Step 1
Navigate to Scripts in Intune
Open endpoint.microsoft.com → Devices → Scripts and remediations → Platform scripts → + Add → Windows 10 and later
Step 2
Upload Your Script
Give it a descriptive name, then upload your .ps1 file. Use these recommended settings:
→
Run using logged-on credentials
No — runs as SYSTEM for elevated tasks
→
Enforce script signature check
No — unless your org requires signed scripts
→
Run in 64-bit PowerShell
Yes — avoids 32-bit compatibility issues
Step 3
Assign to Device Group & Create
On the Assignments tab, target the correct device group. Click Create. The script will run on managed devices at the next check-in (usually within 1 hour).
# Check if script ran successfully — look for this log: C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\AgentExecutor.log