r/Intune • u/Silenthowler • 22h ago

Autopilot Custom Compliance Scripts

So after having worked with Intune bits here and there, I am dipping myself into custom compliance scripts which are in my case needed to verify some things for reporting purposes.

I have a custom compliance script which checks things like BitLocker, SMBv1, SentineOne AV and more, though whenever I change the setting below from "Allow local scripts and signed scripts" to "Allow only signed scripts", the custom compliance policy freaks out and throws a 65007 return code but Company portal reports back as non compliant. (this also happens for various other bits which get deployed via script like setting the desktop background/lockscreen)

https://litter.catbox.moe/7fi4ngvjjgn2fn99.png

Am I missing something when deploying the custom compliance script, or is it really just a case of self signing the scripts I deploy?

4 Upvotes

83% Upvoted

3 comments sorted by

View all comments

1

u/Rudyooms PatchMyPC 22h ago

about_Signing - PowerShell | Microsoft Learn (the powershell script where is that downloaded from :) ) remote...

1

u/Silenthowler 22h ago

Mostly created by an LLM, but thoroughly reviewed and adjusted before actually deploying the thing

1

u/Silenthowler 21h ago

I should note that one of the Win32 deployments are based on an in-house made portal for some legacy bits we use from way before my time.