Basetune is a PowerShell-based tool that compares Intune Settings Catalog and Security Baseline policies across tenants or offline baselines. It supports online Graph API access or offline JSON exports, with local caching of policies and setting definitions to enable offline comparisons. Configure multiple tenants/baselines and run source-vs-target comparisons from the UI or CLI, producing HTML and CSV reports with friendly display names.
Swipe to see more
14 files scanned on Sep 21, 2026
The Basetune CLI shows standard, auditable admin tooling for Intune Graph interactions. Key areas to tighten are secret management (avoid plaintext secrets in Config.json), ensuring integrity of exported modules, and careful handling of Graph Beta API usage. Logging practices should be reviewed to prevent leakage of tenant metadata. No evidence of obfuscated payloads or hardcoded secrets in code; secrets appear to reside in configuration and should be secured.
Edge Extension Inventory Collector is a lightweight tool that scans endpoints to enumerate installed Microsoft Edge extensions, capturing extension ID, name, publisher, version, enabled state, and install source. It exports a consolidated inventory to JSON or CSV for software asset management, security audits, and Intune/Endpoint Manager workflows. It helps maintain visibility of browser extensions across managed devices and supports baseline compliance checks.
A PowerShell script for comprehensive analysis and reporting of Microsoft Intune environment anomalies. Identifies application failures, multi-user devices, BitLocker status, Autopilot hash issues, inactive devices, compliance violations, OS edition overview, and disabled user accounts.
A PowerShell-based auditing tool for IT administrators managing Microsoft Intune. Provides comprehensive analysis of policy, app, and configuration assignments across users, groups, and devices. Features include assignment verification, policy discovery, empty group detection, HTML report generation with charts and dark/light mode, CSV export, and support for multiple authentication methods including certificate-based automation.
HTMD – Microsoft Intune Reports Export Tool v1.0 exports all available Intune data via Microsoft Graph and then enables post-export column selection to tailor reports. Built with Python (requests, pandas) and a tkinter GUI, it supports optional Power BI automation and Excel export via openpyxl. Prerequisites include Python 3.8+, Windows 10/11, and Graph permissions such as DeviceManagementConfiguration.Read.All, DeviceManagementManagedDevices.Read.All, and DeviceManagementApps.Read.All.