Automation Tools

CLI Tool

Verified

AppPruner

A command-line tool for managing the removal of macOS applications and their associated files. Features multiple matching modes, dry-run previews, JSON manifest generation, catalog synchronization, and Homebrew integration with pre/post-flight command hooks.

Tobias Almen

Automation

Johannes Geir Kristjansson

PS Script

Curated

Autopilot App Registration Enrollment

A PowerShell script that enrolls devices into Windows Autopilot using Azure App Registration credentials. Works without hybrid Azure AD join or SCCM, enabling unattended deployment via RMM tools. Uses community hardware hash collection module for reliable device registration.

Automation

Details Visit

Desktop App

Verified

Autopilot Assistant

Autopilot Assistant is a modern WPF-based PowerShell tool that streamlines Windows Autopilot onboarding and device provisioning via a secure Microsoft Graph workflow. It collects hardware hash, prevents duplicates, and supports uploading to Intune Autopilot with optional group tagging and assigned user/computer name. The app offers a structured results view, a real-time log center, and local data storage for offline preparation and auditing.

Mohammed Omar

Automation

PS Script

Verified

Autopilot Management

Autopilot Management is a Windows-based Intune utility that simplifies Autopilot device administration. It supports searching by serial number or device name, bulk updates to Group Tags, bulk or single deletions, and uploading hardware hashes. It can load and verify devices from CSV, backup data, and query with an optional cache for large environments. Authentication uses Azure Graph tools (MFA supported) for secure admin access.

Espen Jaegtvik

Automation

PS Script

Verified

AutopilotGroupTagger

AutopilotGroupTagger is a PowerShell-based utility for bulk updating and managing Windows Autopilot Device Group Tags, with optional unblocking of devices. It supports updating tags by group, manufacturer, model, purchase order, and interactive selection, plus exporting data and creating dynamic Entra ID groups. The tool runs with Microsoft Graph authentication and supports PowerShell 7 on Windows/macOS, including a whatIf simulation mode and Community Tool status.

Nick Benton

Automation

Other

Verified

AutopilotProfileFunctions

AutopilotProfileFunctions is a PowerShell toolkit for Microsoft Intune that automates the creation and management of Windows Autopilot deployment profiles via the Graph API. It enables bulk profile generation (including language, deployment mode, join type, and device type), assigns profiles to regional dynamic groups, and supports CSV-based mass provisioning with customizable device naming templates. The result is scalable, repeatable Autopilot setup across global populations with minimal manual effort.

Amir Joseph Sayes

Automation

Desktop App

Verified

Device Offboarding Manager

A PowerShell-based GUI application for streamlined device lifecycle management across Microsoft cloud services. Enables bulk device offboarding from Intune, Autopilot, and Entra ID from a single interface. Features real-time dashboard analytics, stale device tracking, automatic BitLocker and FileVault key retrieval, CSV/TXT import for bulk operations, and pre-built playbooks for automated workflows.

Automation

Desktop App

Verified

DUDE Manager

DUDE Manager is a Windows PowerShell WPF GUI that configures, deploys, and monitors the DUDE automation engine, which dynamically synchronizes Intune device groups with Entra ID user groups. The sync runs in Azure Functions with a Managed Identity, supports transitive membership and nested groups, and includes safety rails (no shared credentials, prefix allowlists, blast-radius limiter, debug mode). The GUI handles deployment and monitoring, with ARM64 browser login for devices lacking WAM, and supports delegation features via Administrative Units and Defender tags.

Daniel Petri

Automation

Other

Verified

EAM-AutoUpdater

EAM-AutoUpdater is a PowerShell-based automation tool for Microsoft Intune Enterprise Application Management (EAM) that detects available updates in the EAM catalog and automatically deploys new app versions. It migrates assignments, metadata, and Enrollment Status Page (ESP) configurations to the new version, handles supersedence by keeping only the latest two versions, and supports update rings, custom command-line parameters, app exclusions, and Teams notifications; it runs as an Azure Automation runbook with a managed identity or interactively for testing.

Janic Verboon

Automation

Other

Curated

EasyDefenderMacOS

EasyDefenderMacOS is a collection of importable Intune policies that streamline onboarding and offboarding macOS devices to Defender for Business/Endpoint. It supports personal work-profile and corporate-owned devices, integrates Defender with Intune, and uses an onboarding package with an optional offboarding package to automate policy deployment and Defender app configuration. The solution covers setup steps from Defender portal to Intune admin center and test enrollment on macOS.

Vlad Johansen

Automation

PowerShell Module

5/6 checks passed

Entra ID Device Trust

Entra ID Device Trust enables binding Function Apps to Entra ID joined devices by validating requests originate from trusted devices via the device certificate enrolled during device registration. It combines client-side data gathering (signature hash, device CN, public key, thumbprint) with server-side validation, and can be embedded as a module in your Function App or installed as a dependency. The solution supports embedding EntraIDDeviceTrust.Client on clients and EntraIDDeviceTrust.FunctionApp in Function Apps for seamless, enhanced request security.

Nickolaj Andersen

Automation

Other

5/6 checks passed

Intune Adaptive Engine

The Intune Adaptive Engine is a PowerShell automation tool that keeps Entra ID group membership in sync with live Intune device inventory through YAML-driven rules. It queries Graph API for Intune devices and detectedApps, evaluates per-rule conditions, and performs the minimal add/remove actions to keep groups in sync—no agents, no P1/P2 licensing, and no custom code; WhatIf/dry-run, per-rule dry runs, auto group creation, platform filtering, and CI/CD-ready rule sets are supported.

Niklas Bruhn

Automation

Browser Extension

Verified

Intune Admin Center Tools

Comprehensive tool designed to streamline the management of Microsoft Intune devices. This extension allows administrators to efficiently check application and configuration assignments, manage device groups, download platform scripts, and perform various other administrative tasks.

Maciej Horbacz

Automation

PS Script

Verified

Intune App Factory

Intune App Factory is a set of PowerShell scripts run in an Azure DevOps Pipeline that automatically detects, downloads, packages, and publishes onboarded applications as Win32 apps to Microsoft Intune, ensuring up-to-date deployments. It supports onboarding via manifests, integrates the PowerShell App Deployment Toolkit, and automates version checks from Winget, Evergreen, or Storage Account sources to streamline packaging and publishing.

Nickolaj Andersen

Automation

PS Script

Verified

Intune Automation

A collection of community-tested PowerShell scripts for automating Microsoft Intune management tasks. Features device lifecycle management, compliance reporting, application deployment automation, and threat detection workflows. Scripts support both local execution and Azure Automation Runbook deployment with automatic environment detection for authentication. Uses direct Graph API access for minimal dependencies and easier troubleshooting.

Automation

Web App

Verified

Intune Drive Mapping Generator

A web-based tool that generates PowerShell scripts for network drive mapping on Intune-managed Windows 10 devices. Converts existing Group Policy drive exports to Intune-compatible scripts, supports security group filtering with nested groups, and enables recurring execution.

Nicola Suter

Automation

PowerShell Module

Verified

Intune Hydration Kit

A PowerShell module that automates Microsoft Intune tenant setup by deploying 70+ security baselines, 43 dynamic groups, 24 device filters, compliance policies, app protection policies, and Conditional Access policies in a single command. Integrates OpenIntuneBaseline and supports multi-cloud environments.

Jorge Suarez

Automation

PS Script

Verified

Intune iOS Minimum Version Automation

An Azure Automation Runbook for Microsoft Intune that automatically updates the iOS compliance policy osMinimumVersion based on real device inventory. It queries devices via Microsoft Graph, derives a safe minimum iOS version (third newest when enough data, with a fallback), updates the policy if needed, and sends a detailed HTML notification. Emphasizes idempotency, robust error handling, and routine scheduling.

Maurice Flöthmann

Automation

Desktop App

Verified

Intune Toolkit

A PowerShell-based GUI solution for managing Microsoft Intune policies. Features Microsoft Graph authentication, multi-platform policy and app management, assignment operations, backup/restore in JSON format, CSV/Markdown export, and comprehensive activity logging.

Maxime Guillemin

Automation

CLI Tool

Verified

intune-uploader

A set of AutoPkg processors for uploading apps to Microsoft Intune. Automates downloading, packaging, and uploading applications including LOB apps, app icons, scripts, and supports Teams/Slack notifications for deployment workflows.

Tobias Almen

Automation

Web App

Curated

IntuneAdminTemplateMigrator

Converts Administrative Template policies to Settings Catalog — reads your existing policies and creates the equivalent Settings Catalog profiles with the same settings and values.

Joery Van den Bosch

Automation

Other

Verified

IntuneAppAssigner

IntuneAppAssigner is a PowerShell tool that enables bulk assignment of mobile apps in Microsoft Intune. It provides an interactive interface to select apps, choose assignment mode (replace, add, or review), set installation intent (Required, Available, Uninstall), and pick target groups (All users, All devices, or Entra ID groups). It also supports assignment filters and, for Android/iOS, App Config profiles (COPE/BYOD). Public Preview status is noted.

Nick Benton

Automation

CLI Tool

Verified

IntuneCD

A powerful Python package for backup and continuous delivery of Microsoft Intune configurations. Backs up configurations to Git repositories, detects changes automatically, propagates updates between environments, and integrates with Azure DevOps and GitHub Actions pipelines.

Tobias Almen

Automation

PS Script

Verified

IntuneComplianceMaintainer

IntuneComplianceMaintainer is a PowerShell automation script that keeps Microsoft Intune compliance and app-protection policies up to date with the latest supported OS minimums across iOS, iPadOS, macOS, Android, and Windows. It uses endoflife.date and the Graph Windows Update Catalog to drive cadence-based updates, with flexible authentication (Managed Identity, App Registration with certificate or secret, plus Key Vault integration) and safety features like dry-run and downgrade protection. It provides comprehensive logging and built-in retry logic for resilience.

James Robinson

Automation

PowerShell Module

5/6 checks passed

IntuneDeviceInventory

A PowerShell module with UI for extending Microsoft Intune device management. Adds custom properties to Intune devices, enables bulk operations including device sync and BitLocker key rotation, with both PowerShell module and standalone UI interfaces.

Florian Salzmann

Automation

Desktop App

Verified

IntuneManagement

A PowerShell application with WPF GUI for managing Microsoft Intune and Azure policies. Features export, import, copy, delete, document, and compare operations across 30+ object types with cross-tenant migration, ADMX import, bulk operations, and automated documentation.

Micke Karlsson

Automation

Desktop App

5/6 checks passed

Intuneomator

Intuneomator is a macOS enterprise tool that automates Microsoft Intune app lifecycle management, leveraging Installomator’s 900+ label database for multi-arch apps. It enables end-to-end workflows (download, package, upload, deploy), group targeting, metadata and script automation, plus Teams-based status and CVE alerts. Built with a secure XPC architecture, keychain-backed credentials, and dual authentication for enterprise-grade security.

Gil Burns

Automation

PS Script

Verified

IntuneOSCompliance

IntuneOSCompliance is a PowerShell tool that automatically updates Windows, Android, and Apple OS compliance policies, app protection policies, and device enrollment platform restrictions to the latest supported OS versions. It fetches current builds via APIs and RSS feeds, detects policies needing updates, and can push results to a rich Microsoft Teams card via an Incoming Webhook. Public Preview with configurable report-only mode and OS version offsets.

Nick Benton

Automation

PS Script

Verified

IntuneWin32AppUninstall

IntuneWin32AppUninstall is a PowerShell GUI tool that inventories MSI-based apps by scanning uninstall registry keys (HKLM and HKCU) and generates Intune-compatible detection and remediation scripts. For each selected app it creates a ready-to-deploy package with Detect and Remediate scripts, a README, and AppInfo.json, with batch generation, per-app folders, and CSV export. Remediation uninstalls silently via msiexec /X {GUID} and logs results for Intune deployment under Endpoint Security.

Mert Ozsoy

Automation

API Wrapper

Verified

Microsoft Intune & Entra ID MCP Server

A comprehensive MCP server that manages Microsoft Intune and Entra ID via the Microsoft Graph API. It exposes 134 tools across 16 categories, enabling AI assistants to perform device and user management, security configuration, policy enforcement, and rich reporting. Features include remote actions (sync, restart, lock, wipe, retire), device inventory, Autopilot management, conditional access, app and group management, and bulk operations.

Sujin Nelladath

Automation

Web App

Curated

NukeTool

Reset your tenant.

jorgeasaurus

Automation

Web App

Curated

OIB Deployer

OIB Deployer automates the deployment of OpenIntuneBaseline configurations within Microsoft Intune, enabling rapid, repeatable rollouts of baseline security policies and device configurations. It supports policy templating, script deployment, and integration with community-provided baseline content, with built-in logging and error reporting for auditability. Ideal for IT admins seeking consistent, scalable endpoint security across devices.

James Robinson

Automation

PowerShell Module

Curated

OSD

A comprehensive PowerShell module for operating system deployment with 400+ functions for WinPE and Windows. Includes OSDCloud for cloud-based deployment, disk management, Windows image operations, driver management for Dell, HP, Lenovo, and Microsoft, BIOS/firmware updates, BitLocker management, and WinPE customization.

David Segura

Automation

Details Download

Web App

Verified

REG2PS

A web-based tool that converts Windows Registry files to PowerShell scripts for Intune remediations. Generates detection scripts to validate registry states and remediation scripts to apply changes. Also available as CLI tool (Reg2CI) for SCCM configuration items.

Roger Zander

Automation

Web App

Verified

RepoFabric

RepoFabric is a self-hosted WinGet source platform for Microsoft-managed fleets. It provides Entra ID sign-in, one-click Intune policy export (DesktopAppInstaller CSP) to point endpoints to a private source, Azure Arc readiness, and a GUI admin console. It also offers a REST API and a 48-cmdlet PowerShell module, GitOps manifests, scheduled sync, and LAN peer-caching to reduce bandwidth.

Mark Ringo

Automation

Desktop App

Curated

RockEnrollTool

A Windows GUI tool for device enrollment and Intune management. Features modules for authentication, system info, Win32 app wrapping, device management, device sync, Autopilot hash generation, and BitLocker configuration through a tabbed interface.

Nicklas Ahlberg

Automation

Desktop App

Verified

Shortcut Creator

A utility for creating and deploying desktop shortcuts through Microsoft Intune as Win32 applications. Generates .intunewin files, detection scripts, and deployment instructions automatically. Supports URL, file path, and Microsoft Store app shortcuts with custom icons.

Shehab Noaman

Automation

Web App

Verified

TenuVault

TenuVault is a safe backup and restore solution for Microsoft Intune configurations. It backs up Intune policies to JSON files, detects configuration drift, and restores by creating new policies with a [Restored] prefix - never overwriting existing ones. It supports multiple export formats (JSON, CSV, HTML), full audit logs, and a read-only backup model with preview mode to ensure non-destructive changes.

Automation

Other

Verified

Toast Notification Script

Toast Notification Script is a Windows 10/11 tool designed for Intune Remediations to deliver native toast notifications to the logged-on user. It supports weekly reminders, reboot prompts, and general announcements with configurable scheduling, branding, languages, and snooze/dismiss actions. Includes a detection script, configuration validation, and robust logging to support reliable remote remediation.

Martin Bengtsson

Automation

PowerShell Module

Verified

Win32 App Migration Tool

Win32 App Migration Tool inventories ConfigMgr applications and deployment types, builds .intunewin files, and creates Win32 apps in Intune. It automates exporting application details, deployment type data, and icons, prepares the Intune JSON payloads, and handles content upload to Intune. The tool supports end-to-end migration from ConfigMgr to Intune (Preview status) with configurable prerequisites and detailed logging.

Ben Whitmore

Automation

Desktop App

Verified

Windows Autopilot Import GUI

A PowerShell-based GUI tool that streamlines Windows Autopilot device enrollment during the Out-of-Box Experience (OOBE). Automates hardware hash collection and submission to Autopilot with Group Tag selection support and automatic system reboot after profile assignment. Includes network connectivity diagnostics to troubleshoot configuration issues. Built on Michael Niehaus's Get-WindowsAutoPilotInfo script.

Automation

Web App

5/6 checks passed

Windows LAPS Self‑Service Portal

Windows LAPS Self-Service Portal lets users securely retrieve the LAPS password for their own device without helpdesk tickets. Built on Azure Static Web Apps + Azure Functions and Entra ID, it enforces an only-my-device rule, requires a justification, and auto-hides the password after 60 seconds. Every access is auditable in Azure Table Storage, with a zero-stored-secrets design and Graph access via a Managed Identity.

Daniel Fraubaum

Automation