Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Medium
An administrator needs to deploy a custom PowerShell script to perform a specific configuration task on Windows 11 devices managed by Microsoft Intune. The script should run automatically in the system context and report its execution status back to Intune. Which Intune feature is best suited for this requirement?
- AScripts > Windows PowerShell scripts.
- BWin32 app deployment with a custom installation command.
- CDevice configuration profile using the 'Custom OMA-URI' setting.
- DEndpoint security > Attack surface reduction rules.
Show answer & explanationAnswer & explanation
Correct answer: A. Scripts > Windows PowerShell scripts.
Intune's 'Scripts' feature under 'Devices > Windows' is explicitly designed for deploying and managing PowerShell scripts. It allows scripts to run in the system or user context, and importantly, it provides detailed reporting on script execution status.
Why the other options are wrong
- B. While a Win32 app can execute scripts, it's typically used for deploying full applications or complex packages. For a standalone PowerShell script, the dedicated 'Scripts' feature is more direct and provides better reporting specific to scripts.
- C. Custom OMA-URI settings are for configuring specific CSPs (Configuration Service Providers) and are not designed for running arbitrary PowerShell scripts directly.
- D. Attack surface reduction rules are security features to prevent malware, not for deploying and running custom configuration scripts.
Intune PowerShell Scripts
A Microsoft Intune feature that enables administrators to deploy, execute, and monitor custom PowerShell scripts on managed Windows devices for various configuration and automation tasks.
- Supports running scripts in user or system context.
- Provides detailed reporting on script execution status (success/failure).
- Ideal for custom configurations, automation, and troubleshooting.
Memory trick: Script's Goal: Run, Report, and Intune Controls.