Scripts & Automation

Production-tested PowerShell for Microsoft 365 administration, endpoint management, security compliance, and day-to-day IT operations. Built from real-world MSP and enterprise work.

⚠️ Use at your own risk. All scripts are provided as-is for educational and reference purposes. Test in a non-production environment before deploying. See full disclaimer.

M365 Administration

M365 Tenant Onboarding Automation

Azure Function App and PowerShell pipeline that automates new Microsoft 365 tenant configuration — licenses, groups, Exchange Online settings, and Conditional Access baseline policies. Reduced manual configuration errors by 75% and eliminated repetitive technician steps across tenant onboardings.

Microsoft Teams Install & Uninstall Automation

PowerShell and Bash scripts to standardize Microsoft Teams deployment and removal across Windows and macOS endpoints. Detects existing installs and broken-install states, removes legacy components cleanly, and supports repeatable execution through ConnectWise Automate without user interaction.

🖥

Endpoint Management

Dell BitLocker & TPM Activation Automation

Zero-touch PowerShell framework to programmatically provision TPM and enforce BitLocker encryption on Dell enterprise hardware. Integrated into ConnectWise Automate for mass-remediation across thousands of managed endpoints. Automates 48-digit recovery key generation and escrow. Reduced manual security configuration time by ~90% per machine.

OneDrive Shared Shortcut Audit Tool

Custom PowerShell utility to identify "Add Shortcut to OneDrive" folders that standard file-system queries fail to distinguish from physical directories. Developed a detection algorithm parsing hidden desktop.ini metadata for specific IconResource index values. Supports silent execution and automated reporting. Audits 100 GB+ user profiles in under 60 seconds.

🔐

Security & Compliance

Conditional Access Baseline Deployment

PowerShell scripts to apply a standard Conditional Access policy baseline across Microsoft 365 tenants — MFA enforcement, geo-blocking, legacy authentication blocking, and compliant device requirements. Designed for MSP multi-tenant environments using delegated admin access.

>_

Utilities & Snippets

More scripts coming soon

Additional scripts from daily IT operations, endpoint imaging, patch management, and reporting are being cleaned up and documented. Follow on GitHub for updates.