Intune Remediation Scripts

Remediation Scripts (Intune's Proactive Remediations) pair a detection script with a remediation script and run them on a schedule. The detection script checks for a condition; if it finds a problem, the remediation script fixes it. This is how you keep a setting corrected over time rather than fixing it once.

From Secure > Intune > Device Management > Remediation Scripts you can:

• Import an existing remediation script package from a connected tenant as a reusable template

• Group remediation scripts into baselines

• Deploy a script or baseline with its own schedule and assignments

• Monitor detection and remediation results across devices

The page has two views:

• Remediation Scripts — script packages deployed in the selected tenant

• Templates — your reusable library and baselines

Access. You need the Manage permission on Intune.

Licensing prerequisite. Use of remediations requires Windows license verification to be enabled. Microsoft gates Proactive Remediations behind specific Windows Enterprise / Education licensing (typically Windows 10/11 Enterprise E3 or E5, Windows Virtual Desktop, or Microsoft 365 Business Premium in supported scenarios). If the tenant is not eligible, the deployment will be rejected. Confirm licensing before you build a baseline around this feature.