Organization Runbooks

Here you can find all Organization Runbooks along with the available subcategories.

Applications

• Add Application Registration
• Add GSA Application Registration
• Delete Application Registration
• Delete GSA Application Registration
• Export Enterprise Application Users
• List Inactive Enterprise Applications
• Report Application Registration
• Report Expiring Application Credentials (Scheduled)
• Update Application Registration

Collab

• Check Onedrive Status
• List Sharepoint Sitecollection Permission
• Report Sharepoint Tenant Storage (Scheduled)
• Report Teams Channels (Scheduled)

Devices

• Add Autopilot Device
• Add Device Via Corporate Identifier
• Auto Approve Driver Updates (Scheduled)
• Cleanup Autopilot Devices (Scheduled)
• Create Endpoint Analytics Baseline
• Dedup Device Names (Scheduled)
• Delete Stale Devices (Scheduled)
• Get Bitlocker Recovery Key
• List Mobile Devices
• Notify Users About Low Diskspace (Scheduled)
• Notify Users About Stale Devices (Scheduled)
• Outphase Devices
• Rename Devices By Group Tag (Scheduled)
• Report Devices Low Diskspace (Scheduled)
• Report Devices Without Primary User (Scheduled)
• Report Primary User Mismatch (Scheduled)
• Report Realmjoin Agent Contact (Scheduled)
• Report Stale Devices (Scheduled)
• Report Users With More Than 5-Devices (Scheduled)
• Report Windows Devices Without Autopilot (Scheduled)
• Sync Device Serialnumbers To Entraid (Scheduled)

General

• Add Devices Of Users To Group (Scheduled)
• Add Management Partner
• Add Microsoft Store App Logos
• Add Office365 Group
• Add Or Remove Safelinks Exclusion
• Add Or Remove Smartscreen Exclusion
• Add Or Remove Trusted Site
• Add Primary Users Of Devices To Group (Scheduled)
• Add Security Group
• Add User
• Add Viva Engange Community
• Assign Groups By Template (Scheduled)
• Bulk Delete Devices From Autopilot
• Bulk Retire Devices From Intune
• Check Aad Sync Status (Scheduled)
• Check Assignments Of Devices
• Check Assignments Of Groups
• Check Assignments Of Users
• Check Autopilot Serialnumbers
• Check Device Onboarding Exclusion (Scheduled)
• Enrolled Devices Report (Scheduled)
• Export All Autopilot Devices
• Export All Intune Devices
• Export Cloudpc Usage (Scheduled)
• Export Non Compliant Devices
• Export Policy Report
• Invite External Guest Users
• List All Administrative Template Policies
• List Group License Assignment Errors
• Monitor Service Health (Scheduled)
• Office365 License Report
• Report Apple MDM Cert Expiry (Scheduled)
• Report Intune Enrollment Readiness
• Report License Assignment (Scheduled)
• Report Pim Activations (Scheduled)
• Sync All Devices
• Sync Apple Tokens
• Sync Channel Or Group Members (Scheduled)
• Sync Shared Channel Owners (Scheduled)

Mail

• Add Distribution List
• Add Equipment Mailbox
• Add Mail Contact
• Add Or Remove Public Folder
• Add Or Remove Teams Mailcontact
• Add Or Remove Tenant Allow Block List
• Add Room Mailbox
• Add Shared Mailbox
• Hide Mailboxes (Scheduled)
• Set Booking Config

Phone

• Add Or Remove Call Queue Agents
• Add Or Remove Call Queue Authorized Users
• Get Teams Phone Number Assignment

Security

• Add Defender Indicator
• Backup Conditional Access Policies
• Find SMS Auth Phone Number
• List Admin Users
• List Expiring Role Assignments
• List Inactive Devices
• List Inactive Users
• List Information Protection Labels
• List Pim Rolegroups Without Owners (Scheduled)
• List Users By MFA Methods Count
• List Vulnerable App Regs
• Monitor Pending EPM Requests (Scheduled)
• Notify Changed CA Policies
• Report EPM Elevation Requests (Scheduled)
• Sync MFA Secure Users To Group (Scheduled)

Back to Runbook Reference overview