RKSolutions Intune Anomalies
Open-source checks by Roy Klooster (RKSolutions) that find Intune-managed Windows devices needing attention: missing BitLocker or LAPS backups, non-compliant, inactive or unregistered devices, and Settings Catalog policies that use deprecated settings.
8 checks: 2 High, 3 Medium, 3 Low.
| ID | Title | Severity | Product |
|---|---|---|---|
| MP.RKS.IA.1001 | Windows devices are BitLocker-encrypted and their recovery key is in Entra ID | High | Intune |
| MP.RKS.IA.1002 | Windows devices back up their local administrator password to Entra ID | High | Intune |
| MP.RKS.IA.1003 | Windows devices are compliant | Medium | Intune |
| MP.RKS.IA.1004 | Windows devices have checked in with Intune recently | Low | Intune |
| MP.RKS.IA.1005 | The primary user of every Windows device is enabled | Medium | Intune |
| MP.RKS.IA.1006 | Windows devices are registered in Windows Autopilot | Low | Intune |
| MP.RKS.IA.1007 | Single-user Autopilot devices are used by one person | Medium | Intune |
| MP.RKS.IA.1008 | Settings Catalog policies use no deprecated settings | Low | Intune |
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.