SecureOps Playbooks logoSecureOps Playbooks

Script Library

SecureOps Script Library for Microsoft 365

A searchable Windows desktop library of 117 ready-to-run Microsoft 365 administration scripts. Pick a tenant and a script, fill in the variables, then copy it into your own PowerShell session or run it in a new window — with the same review-before-you-act discipline as the free playbooks on this site. A free LITE edition with 15 read-only reporting scripts is available now.

Eight categories, one workflow

Every script follows the same pattern: a plain-English purpose, the exact connect commands and permission scopes it needs, clearly marked variables you can fill in with a form, and the full editable code.

Quick Connect

Module install and Connect commands for Exchange, Graph, Teams, and SharePoint — the setup steps every other script depends on.

User Management

Exports, inactive-user reviews, secure password resets, licensing, and bulk create/update from CSV.

Mailbox & Exchange

Mailbox sizes, shared mailbox permissions, aliases, quotas, forwarding checks, and offboarding conversions.

Security & Compliance

MFA status, admin role reviews, guest audits, failed sign-ins, audit log searches, and Conditional Access inventory.

Groups & Teams

Membership management, ownerless-group checks, and restore workflows for deleted groups and teams.

SharePoint & OneDrive

Site inventory, sharing reviews, storage reports, and deleted-site restores.

Automation

Full onboarding and offboarding workflows, license threshold alerts, and scheduled security checks.

Reporting & Exports

Usage and adoption reports exported straight to CSV for tickets, reviews, and documentation.

Free downloadLITE edition

Try it free: Script Library LITE

The LITE edition is the same Windows desktop app — searchable script library, tenant profiles, Quick Fill variables, and the preflight module checker — limited to 15 read-only reporting scripts of the 117 in the full edition. It is generated from the same source as the paid product, so it stays current with every release. Everything in it is 100% read-only: connect, collect, export.

Install Required Modules
Connect to Exchange Online
Connect to Microsoft Graph
Check Current Connection Status
Get All Users + Export
Get Licensed Users
Find Inactive Users
Get All Mailbox Sizes
Check External Email Forwarding
Get MFA Status for All Users
Get Admin Role Assignments
List Guest / External Users
Email DNS Health Check (SPF/DKIM/DMARC)
Find Groups & Teams With No Owners
Tenant Summary Report

A 16th entry in the app links to the full edition, so you always know what else is available.

Download Script Library LITE v1.0.0 (free, ZIP)

Verify your download

Confirm the ZIP you downloaded matches the published SHA-256 hash before extracting:

Get-FileHash .\SecureOpsScriptLibrary_Lite_v1.0.0.zip -Algorithm SHA256
# 69C5474EAC1B807D314B066857971D503FB9B266E07B9C59169C4CE890136288

Requirements: Windows 10/11 or Windows Server 2016+, PowerShell 5.1 (PowerShell 7 recommended). No credentials are ever stored — sign-in always happens in Microsoft's own window. Free for personal and internal business use; no redistribution; provided as-is (LICENSE.txt is inside the ZIP).

Get LITE updates

Want new LITE releases and the full-edition launch announcement in your inbox? Join the list — optional, the download above is free either way.

If the form does not appear, open the signup form directly.

The safety model

Unlike the free playbooks, the Script Library includes scripts that change tenants — so it is built around making those changes deliberate:

  • Reporting scripts are read-only: connect, collect, export.
  • Scripts that change a tenant ask you to confirm the target tenant by name before they run.
  • Destructive operations (bulk guest removal, mail purge, auto-disable) default to preview mode so you see the impact before anything changes.
  • Password workflows generate a unique strong random password per user — nothing hardcoded, nothing written to disk.
  • No credentials or tokens are ever stored. Sign-in always happens in Microsoft's own login window.
  • Every script is shown in full, in an editable window, before you copy or run it.

Who it is for

  • MSP engineers managing many client tenants (per-tenant profiles auto-fill domains, admin UPNs, and SharePoint URLs)
  • Microsoft 365 admins and cloud engineers who keep reaching for the same scripts
  • Solo IT admins who want guardrails around change scripts
  • vCIO-style consultants who need clean CSV exports for reviews and reports