Schedule PowerShell commands with PowerScript Scheduled Scripts
- Alan Forbes
The PowerScript Scheduled Scripts feature allows the automatic execution of PowerShell scripts
Configurator, PowerScript Settings
Use this feature to schedule PowerShell scripts to run on regular (daily, weekly, or monthly) basis.
You can create any number of scheduled scripts using the Edit, Add, and Delete buttons. Give the task a name and fill out the remaining form. You can specify which credentials the script uses when it runs.
After the script has run it will show up in the audit log as having been run by the user named "ScheduledScript_TaskName".
There are two included scripts we recommend running on a daily basis: IdentifyAutoDeleteRules and IdentifyAutoForwardRules. These scripts help identify potentially compromised mailboxes by finding accounts with rules which either automatically delete inbound mail or automatically forward inbound mail to an external address. Hackers using accounts to send spam will set up a rule to delete inbound mail so the mail owner doesn't see delivery failure reports. A hacker seeking to gain inside information will create a mail forwarding rule. End users are unlikely to notice either type of rule.
There may be many other scripts you will want to run on a regular basis to proactively monitor your Microsoft 365 tenant.
Reminder: the PowerScript Settings Page, of which Scheduled Scripts is a tab, is only available to users with the PowerScripts Manager permission, which is set it for a user using Configurator, Application Settings, Users, Access.