/11 tool designed for Intune Remediations to deliver native toast notifications to the logged-on user. It supports weekly reminders, reboot prompts, and general announcements with configurable scheduling, branding, languages, and snooze/dismiss actions. Includes a detection script, configuration validation, and robust logging to support reliable remote remediation.
Security Analysis
2 files scanned on Jun 11, 2026
The Detect-ToastNotification.ps1 script is largely aligned with expected Intune tooling behavior, but it contains a potential XML External Entity (XXE) risk when loading configurations from URLs. No evidence of remote code execution, credential theft, data exfiltration, or hardcoded secrets in the provided sample. Recommend hardening XML parsing and input validation to reduce XXE exposure.
Swipe to see more
You might also like
AutopilotProfileFunctions
AutopilotProfileFunctions is a PowerShell toolkit for Microsoft Intune that automates the creation and management of Windows Autopilot deployment profiles via the Graph API. It enables bulk profile generation (including language, deployment mode, join type, and device type), assigns profiles to regional dynamic groups, and supports CSV-based mass provisioning with customizable device naming templates. The result is scalable, repeatable Autopilot setup across global populations with minimal manual effort.
Amir Joseph SayesEAM-AutoUpdater
EAM-AutoUpdater is a PowerShell-based automation tool for Microsoft Intune Enterprise Application Management (EAM) that detects available updates in the EAM catalog and automatically deploys new app versions. It migrates assignments, metadata, and Enrollment Status Page (ESP) configurations to the new version, handles supersedence by keeping only the latest two versions, and supports update rings, custom command-line parameters, app exclusions, and Teams notifications; it runs as an Azure Automation runbook with a managed identity or interactively for testing.
Janic VerboonIntune Adaptive Engine
The Intune Adaptive Engine is a PowerShell automation tool that keeps Entra ID group membership in sync with live Intune device inventory through YAML-driven rules. It queries Graph API for Intune devices and detectedApps, evaluates per-rule conditions, and performs the minimal add/remove actions to keep groups in sync—no agents, no P1/P2 licensing, and no custom code; WhatIf/dry-run, per-rule dry runs, auto group creation, platform filtering, and CI/CD-ready rule sets are supported.
Niklas BruhnIntuneAppAssigner
IntuneAppAssigner is a PowerShell tool that enables bulk assignment of mobile apps in Microsoft Intune. It provides an interactive interface to select apps, choose assignment mode (replace, add, or review), set installation intent (Required, Available, Uninstall), and pick target groups (All users, All devices, or Entra ID groups). It also supports assignment filters and, for Android/iOS, App Config profiles (COPE/BYOD). Public Preview status is noted.
Nick Benton