Damien Van Robaeys {MVP}

Running KQL queries on Microsoft Defender for Endpoint through Azure Automation In this post we will see how to run KQL queries on a Microsoft Defender for Endpoint through Azure Automation, PowerShell. and Graph API

🚀 Running KQL queries on MDE through Azure Automation

This runbook helps you to:
🔍 Automatically execute KQL queries on MDE
🕰️ Configure recurring execution of the script
📨 Send mail with results

www.systanddeploy.com/2024/10/runn...

Disk size usage dashboard: understand what’s taking up space and remediate disk size issues on Intune devices In this post I will show you a dashboard allowing you to easily monitor disk size on your devices and understand what takes place to resolve...

📊 Disk size usage dashboard: understand what’s taking up space and remediate disk size issues

🚀 See disk space usage
🚀 Identify devices with low free disk space
🚀 See bad usage
🚀 See what’s taking up space
🚀 Remediate disk space on a device

www.systanddeploy.com/2026/01/disk...

Collecting Lenovo BIOS Settings in Log Analytics with Intune In this post, we will see how to send BIOS settings for your Lenovo devices on Log Analytics through a remediation script in order to create...

❓ Want to track BIOS settings applied on Lenovo devices
💡 Collect them easily with Intune + Log Analytics

#MEMPowered #MSIntune #Lenovo

www.systanddeploy.com/2025/09/coll...

Create and populate a device group based on user attributes like user department or location In this post I will share a way to populate a devices entra ID group based on user attributes like department or location property.

🚀 Create and populate a device group based on user attributes like user department or location

www.systanddeploy.com/2025/05/crea...

List all Intune remediation scripts containing a specific string in detection or remediation In this post I will show you a script allowing you to search and list all remediation scripts containing a specific string.

🚀 List all Intune remediation scripts containing a specific string in detection or remediation #MEMPowered #MSIntune

www.systanddeploy.com/2025/12/list...

List all Intune remediation scripts containing Invoke-WebRequest without UseBasicParsing (CVE-2025-54100) In this post I will share a script allowing you to find all remediation script (detection or remediation) impacted by the CVE-2025-54100.

❓ Do you have remediation scripts with Invoke-WebRequest cmdlet ?
⚠️ They may not work as expected because of CVE-2025-54100
💡 Use this script to list remediation impacted scripts with

www.systanddeploy.com/2025/12/list...

Lenovo BIOS versions dashboard with Log Analytics and Intune In this post I will show you the new version of the Log Analytics dashboard for Lenovo devices allowing you to see devices with BIOS uptodat...

💡 Want to monitor Lenovo BIOS status on devices ?

This report helps you to get:
✅ Devices that are uptodate or not
✅ Devices that are x versions behind
✅ List of devices with BIOS > 2 years
➕ and more

#MEMPowered #MSIntune #Lenovo

www.systanddeploy.com/2025/12/leno...

Azure Automation modular runbooks: calling as many instances of a child runbook as desired and wait for job execution In this post I will show you how to build intelligent modular runbook allowing you to call as many instances of a child runbook you want by ...

🚀 Azure Automation modular runbooks: calling as many instances of a child runbook as desired and wait for job execution

#MEMPowered #AzureAutomation

www.systanddeploy.com/2025/11/azur...

Identify how users authenticate on Windows (PIN, fingerprint, facial recognition, password) with PowerShell In this post I will show a PowerShell script allowing you to monitor Windows authentication usage meaning if your users use PIN, fingerprint...

💡 Identify how users authenticate on Windows (PIN, fingerprint, facial recognition, password) with PowerShell

www.systanddeploy.com/2025/10/iden...

Entra ID groups inspector: a Log Analytics dashboard for tracking changes to groups In this post I will show you a Log Analytics dashboard allowing you to monitor Entra ID groups. You can see group created or removed, member...

💡 Want to monitor changes that occured on Entra ID groups ?

❓ In this dashboard you can see:
🔍 Groups created/deleted with date and by who
🔍 Members added/removed with date and by who
🔍 Owners added/removed with date and by who

www.systanddeploy.com/2025/05/entr...

Collecting Lenovo BIOS Settings in Log Analytics with Intune In this post, we will see how to send BIOS settings for your Lenovo devices on Log Analytics through a remediation script in order to create...

🚀 Collecting Lenovo BIOS Settings in Log Analytics with Intune #MEMPowered #MSIntune #Lenovo

www.systanddeploy.com/2025/09/coll...

Be notified by mail of Azure Automation runbook with webhook that soon expired In this post I will share an Azure Automation runbook allowing you to be notified by mail about automation runbook webhook that soon expired...

✉️ Be notified by mail of Azure Automation runbook with webhook that soon expired

www.systanddeploy.com/2025/09/be-n...

Automatically populate a device group based on a user group using Azure automation In this post I will share an Azure automation script (runbook) allowing you to automatically populate a device group based on a user group.

💡 Want to automatically populate a device group based on a user group ?
❓ This Azure Automation runbook will:
✅ List all users of a group
✅ For each user, list their computers
✅ Add computers to a devices group

#MEMPowered #MSIntune

www.systanddeploy.com/2024/11/auto...

Lenovo BIOS versions dashboard with Log Analytics In this post I will show you the new version of the Log Analytics dashboard for Lenovo devices allowing you to see devices with BIOS uptodat...

💡 Want to monitor Lenovo BIOS on your devices ?
❓ Here is dashboard allowing you to see:
✅ Devices with old BIOS
✅ Devices with old BIOS by model/severity
✅ Devices with BIOS older than 2 years
➕ and more

#Lenovo #MEMPowered #MSIntune

www.systanddeploy.com/2025/08/leno...

Automatically delete Intune remediation script after its execution In this post I will show you a quick way to remove a Proactive Remediation script after its execution on devices.

💡 Want to automatically delete Intune remediation script after its execution to avoid leaving sensitive information behind ?

www.systanddeploy.com/2022/05/remo...

Remotely run on-demand Intune remediation script from any device In this post I will show you a way to run on-demand Intune remediation script directly from any devices.

🚀 Remotely run on-demand Intune remediation script from any device #MEMPowered #MSIntune

www.systanddeploy.com/2025/08/remo...

🚀 SelfX (Self fix), a tool allowing users to solve issues themselves #MEMPOwered @harjit.bsky.social

www.systanddeploy.com/2025/06/self...

OneDrive and PowerShell: Get size and size on disk In this post I will show you a quick script allowing you to display OneDrive size, and onedrive size on disk.

📁 Use PowerShell to get OneDrive size and size on disk

www.systanddeploy.com/2021/04/oned...

Automatically adding device to Entra ID group through a remediation or platform script In this post I will show you a way to automatically add a device to Entra ID group from a remediation script.

💡 Want to automate the addition of a device in Entra ID group through a remediation/platform script?

#MEMPowered #MSIntune

www.systanddeploy.com/2024/10/auto...

💡 Want to monitor changes that occured on Entra ID groups ?

❓ In this dashboard you can see:
🔍 Groups created/deleted with date and by who
🔍 Members added/removed with date and by who
🔍 Owners added/removed with date and by who

www.systanddeploy.com/2025/05/entr...

Thanks 😁

Entra ID groups inspector: a Log Analytics dashboard for tracking changes to groups In this post I will show you a Log Analytics dashboard allowing you to monitor Entra ID groups. You can see group created or removed, member...

🕵️ Entra ID groups inspector: a Log Analytics dashboard for tracking changes to groups

✅ List groups creation/deletion
✅ Members added to or removed from a group
✅ Owners added to or removed from a group
✅ With date and by who

#MEMPowered @harjit.bsky.social

www.systanddeploy.com/2025/05/entr...

Be notified by mail of users with recent activities without Intune license using Azure Automation In this post I will share an Azure Automation script allowing you to send a notif by mail with list of users with recent activities and with...

✉️ Be notified by mail of users with recent activities without Intune license using Azure Automation

#MEMPowered #MSIntune @harjit.bsky.social

www.systanddeploy.com/2025/05/be-n...

Block keyboard shortcuts on your devices with Intune In this post I will show you how to block some keyboard shortcuts on your devices with Intune.

⌨️ Block keyboard shortcuts on your devices with Intune #MEMPowered #MSIntune

www.systanddeploy.com/2024/07/bloc...

Télécharger des fichiers depuis SharePoint avec PowerShell, Graph API sans module Dans cet article nous verrons comment télécharger des fichiers depuis SharePoint en utilisant uniquement PowerShell et Graph API et le tout sans modules.

📁 Télécharger des fichiers depuis SharePoint avec PowerShell, Graph API sans module

blog.metsys.fr/telecharger-...

Intune, PowerShell and Graph API: best practices In this article, we will cover some best practices to know in order to start automating your actions with Intune, PowerShell and Graph API.

🚀 Intune, PowerShell and Graph API: best practices
#MEMPowered #MSIntune #GraphAPI

www.systanddeploy.com/2024/08/intu...

Create and populate a device group based on user attributes like user department or location In this post I will share a way to populate a devices entra ID group based on user attributes like department or location property.

🚀 Create and populate an Entra ID device group based on user attributes like department or location

#MEMPowered #MSIntune #AzureAutomation @harjit.bsky.social

www.systanddeploy.com/2025/05/crea...

Locating Intune device with PowerShell and Graph API In this post I will show you how to use PowerShell and Graph API to locate an Intune device.

📍 Locating Intune device with PowerShell and Graph API #MEMPowered #MSIntune

www.systanddeploy.com/2021/04/use-...

Be notified by mail of Azure app registrations with secrets or certificates that soon expired using Azure Automation In this post I will share an Azure Automation runbook allowing you to be notified by mail about Azure applications with secrets or certifica...

✉️ Be notified by mail of Azure app registrations with secrets or certificates that soon expired using Azure Automation #MEMPowered #AzureAutomation

www.systanddeploy.com/2024/11/be-n...

⚠️ Devices may be offered a Windows 11 upgrade even if they are not targeted #MEMPowered #MSIntune