A curated directory of community tools, scripts and utilities for Microsoft Intune administrators.
Browse it as a searchable website: deepshah0308.github.io/awesome-intunetools
124 tools across 14 categories, link-checked weekly. Submit a tool · Sponsor the project
- How to use this list
- Contributing
- Sponsorship
- Device Management (11)
- Troubleshooting & Debugging (14)
- App Packaging & Deployment (19)
- Autopilot & Provisioning (7)
- Baselines & Configuration as Code (6)
- macOS & Apple (15)
- Android & Cross-platform (3)
- Graph API & PowerShell (8)
- Reporting & Analytics (9)
- Remediations & Scripts (9)
- Backup, Restore & Documentation (4)
- Security & Hardening (5)
- Automation & Assignments (7)
- Utilities & Discovery (7)
This is a directory for Intune consultants, MSPs, and in-house admins who want a working toolbox rather than more documentation. Pick two or three tools per use case, test them in a lab tenant, then standardise them into your own baseline toolkit.
Auditing a tenant you have just inherited
Start with Intune Management or Intune Inspector for a policy overview, Intune Assignment Checker for assignment hygiene, and IntuneCD or Microsoft365DSC to get the configuration into source control where you can diff it.
Equipping a helpdesk
Intune Debug Toolkit and Intune Device Troubleshooter cover day-to-day device work. CMTraceOpen and Get-IntuneManagementExtensionDiagnostics turn IME logs into something readable. IntuneDiag handles Entra join and PRT problems.
Building an app packaging pipeline
WinTuner or IntuneGet for Winget-sourced apps, PSAppDeployToolkit for anything needing user interaction, and Intune App Factory when you want it running unattended in a pipeline.
Standing up a new tenant
OpenIntuneBaseline gives you a defensible Windows starting point. IntuneHydrationKit fills a lab quickly. Add the platform baselines for macOS, iOS, and Android as needed.
The easiest route is the submission form, which opens a pre-filled issue for review. You can also open a pull request directly.
- Community-built tools, scripts, modules, or web apps that help manage, troubleshoot, secure, or automate Intune.
- Free or primarily community and open-source projects. Commercial SaaS with aggressive marketing is out of scope.
- Tools that are realistically usable: tested on modern tenants and documented well enough for someone else to adopt.
The website and this README are both generated from data/tools.json, so that is the only file to edit. Do not edit README.md or anything in docs/ by hand — those are overwritten on the next build.
{
"name": "Tool Name",
"author": "Author or handle",
"url": "https://github.com/owner/repo",
"category": "troubleshooting",
"kind": "repo",
"desc": "One sentence on the problem it solves and why it is useful."
}category must be one of the ids at the top of data/tools.json. kind is repo for source repositories, web for hosted tools, or guide for a written walkthrough.
- Only suggest tools you have used or can reasonably recommend.
- Link to the canonical repository or project page, not a marketing landing page.
- Describe practical value in plain language. No vendor copy.
- Every link is checked automatically each week. Broken entries get fixed or removed.
This list is maintained independently. If your company builds endpoint tooling or serves Intune admins, sponsorship supports the review and upkeep work that keeps it accurate.
Sponsorship does not buy placement in the list. Tools are included on merit and reviewed the same way regardless of who submitted them; sponsors appear in their own clearly labelled section.
Consoles, bulk operations, and lifecycle tooling for the devices in your tenant.
- Intune Maps — Shehan Perera — Visual map of Intune blades and documentation to speed up portal navigation.
- Rockn Roll Tool — Nicklas Ahlberg — Management tools for Intune environments covering policies, apps, Autopilot, and helpdesk utilities.
- Rock My Printers — Nicklas Ahlberg — Simplifies printer management across Intune-managed devices.
- Intune Management — Mikael Karlsson — PowerShell and WPF GUI to copy, export, import, delete, document, and compare Intune policies and profiles, with ADMX ingestion and cross-tenant migration.
- Device Offboarding Manager — Ugur Koc — PowerShell GUI for bulk offboarding devices from Intune, Autopilot, and Entra ID with dashboards, stale device tracking, and BitLocker key handling.
- IntuneStuff Management Tool — Joery Van den Bosch — Windows desktop GUI for bulk Intune device operations and Entra ID group management with advanced filtering, dry-run safety, and logging.
- Intune Autopilot Tool — iamwillcode — PowerShell WPF tool to onboard devices to Intune and Autopilot via Graph API, handling encryption, profiles, user assignment, and hardware checks.
- InSight — MrOlof — PowerShell GUI for Intune administration including device ownership analysis and tenant overview.
- Intune Device Classification — MrWyss-MSFT — Classifies and tags devices so dynamic Entra ID groups can be built from device characteristics rather than manual membership.
- Intune Help Desk — backuploki — Interactive CLI dashboard for helpdesk teams to query Intune devices and view compliance without opening the portal.
- Intune Inspector — fscorrupt — WPF GUI that caches every policy type locally and full-text searches across them, including decoded PowerShell script content.
Log readers, diagnostics collectors, and device-level investigation tools.
- System Information and Self-service Tool — Jannik Reinhard — End-user facing self-service app showing device info and basic troubleshooting actions.
- Intune Debug Toolkit — MSEndpointMgr — Toolbox for troubleshooting Intune-managed clients with Win32 re-deploy, Autopilot and ESP inspection, a SyncML viewer, and event log helpers.
- Intune Device Details UI — Petri Paavola — GUI providing a Resultant Set of Policy style view of Intune device and user details, app and configuration deployments.
- Get-IntuneManagementExtensionDiagnostics — Petri Paavola — Parses Intune Management Extension logs into an HTML timeline, with a log viewer UI for detailed IME troubleshooting.
- Intune Device Troubleshooter — Jannik Reinhard — PowerShell desktop UI for device-level troubleshooting combining device data, compliance, app states, and remediation actions.
- Get-WindowsTroubleshootingReportCommunity — Petri Paavola — Unifies Windows Event Logs and Intune log files into a single interactive HTML timeline report.
- Intune Log Reader for Windows — Somesh Pathak — Desktop app providing real-time analysis of Intune Management Extension logs with dashboards, search, and export.
- IntuneDiag — IntuneDiag — Browser tool that analyzes dsregcmd /status output, showing Entra join state, certificate validity, PRT attempts, and registration issues.
- IntuneEndpointTools — David Just — PowerShell module for quickly gathering Intune client diagnostics and MDMDiagnostics reports.
- IntunePremier — Shepherd0619 — Open-source tools aimed at helpdesk staff handling daily Intune troubleshooting tasks.
- CMTraceOpen — Adam Gell — Free, open-source CMTrace replacement for reading ConfigMgr, Intune IME, and Autopilot ESP log files on modern Windows.
- Intune One Data Collector — markstan — Automated collector that gathers the full diagnostic data set Microsoft support asks for when opening an Intune case.
- IntuneWUTools — markstan — Tools for troubleshooting Windows Update behaviour on Intune-managed clients.
- MHimken Toolbox — MHimken — Collection of endpoint management scripts covering Autopilot diagnostics, ESP inspection, and client-side troubleshooting.
Win32 packaging, Winget pipelines, and app delivery automation.
- Microsoft Win32 Content Prep Tool — Microsoft — The official utility that wraps Win32 installers into the .intunewin format required for upload.
- PSAppDeployToolkit — PSAppDeployToolkit — Framework for building consistent, user-aware application installs with deferral prompts, process handling, and logging.
- WinTuner — Stephan van Rooij — Packages any Winget app straight into Intune from the command line or a PowerShell module, including icons and detection rules.
- IntuneGet — Ugur Koc — Skips the manual packaging workflow and deploys Winget apps to Intune in a few clicks.
- Winget-Install — Romanitho — PowerShell scripts for installing and updating Winget packages in system context from Intune or ConfigMgr.
- WingetIntunePackager — Romanitho — GUI packager that turns Winget packages into ready-to-upload Intune Win32 apps.
- WinGet-Wrapper — Soren Lundt — Bulk-imports Winget packages into Intune including all package metadata, detection, and requirement rules.
- IntuneWin32Deployer — Florian Salzmann — Creates and deploys Winget and Chocolatey apps to Intune as Win32 packages in one command.
- Intune App Factory — MSEndpointMgr — Azure DevOps pipeline that automates Win32 application packaging and publishing to Intune end to end.
- IntuneWin32AppPackager — MSEndpointMgr — Framework that packages, creates, and simultaneously documents Win32 applications for Intune.
- Package Factory — Aaron Parker — Packaging factory for Intune built on Evergreen and VcRedist, keeping app packages continuously current.
- IntunePrepTool — Rink Turksma — GUI front end for the Win32 Content Prep Tool that speeds up repetitive packaging work.
- Intune App Deploy — Ben Reader — Reliable path to package Win32 applications and deploy them to Intune from any source, including CI pipelines.
- IntuneAppCreator — Jannik Reinhard — Automates creation, packaging, and deployment preparation of Intune Win32 apps.
- Win32 Toolkit — Maxime Guillemin — End-to-end Win32 packaging that accepts a Winget package or your own installer and produces a deployable app.
- WrapTune — thefinder808 — Friendly GUI for IntuneWinAppUtil.exe for admins who would rather not memorise its arguments.
- Deployment Editor — tugich — Click-together sequence builder for PSAppDeployToolkit packages, lowering the scripting barrier for packagers.
- IntuneWin Build and Extract Tool — Damien Van Robaeys — GUI tool to build and, crucially, extract .intunewin packages when you need to inspect what shipped.
- IntuneAppAssigner — Nick Benton — Bulk updates or replaces assignments across many Intune applications at once.
Hardware hashes, enrollment, imaging media, and provisioning workflows.
- Intune.USB.Creator — Ben Reader — Builds a bootable WinPE USB used to provision devices for Autopilot enrollment.
- Intune.HV.Tools — Ben Reader — Spins up Intune-managed Hyper-V virtual machines for testing enrollment and policy without touching real hardware.
- Foundry — foundry-osd — Modern open-source Windows deployment solution with a graphical interface for creating bootable provisioning media.
- WinAutopilotImport — tugich — Simple GUI for registering a Windows device with Autopilot during OOBE.
- Get-WindowsAutopilotImportCommunity — markorr321 — Registers devices with Autopilot from a real GUI instead of a console, supporting hardware hash collection and Group Tag selection.
- Autopilot Cleanup — markorr321 — Interactive tool for bulk device cleanup across Autopilot, Intune, and Entra ID in a single pass.
- IntuneMigrationV2 — stevecapacity — Tenant-to-tenant device migration supporting in-place migration as well as hardware hash re-import.
Ready-to-import baselines and declarative tenant configuration.
- OpenIntuneBaseline — SkipToTheEndpoint — Community-driven Intune baseline covering Windows configuration, security, and update policies as importable JSON.
- Microsoft365DSC — Microsoft365DSC — Manages the entire Microsoft 365 configuration, Intune included, as declarative PowerShell DSC code with drift reporting.
- IntuneHydrationKit — jorgeasaurus — Imports a set of starter configurations into a fresh tenant so a lab or new deployment is usable quickly.
- IntuneBaselines — Wolkenman — Intune baseline profiles in JSON format for standing up a modern workplace configuration.
- IntuneLinuxBaseline — glueckkanja — Baseline configuration for managing Linux endpoints through Intune.
- Intune Preflight — kevinmalinoski — Simulates an Intune endpoint and previews the merged policy baseline a device would actually receive, read-only.
Tooling for Mac, iOS, and iPadOS fleets managed through Intune.
- Shell Intune Samples — Microsoft — Microsoft's reference shell scripts for macOS and Linux Intune admins, covering app installs, custom attributes, and detection.
- intune-my-macs — Microsoft — Automation project that configures an Intune environment for macOS management quickly and repeatably.
- Intune Mac Admins — Ugur Koc — Community platform with detailed guides, scripts, and best practices for managing macOS devices via Intune.
- IntuneBrew — Ugur Koc — Simplifies uploading and managing macOS applications in Intune, drawing on a large catalog of maintained app definitions.
- MISA (macOS Intune Support Assistant) — Somesh Pathak — Support assistant for macOS endpoints that surfaces enrollment and policy state for helpdesk staff.
- IntuneLogWatch — Gil Burns — macOS application that analyzes Intune agent logs and delivers human-readable insight instead of raw text.
- Third Party Patcher — Gil Burns — MDM-agnostic, MDM-managed daemon that handles third-party patching and software distribution on macOS.
- macOS MDM Profiles — homotechsual — Ready-made MDM profiles for configuring permissions and services on macOS devices through Intune.
- Intune Goodies — Oktay Sari — Collection of scripts and tools covering macOS and cross-platform Intune management tasks.
- JUMP-IN — Somesh Pathak — macOS application that simplifies migration between MDM solutions, aimed at moving Macs into Intune.
- WrapTune for macOS — thefinder808 — Builds Intune .intunewin packages from a Mac, so packagers are not forced onto a Windows box.
- macOS Hardening — R33Dfield — Intune configuration files for hardening macOS against a documented security standard.
- iOS Hardening — R33Dfield — Intune configuration files for hardening iOS and iPadOS devices.
- iOS/iPadOS Intune Baseline — UniFy-Endpoint — CIS-aligned baseline for iOS and iPadOS with importable JSON policies and deployment guides.
- Intune App SDK for iOS — Microsoft — Official SDK enabling app protection and data protection features inside in-house iOS applications.
Android Enterprise, Linux, and multi-platform management.
- Android Enterprise Baseline — UniFy-Endpoint — Android Enterprise baseline policies and deployment guides for Intune.
- Intune Android QR Wizard — brommet87 — Generates Wi-Fi QR codes to simplify network configuration during Android Enterprise enrollment.
- Intune Apps — Aaron Parker — Definitions for managing Windows, macOS, Android, and iOS applications in Intune from one place.
SDKs, sample libraries, and scripting interfaces for the Intune Graph API.
- PowerShell Intune Samples — Microsoft Graph — Microsoft's long-standing sample library showing how to reach every Intune Graph resource from PowerShell.
- Microsoft Graph PowerShell Intune Samples — Microsoft — Current sample set built for the Microsoft Graph PowerShell SDK, replacing the older Intune-specific module.
- Intune PowerShell SDK — Microsoft — Native PowerShell cmdlets wrapping the Intune Graph API for IT Pro scenario automation.
- GraphXray — Merill Fernando — Watches actions you take in the Entra or Intune portal and shows the equivalent Graph calls and PowerShell to script them.
- InTUI — jorgeasaurus — Terminal user interface for Intune management, driving Graph from a keyboard-first console.
- IntuneQL — Ugur Koc — Keyboard-driven terminal workspace for querying the Graph API and browsing Intune resources visually.
- MgGraphCommunity — Ugur Koc — Community drop-in alternative to Connect-MgGraph in pure PowerShell, avoiding WAM and MSAL dependencies.
- Aaron Parker's Intune Scripts — Aaron Parker — Broad, well-maintained collection of scripts and tooling for use with Intune.
Dashboards, compliance exports, and executive-facing reporting.
- MSEndpointMgr Reporting — MSEndpointMgr — Intune reporting built on Azure Monitor, Log Analytics, and Azure Workbooks.
- Intune.Reporting — Ben Reader — Generates presentable Intune reports from PowerShell for stakeholders who will not log into the portal.
- Intune Reporting — Damien Van Robaeys — Reporting scripts covering device, app, and policy status across the tenant.
- Power BI Dashboards for Intune — Jannik Reinhard — Power BI templates for Endpoint Analytics and device management reporting.
- Intune Patching & OS Compliance Dashboard — greebo-labs — Browser-based dashboard for patch compliance, Windows OS lifecycle tracking, and executive reporting.
- M365-Assess — Galvnyz — Runs hundreds of automated checks across multiple compliance frameworks and produces an interactive HTML report locally.
- IntuneComplianceReport — DanStutz — Exports device compliance to a wide CSV via Graph, one row per device with each policy as a column.
- Enhanced Inventory for Intune — Jan Ketil Skanke — Azure Function solution that enriches Intune inventory data for reporting and security use.
- M365 License and OneDrive Waste Finder — Aymerick Victoire — Read-only Microsoft Graph audit that prices the licenses still assigned to disabled accounts in EUR per month and per year and reports the state of each account's OneDrive, with an HTML report and CSV export, no writes and no deprecated modules.
Detection and remediation script libraries plus authoring tools.
- Endpoint Analytics Remediation Scripts — Jannik Reinhard — Large library of ready-to-use proactive remediation detection and remediation script pairs.
- Intune Remediation Scripts — Damien Van Robaeys — Practical remediation scripts covering common Windows configuration and repair scenarios.
- Remediations — Aaron Parker — Curated remediation scripts written for Intune with an emphasis on idempotence and clean detection logic.
- RemediationCreator — Jannik Reinhard — Creates and manages proactive remediation script packages rather than hand-uploading each pair.
- IROD (Intune Remediations On-Demand) — markorr321 — Runs remediation scripts on demand from a WPF GUI backed by the Graph API, instead of waiting for schedules.
- Intune Registry Management — Martin Bengtsson — Single reusable script for managing Windows registry values through Intune remediations.
- Endpoint Manager Scripts — Richard Hicks — Proactive remediation scripts with a focus on networking, VPN, and Always On VPN scenarios.
- Proactive Remediation for Business — Florian Salzmann — Opinionated framework and worked examples for running proactive remediations in production.
- Windows App Health Check Log Reader — Niall Brady & Paul Winstanley — Remediation that copies Windows app health check logs into IME logs for easier remote diagnostics.
Tenant backup, drift detection, migration, and auto-generated documentation.
- Intune Backup and Restore — John Seerden — PowerShell module querying Graph for cross-tenant backup and restore of Intune configuration.
- Automatic Microsoft 365 Documentation — Thomas Kurth — Automated engine generating readable Intune and Microsoft 365 configuration documentation.
- TenuVault — Ugur Koc — Backup solution offering scheduled backups, configuration drift detection, and one-click restores across tenants.
- TrustM365 — AntoPorter — Self-hosted configuration drift monitoring that baselines a tenant and detects changes at the property level.
Hardening baselines, LAPS, BitLocker, and security posture assessment.
- Pre-boot BitLocker Startup PIN — Oliver Kieselbach — Reference walkthrough for enabling pre-boot BitLocker startup PIN through Intune policy.
- DCToolbox — Daniel Chronlund — PowerShell module automating Microsoft 365 security and Conditional Access operations and documentation.
- Windows LAPS Self-Service Portal — Daniel Fraubaum — Azure Static Web Apps and Functions solution letting users retrieve the LAPS password for their own device with a full audit trail.
- Windows Hardening — R33Dfield — Hardening scripts and baselines deployable through Intune for stricter Windows security posture.
- Harden Windows Security — HotCakeX — Extensively documented hardening module using officially supported Microsoft methods, with policies deployable via Intune.
CI/CD, assignment auditing, and workflow automation.
- Intune Script Viewer — Trevor Jones — Script viewer and manager for Intune PowerShell scripts with search, filtering, and editing.
- IntuneCD — Tobias Almen — Backs up, documents, and deploys Intune configuration from source control, making tenant config a reviewable pipeline.
- Intune Assignment Checker — Ugur Koc — Audits Intune assignments for users, groups, and devices, surfacing unassigned policies and empty groups in HTML reports.
- Intune Assistant — Sander Rozemuller — Web platform for assignment insight, configuration analysis, rollout assistance, and reporting across tenants.
- Intune Toolkit — Maxime Guillemin — PowerShell toolkit with a UI for managing policy assignments and backing up or restoring them.
- Feature Update Controller — MSEndpointMgr — Centralises control of Windows feature update rollout for Intune-managed devices instead of managing rings by hand.
- DUDE Manager — Simon Skotheimsvik — GUI to deploy and monitor the DUDE automation engine that syncs Intune device groups with Entra user groups.
Generators, navigation helpers, and directories of further tooling.
- Intune Registry Builder — Daniel Fraubaum — Browser tool to define registry changes and generate Intune-ready detection and remediation scripts or Win32 bundles.
- cmd.ms — Merill Fernando — URL-based command line and browser extension that jumps straight to Azure, Entra, Intune, and Defender admin blades.
- Intune Drive Mapping Generator — Nicola Suter — Web generator for drive-mapping policies targeting users and devices without hand-writing XML.
- Toolbox Rundown — Simon Skotheimsvik — Curated rundown of endpoint management tools, useful as a second discovery hub alongside this list.
- Intune Wall of Tools — IntuneQLinks — Community hub cataloguing Intune settings references, community content, and a broad tool directory.
- Awesome Intune — awesomeintune.com — Large searchable directory of free Intune tools and scripts with source-code risk scanning on listed projects.
- GPORais — Islam Rais — Searches close to 10,000 Group Policy settings by intent or registry key across 16 sources, showing the matching Intune CSP mapping and exporting .reg, PowerShell or GPO backups.
This list is licensed under a Creative Commons Attribution 4.0 International License. The tools themselves are licensed by their respective authors. This project is not affiliated with Microsoft.
