Hunting Zombie Software: Automating the Removal of Unauthorized and End-of-Support Apps with Intune
Users with local admin rights are the natural enemy of a clean software inventory. They install unapproved browsers, outdated image editors, and “handy” utilities that quickly become an IT headache. Worse, Microsoft Defender for Endpoint often flags these apps because they are End-of-Life (EOL) or End-of-Support (EOS), creating a massive list of vulnerabilities you didn’t even know you had. Instead of playing whack-a-mole with individual apps, I developed a “Master Script” approach for Intune Proactive Remediations. This system hunts down “zombie software” based on a centralized target list and removes it silently. ...