A PowerShell-based endpoint security and patch compliance assessment tool designed for IT administrators, endpoint engineers, workplace teams, and security professionals.
The tool evaluates the security posture of Windows devices and generates actionable reports to help organizations improve endpoint security, compliance, and operational readiness.
- Microsoft Defender health checks
- Windows Firewall validation
- BitLocker protection verification
- Secure Boot assessment
- TPM readiness validation
- Local account security review
- Local administrator group analysis
- Automatic services health checks
- Windows Update service validation
- Latest installed update detection
- Latest installed KB identification
- Days since last installed update
- Pending reboot detection
- Windows build identification
- Patch compliance assessment
- Security Score (/100)
- Critical findings summary
- Interactive HTML dashboard
- Category-based navigation tabs
- JSON export
- CSV export
Many security assessment scripts focus solely on configuration checks.
Windows Security Baseline Auditor combines:
- Security posture assessment
- Patch compliance validation
- Endpoint operational health
into a single lightweight PowerShell solution.
This makes it particularly useful for:
- Microsoft Intune environments
- Microsoft Configuration Manager (MECM / SCCM)
- Hybrid endpoint management environments
- Security reviews
- Endpoint compliance assessments
- Windows upgrade readiness reviews
- Operational troubleshooting
- Computer identity
- Manufacturer and model
- BIOS serial number
- Operating system details
- System uptime
- Memory utilization
- Disk capacity and free space
- Microsoft Defender
- Defender signatures
- Windows Firewall
- BitLocker
- Secure Boot
- TPM
- Local Administrators membership
- Enabled local users
- Guest account detection
- Password requirement validation
- Password expiration review
- Automatic services monitoring
- Detection of stopped automatic services
- Windows Update service
- Latest installed KB
- Last patch installation date
- Days since last update
- Pending reboot detection
- Windows build compliance
The generated HTML report includes:
- Security Score
- Compliance Overview
- Findings requiring remediation
- Interactive category tabs
- Detailed audit results
Example sections:
Security Score: 85 / 100
Points to Fix:
- Windows Firewall disabled
- Pending reboot detected
- Defender signatures outdated
Windows-Security-Baseline-Auditor
│
├── Invoke-WindowsSecurityAudit.ps1
│
├── modules
│ ├── Audit.System.psm1
│ ├── Audit.Security.psm1
│ ├── Audit.LocalAccounts.psm1
│ ├── Audit.Services.psm1
│ ├── Audit.WindowsUpdate.psm1
│ └── Report.Html.psm1
│
├── output
│
├── README.md
├── CHANGELOG.md
└── .gitignore
- Windows 10 or Windows 11
- PowerShell 5.1 or later
- Administrative privileges recommended
Some checks require elevated permissions.
Run a standard assessment:
.\Invoke-WindowsSecurityAudit.ps1Generate HTML, JSON and CSV reports:
.\Invoke-WindowsSecurityAudit.ps1 -ExportJson -ExportCsvReports are generated in:
.\output
The tool calculates a Security Score out of 100.
Current scoring model:
| Finding Type | Impact |
|---|---|
| Critical | -15 |
| Warning | -5 |
| Error | -10 |
Example:
Security Score: 78 / 100
- Installed software inventory
- Unsupported software detection
- End-of-life software review
- Network configuration audit
- DNS validation
- Connectivity checks
- LAPS validation
- Additional local security policy checks
- Intune readiness assessment
- Secure Boot 2023 readiness validation
- Multi-device reporting
- Power BI integration
- Enterprise compliance dashboard
Lijane Consulting helps organizations secure and modernize the digital workplace through expertise in:
- Endpoint Management
- Microsoft Intune
- Microsoft Configuration Manager (MECM)
- PowerShell Automation
- Endpoint Security
- Digital Workplace Transformation
Website: https://lijaneconsulting.com
MIT License