IntuneComplianceMaintainer is a PowerShell automation script that keeps Microsoft Intune compliance and app-protection policies up to date with the latest supported OS minimums across iOS, iPadOS, macOS, Android, and Windows. It uses endoflife.date and the Graph Windows Update Catalog to drive cadence-based updates, with flexible authentication (Managed Identity, App Registration with certificate or secret, plus Key Vault integration) and safety features like dry-run and downgrade protection. It provides comprehensive logging and built-in retry logic for resilience.
2 files scanned on Sep 20, 2026
No security issues detected. Code appears safe for an Intune management tool.
Intune App Factory is a set of PowerShell scripts run in an Azure DevOps Pipeline that automatically detects, downloads, packages, and publishes onboarded applications as Win32 apps to Microsoft Intune, ensuring up-to-date deployments. It supports onboarding via manifests, integrates the PowerShell App Deployment Toolkit, and automates version checks from Winget, Evergreen, or Storage Account sources to streamline packaging and publishing.
A PowerShell application with WPF GUI for managing Microsoft Intune and Azure policies. Features export, import, copy, delete, document, and compare operations across 30+ object types with cross-tenant migration, ADMX import, bulk operations, and automated documentation.
A collection of community-tested PowerShell scripts for automating Microsoft Intune management tasks. Features device lifecycle management, compliance reporting, application deployment automation, and threat detection workflows. Scripts support both local execution and Azure Automation Runbook deployment with automatic environment detection for authentication. Uses direct Graph API access for minimal dependencies and easier troubleshooting.
TenuVault is a desktop app for Windows and macOS that backs up and restores Microsoft Intune configuration through Microsoft Graph using your own delegated admin sign-in. It backs up Settings Catalog, compliance, endpoint security, Administrative Templates, scripts and other supported policy types with their assignments, stores backups encrypted with AES-256-GCM on your device (or in your own Azure storage on Pro and MSP), detects configuration drift and deploys OpenIntuneBaseline. The free Community plan covers one tenant with weekly backups and restores items as unassigned copies; paid Pro and MSP plans add daily schedules and in-place restore, and MSP adds cross-tenant recovery. TenuVault Desktop succeeds the original PowerShell script and hosted web portal, which remains available for existing users.