Loading
PS Script
Verified
Updated Sep 2024Intune App Factory
Intune App Factory is a set of PowerShell scripts run in an Azure DevOps Pipeline that automatically detects, downloads, packages, and publishes onboarded applications as Win32 apps to Microsoft Intune, ensuring up-to-date deployments. It supports onboarding via manifests, integrates the PowerShell App Deployment Toolkit, and automates version checks from Winget, Evergreen, or Storage Account sources to streamline packaging and publishing.
Works with
WindowsWin32 AppsGraph APIAzure DevOpsWinget
Screenshots
Security Analysis
6of 6
All Checks Passed
22 files scanned on Sep 20, 2026
No Obfuscated Code
No Remote Execution
No Credential Theft
No Data Exfiltration
No Malicious Patterns
No Hardcoded Secrets
AI Analysis
Overall assessment: The code appears to align with a standard Intune App Deployment Toolkit pattern and does not show obvious malicious behavior such as remote script execution, credential harvesting, or data exfiltration. The primary security concerns are the process-level execution policy bypass and the reliance on a locally loaded toolkit (AppDeployToolkitMain.ps1) which necessitates strong integrity controls (code signing, hashing, secure distribution). No direct use of Graph API, remote URLs, or credential theft patterns detected in the provided snippets.
You might also like
PS Script
James Robinson
IntuneComplianceMaintainer
IntuneComplianceMaintainer is a PowerShell automation script that keeps Microsoft Intune compliance and app-protection policies up to date with the latest supported OS minimums across iOS, iPadOS, macOS, Android, and Windows. It uses endoflife.date and the Graph Windows Update Catalog to drive cadence-based updates, with flexible authentication (Managed Identity, App Registration with certificate or secret, plus Key Vault integration) and safety features like dry-run and downgrade protection. It provides comprehensive logging and built-in retry logic for resilience.
James RobinsonPowerShell Module
Stephan van Rooij
Wintuner
WinTuner is a tool that lets you take any WinGet app and upload it to Intune in minutes. It automates downloading the installer and logo, generates the intunewin package, creates the required deployment script details, and publishes the app to Intune. It also ships a PowerShell module for automation and includes documentation to guide you through the process.
Stephan van RooijPS Script
Espen Jaegtvik
Autopilot Management
Autopilot Management is a Windows-based Intune utility that simplifies Autopilot device administration. It supports searching by serial number or device name, bulk updates to Group Tags, bulk or single deletions, and uploading hardware hashes. It can load and verify devices from CSV, backup data, and query with an optional cache for large environments. Authentication uses Azure Graph tools (MFA supported) for secure admin access.
Espen JaegtvikPS Script
Nick Benton
AutopilotGroupTagger
AutopilotGroupTagger is a PowerShell-based utility for bulk updating and managing Windows Autopilot Device Group Tags, with optional unblocking of devices. It supports updating tags by group, manufacturer, model, purchase order, and interactive selection, plus exporting data and creating dynamic Entra ID groups. The tool runs with Microsoft Graph authentication and supports PowerShell 7 on Windows/macOS, including a whatIf simulation mode and Community Tool status.
Nick Benton