Script

What it does Connects to Microsoft Graph and audits all enabled users in the tenant. For each user it checks registered authentication methods and identifies anyone with no MFA method registered — only the default password method. Results are exported to a timestamped CSV at C:\Temp\UsersWithoutMFA_YYYYMMDD_HHMMSS.csv. Useful for: Identifying MFA gaps before enforcing Conditional Access policies Periodic compliance audits on authentication posture Reporting to management on MFA adoption across the tenant Requirements Module: Microsoft.Graph ...

What it does Extracts BitLocker recovery keys from all locally protected volumes and saves them to a timestamped file at C:\Temp\BitLockerKeys_YYYYMMDD_HHMMSS.txt. Useful for: Auditing BitLocker key availability before a device is reprovisioned Manual verification when keys have not escrowed correctly to Entra ID / Intune Local key recovery in offline or unmanaged environments Requirements Windows 10/11 or Windows Server with BitLocker module available PowerShell run as Administrator BitLocker active on at least one volume Source Script available on GitHub: ...