Explore the top reporting tools for Microsoft Intune. Generate detailed reports on device compliance, application deployment, configuration profiles, and endpoint health. These tools provide insights beyond the built-in Intune reports.
A PowerShell module for automatic documentation of Microsoft 365 environments including Intune, Azure AD/Entra ID, Windows 365, Cloud Print, and Information Protection. Exports to Word, HTML, Markdown, JSON, and CSV formats with configuration comparison capabilities for change detection.
A PowerShell-based auditing tool for IT administrators managing Microsoft Intune. Provides comprehensive analysis of policy, app, and configuration assignments across users, groups, and devices. Features include assignment verification, policy discovery, empty group detection, HTML report generation with charts and dark/light mode, CSV export, and support for multiple authentication methods including certificate-based automation.
Get-IntuneAssignments retrieves all Intune configuration profile assignments (device configurations, policies, enrollment configurations, and more) and returns PowerShell objects for easy filtering, grid viewing, and exporting. It supports multiple authentication methods (Interactive, Certificate, ClientSecret, User/System Managed Identity), group filtering, and CSV export. It also includes coverage for Cloud PC role assignments and Intune role assignments.
Edge Extension Inventory Collector is a lightweight tool that scans endpoints to enumerate installed Microsoft Edge extensions, capturing extension ID, name, publisher, version, enabled state, and install source. It exports a consolidated inventory to JSON or CSV for software asset management, security audits, and Intune/Endpoint Manager workflows. It helps maintain visibility of browser extensions across managed devices and supports baseline compliance checks.
InSight is a PowerShell GUI tool for Microsoft Intune that provides deeper visibility beyond the Intune portal. It offers device ownership analytics, full configuration backup to JSON, assignment tracking to identify orphaned policies, application insights with version tracking, and a library of remediation scripts for quick deployment.
IntuneGraph turns your Microsoft Intune tenant into an interactive relationship graph. It provides a read-only, offline snapshot showing what applies to a device and why, and lets you preview the impact of membership changes before you touch a group. By surfacing nesting, filters, and include/exclude paths, it helps identify orphaned, broken, or misconfigured targets and assess assignment hygiene.
IntuneAccess is an open-source, read-only PowerShell module that connects Microsoft Intune RBAC, workload targeting, and evidence into a single local report. It correlates admins, groups, policies, devices, apps and updates to produce structured objects and an offline HTML Signal Atlas explorer. It supports findings, resolution guides, snapshot comparisons and export-only datasets without uploading tenant data.
View Intune Enterprise App Catalog packages, deployed EAM apps, and available updates in a local Python dashboard.
Basetune is a PowerShell-based tool that compares Intune Settings Catalog and Security Baseline policies across tenants or offline baselines. It supports online Graph API access or offline JSON exports, with local caching of policies and setting definitions to enable offline comparisons. Configure multiple tenants/baselines and run source-vs-target comparisons from the UI or CLI, producing HTML and CSV reports with friendly display names.
HTMD – Microsoft Intune Reports Export Tool v1.0 exports all available Intune data via Microsoft Graph and then enables post-export column selection to tailor reports. Built with Python (requests, pandas) and a tkinter GUI, it supports optional Power BI automation and Excel export via openpyxl. Prerequisites include Python 3.8+, Windows 10/11, and Graph permissions such as DeviceManagementConfiguration.Read.All, DeviceManagementManagedDevices.Read.All, and DeviceManagementApps.Read.All.
A PowerShell script for comprehensive analysis and reporting of Microsoft Intune environment anomalies. Identifies application failures, multi-user devices, BitLocker status, Autopilot hash issues, inactive devices, compliance violations, OS edition overview, and disabled user accounts.
A free web application that generates comprehensive PDF documentation for Microsoft Intune configurations. Automatically exports all configuration types including device configurations, compliance policies, security baselines, PowerShell scripts, and Conditional Access Policies with full settings, assignments, and filters. Features customizable branding with logos, colors, headers, and footers. Uses read-only OAuth 2.0 authentication with no persistent data storage.
Intune Guardian provides real-time monitoring and auditing of your Microsoft Intune environment, delivering visibility into device enrollment, policy changes, app deployments, and access controls. It features anomaly detection, security risk scoring, and comprehensive audit trails with exportable reports and dashboards for governance and compliance. Use it to detect misconfigurations, enforce policies, and accelerate incident response.
IntuneMermaid is a web application designed to turn complex Microsoft Intune configurations into clear, visual Mermaid diagrams. By automatically mapping policy and application assignments, it transforms raw Intune data into intuitive, human-readable architecture diagrams.
IntuneAssistant gives you clear insights in the current Intune assignments over every resource. If it is a configuration policy, compliance policy, application or anything else, all resources are shown. You can search based on a user, a group or all resource assignments. Even if their not assigned.