ps-stuff VS Intune

Alternatively to the base64 option: Write the Mail in Outlook, export it and send with ps: https://github.com/Businesskasper/ps-stuff/blob/main/Misc/SendOutlookExportedMail.ps1 You can use placeholders and replace them with variables.

Poor mans solution: encrypt the secret using a self signed certificate on the server. https://github.com/Businesskasper/ps-stuff/blob/main/Certificates/EncryptAndReadSecrets.ps1 No need for automation products or secret stores if that is all you need.

I used this https://github.com/Businesskasper/ps-stuff/blob/2d290ec9ce7e66f65b04fcbee804b02873278879/Windows/EncryptLocalDrivesWithBitlocker.ps1

I once built something quick for my personal notebook: https://github.com/Businesskasper/ps-stuff/tree/main/Windows/WindowsSetup

Azure Graph APIs with PowerShell. This process is oddly difficult to understand unless you have time to read page after page of Microsoft documentation. For instance I have the Microsoft scripts from https://github.com/MSEndpointMgr/Intune but non-admin account do not have rights to run things like set device primary user. And the guides I find tell me to setup an enterprise application but that changes the query authentication and the scripts no longer work. If you are going to release scripts explain the process to get started using them. I believe using Graph APIs would be amazing, you can not only retrieve information but post to update. The permissions just need to be easier to understand and use.

Here, use this, this is what I use https://github.com/MSEndpointMgr/Intune/blob/master/Security/Enable-BitLockerEncryption.ps1

I used this template Intune/whitelist.xml at master · MSEndpointMgr/Intune · GitHub

Not listed in the official MS docs, but it is mentioned here, here, and in the script that configures IIS from here.

If you want to take a look at a script where some thought was put in to it (unlike mine), take a look here: https://github.com/MSEndpointMgr/Intune/blob/master/Autopilot/Set-AutopilotDeviceGroupTag.ps1