How do you remind yourself to renew your CA root certificates / subordinate certificates? Do you set a calendar reminder? Did the person who set those reminders up forget to share them with the team and now is on holidays?

Fear not, for I have holiday gift for you - using nothing but PowerShell, we can interrogate our trusted certificate policies and, as if by magic, send out alerts when the attached certificates are about to expire!

As I’ve said before, working with dynamic groups in Intune isn’t my favourite thing.

Luckily, Microsoft has been listening and have provided us with a better way to dynamically apply policies to devices with filters!