Comprehensive tool designed to streamline the management of Microsoft Intune devices. This extension allows administrators to efficiently check application and configuration assignments, manage device groups, download platform scripts, and perform various other administrative tasks.
Swipe to see more
10 files scanned on Sep 20, 2026
The codebase contains a critical credential-handling risk: it captures and stores Microsoft Graph Authorization tokens within the extension, with token data logged to console. This elevates the risk of token theft if the extension, the host environment, or other extensions are compromised. Telemetry to an external analytics endpoint is present but appears opt-in; ensure privacy-compliant data collection and clear user consent. There are also placeholders for GA credentials treated as secrets; these should be supplied securely at build/runtime rather than hardcoded. No obfuscated code, remote script execution, or malicious patterns detected beyond these credential handling concerns. Recommend hardening token management (in-memory handling, proper OAuth flows), removing sensitive logs, and securing configuration for analytics.
A PowerShell script that enrolls devices into Windows Autopilot using Azure App Registration credentials. Works without hybrid Azure AD join or SCCM, enabling unattended deployment via RMM tools. Uses community hardware hash collection module for reliable device registration.
Autopilot Management is a Windows-based Intune utility that simplifies Autopilot device administration. It supports searching by serial number or device name, bulk updates to Group Tags, bulk or single deletions, and uploading hardware hashes. It can load and verify devices from CSV, backup data, and query with an optional cache for large environments. Authentication uses Azure Graph tools (MFA supported) for secure admin access.
AutopilotGroupTagger is a PowerShell-based utility for bulk updating and managing Windows Autopilot Device Group Tags, with optional unblocking of devices. It supports updating tags by group, manufacturer, model, purchase order, and interactive selection, plus exporting data and creating dynamic Entra ID groups. The tool runs with Microsoft Graph authentication and supports PowerShell 7 on Windows/macOS, including a whatIf simulation mode and Community Tool status.
A PowerShell-based GUI application for streamlined device lifecycle management across Microsoft cloud services. Enables bulk device offboarding from Intune, Autopilot, and Entra ID from a single interface. Features real-time dashboard analytics, stale device tracking, automatic BitLocker and FileVault key retrieval, CSV/TXT import for bulk operations, and pre-built playbooks for automated workflows.