Tech / IT Support · intermediate
Self-Healing Endpoints with Intune Remediation Scripts
A library of Intune remediation script pairs — detection scripts that find a problem on a device and remediation scripts that fix it automatically — deployed to a test fleet with reporting that shows how many issues were resolved before anyone opened a ticket.
Project overview
Intune Suite capabilities moved into Microsoft 365 E3 and E5 in July 2026, so remediation skills now apply to far more employers than before. Turning recurring tickets into scripts that fix themselves is the single clearest way an IT support tech shows they think like an automation engineer.
Real-world use case
A company’s top five tickets are all the same: stale Teams cache, a missing VPN certificate, a service that stops, low disk space, and a wrong time zone. Each becomes a remediation that runs daily and reports what it fixed.
Tools and technologies
- Microsoft Intune Remediations
- PowerShell
- Endpoint Analytics
- Entra ID
- Windows 11 VMs
Skills you can demonstrate
Endpoint Management, PowerShell Scripting, Proactive Remediation, Fleet Reporting, Troubleshooting Automation
Build roadmap
- Build a test fleet
Three Windows 11 VMs enrolled in a trial Intune tenant. Deliberately break each one in a different way so you have real problems to detect. - Write the first pair
A detection script that checks disk space and a remediation that clears temp files. Follow the exit-code convention exactly and test both locally first. - Deploy and read the report
Create the remediation in Intune, assign it, and force a sync. Read the report and understand each column before adding more scripts. - Build the library
Add four more pairs for the most common ticket types. Keep detection fast and remediation safe to repeat — idempotency matters on a daily schedule. - Add on-demand runs
Trigger a remediation on demand for one device from the admin center, then script the same action in bulk with Graph API. - Report the impact
Pull the results with Graph, build a simple report of detections and fixes per script per day, and write up the tickets each one would have prevented.
Ways to extend the project
Add an on-demand remediation a technician can trigger from a device page, and a Power BI report over Graph API data showing time saved per remediation.
How to showcase your work
- GitHub: The script pairs with a README table of issue, detection logic, remediation action, and safety notes, plus screenshots of the Intune report.
- LinkedIn: Show the Intune remediation report: devices with issues detected, issues fixed, over a week. The numbers speak.
- Resume: Quantify it: "Built and deployed N Intune remediations that automatically resolved recurring endpoint issues across a test fleet."