Intune->Analytics->ProactiveRemediation Powershell scripts for both detection and remediation. example: Is registry correct for ReaderDC to have flash and java disabled for security. Note: Where possible I try to provide attributes but in the mad-house of trying to deal with PrinterNightmare zero days I could not find sources.