Maester Packs
LowScript packFree

RKSolutions Intune Anomalies

Finds what needs attention in Microsoft Intune before it becomes a problem: devices that miss protection, drift out of compliance or fall out of management, and policies that still rely on outdated settings.

Version
0.1.2
Tests
8
Connectors
0
Published
26 Oct 2026

royklo · royklo.rksolutions-intune-anomalies · 0 stars · Open source · MIT

PowerShell 
Install-MtPack royklo/maester-pack-rksolutions/intune-anomalies

Install only packs from sources you trust. This pack is made by royklo, not by Maester. The site only indexes and scans it: Install-MtPack downloads it straight from github.com/royklo/maester-pack-rksolutions.

maester-packs.lock.json entry 
{  "Id": "royklo.rksolutions-intune-anomalies",  "Source": "royklo/maester-pack-rksolutions/intune-anomalies",  "Version": "0.1.2",  "Commit": "afa83af9cb197e96ba3c2571d8d26a67da3b6c9d",  "Digest": "sha256:2749b38eff701319ff21a3d7f3e93044c819052b2a64a8e3398edd11f56e69fe"}

← All tests

MP.RKS.IA.1002 Windows devices back up their local administrator password to Entra ID

Severity: HighGraph

Every Windows device should back up the password of its local administrator account to Microsoft Entra ID with Windows LAPS, and do it regularly. Without LAPS, local admin passwords tend to be the same on every device, so one stolen password opens them all. A backup that is older than the rotation period means rotation has stalled.

The test lists devices without an Entra-backed LAPS policy, devices with a policy but no password in Entra ID, and devices whose last backup is older than the MaximumBackupAgeDays parameter (60 days by default).

Remediation action

  1. In the Microsoft Intune admin center, go to Endpoint security > Account protection.
  2. Assign a Local admin password solution (Windows LAPS) policy with Backup Directory set to Azure AD only.
  3. For a device with a policy but no backup, check in the device's Device configuration status why the policy fails, and sync the device.

Related links

%TestResult%