Three read-only PowerShell exporters for Microsoft 365 and Windows Server admins
I have published three short PowerShell scripts that read inventory data and write a CSV on your own machine. They change nothing. You then load the CSV into a free browser tool that runs locally and uploads nothing.
Repository: Cloudek-Hosting/cloudek-scripts (MIT licence).
What they do
| Script | What it reads | Where the CSV goes |
|---|---|---|
export-m365-licence-inventory.ps1 | User, enabled state, last successful sign-in, assigned licence SKUs, through Microsoft Graph | Licence waste analyzer |
export-windows-server-inventory.ps1 | OS name and version, core count, installed server roles, run once per server | Server inventory analyzer |
export-certificate-inventory.ps1 | Certificate label, subject, issuer and expiry date from the local machine store | Certificate inventory analyzer |
What they never do
- They do not assign or remove licences, or change any server setting.
- The certificate script reads metadata only. It never exports or reads a private key.
- The Microsoft 365 script asks for three delegated Graph scopes:
User.Read.All,AuditLog.Read.AllandLicenseAssignment.Read.All. Sign-in activity needs Entra ID P1 or P2 and can lag by up to 24 hours. - Nothing is sent to us. The output is a file on your machine. It contains personal data (user principal names and sign-in times), so protect it and delete it when you are finished.
Read them before you run them
Each script is short on purpose. Execution policy is not a security boundary, so read any script before you run it, and try it on a non-production tenant first. Our safety checklist for PowerShell scripts covers the habits worth building.
Honest status
The scripts parse cleanly, and the certificate script's output passes the analyzer's own parser in a test with throwaway certificates. The Microsoft 365 and Windows Server scripts have not yet been run against many real tenants and servers. If you find a mistake, open an issue on the repository.
Need a second pair of eyes?
If you would rather have a written review than run the tools yourself, we offer a Microsoft 365 licence cost review and a Windows Server end-of-support review. More free tools are at cloudekhosting.com/tools.