Loading
PowerShell Module
Verified
Updated Nov 2025Intune Device Migration
Intune Device Migration off-boards devices from one tenant and automatically joins them to a destination tenant, preserving user data during the transition. Built with PowerShell, Microsoft Graph, and Windows provisioning packages, it enables near-zero downtime cross-tenant migrations, with detailed logging, registry updates, and post-install validation to ensure provisioning packages are applied correctly.
Security Analysis
6of 6
All Checks Passed
5 files scanned on Oct 25, 2026
No Obfuscated Code
No Remote Execution
No Credential Theft
No Data Exfiltration
No Malicious Patterns
No Hardcoded Secrets
AI Analysis
The Intune Device Migration code primarily uses Microsoft Graph API for device tagging, user assignment, and Autopilot registration. However, there are high-risk elements: (1) potential BitLocker decryption via config (DECRYPT), (2) aggressive cleanup removing scheduled tasks and user accounts which could impede security monitoring, and (3) credentials exposure risk from storing client secrets in config.json. Transcript logging may leak sensitive data. Graph usage appears legitimate with proper authentication/permissions, but secret management, auditable change controls, and careful handling of encryption-related actions are strongly recommended.
You might also like
Other
Somesh Pathak
JUMP-IN
JUMP-IN is an all-in-one macOS application that simplifies migrating between MDM solutions, enabling migration to Microsoft Intune or between Intune tenants without data loss. It performs system compatibility checks, automatic MDM detection, backups, profile removal, Company Portal installation, tenant enrollment, and FileVault key rotation to maintain security; typical migration runs in about 15-20 minutes per device.
Somesh PathakPowerShell Module
Maciej Horbacz
Intune-App-Sandbox
Intune-App-Sandbox is a testing utility for PowerShell-based installers packaged with the Win32 Content Prep Tool for Intune deployments. It creates a sandbox workspace (C:\SandboxEnvironment), and adds context-menu options to pack with IntunewinUtil or run tests in a Safe sandbox. It also supports a detection-based test flow and a reusable template script to accelerate building and validating packaging for Win32 apps in Intune.
Maciej HorbaczPowerShell Module
Mark Oldham
IntuneAccess
IntuneAccess is an open-source, read-only PowerShell module that connects Microsoft Intune RBAC, workload targeting, and evidence into a single local report. It correlates admins, groups, policies, devices, apps and updates to produce structured objects and an offline HTML Signal Atlas explorer. It supports findings, resolution guides, snapshot comparisons and export-only datasets without uploading tenant data.
Mark OldhamPowerShell Module
Giovanni Solone
IntuneWinAppUtil GUI
IntuneWinAppUtil GUI is a PowerShell-based WPF wrapper for Microsoft's IntuneWinAppUtil.exe. It streamlines packaging Win32 apps for Intune with auto-download of the latest tool, input validation, path-length checks, and configuration persistence across launches. It also detects PSAppDeployToolkit usage to suggest names and sanitizes invalid filename characters.
Giovanni Solone