Introducing The Endpoint Guy Intune Toolkit
Over the last year, I’ve found myself needing to automate more and more tasks in Intune that Intune just couldn’t quite handle on its own.
It started with a simple need: quickly and easily copying Entra ID security groups from one device to another when upgrading a user’s PC. To solve that, I wrote a PowerShell script that leveraged the Microsoft Graph API to identify the groups assigned to one device and copy those memberships over to another device.
As time went on, I continued writing more scripts to automate other repetitive Intune tasks, and before long, things started to get a little out of hand. Which script do I run for which task? How can I make these tools easier for the rest of my IT department and Service Desk to use without requiring them to know how each individual script works?
That led me to build a very basic PowerShell script launcher. Instead of finding and running individual scripts, you could simply launch the tool, select the task you wanted to perform, and go from there. Everything still ran through PowerShell, but it provided a much simpler and more organized way to access the growing collection of automation tools.
It was simple, but it worked, and at the time, it was exactly what I needed.
Then I started thinking: What if this had a graphical interface?
I began experimenting with Claude AI and was able to build a simple GUI that brought the scripts I had already created into one centralized interface. From there, I continued expanding the application, adapting my existing scripts to work directly within the GUI and displaying information and results as changes were being made.
What started as a handful of individual PowerShell scripts had slowly evolved into something much bigger.
All of that eventually led to the creation of the Endpoint Guy Intune Toolkit, a PowerShell-based toolkit that runs locally, authenticates with Microsoft Graph, and provides a simple, centralized way to perform a variety of Intune management and automation tasks.
The initial release includes the automation tools listed below, but this is only the beginning. As I continue working with Intune and discover new opportunities to simplify and automate everyday tasks, I plan to continue expanding the toolkit with new modules, features, and functionality.
Copy Device Groups – Easily copy Entra ID security group memberships from one device to another. This is especially useful when replacing or upgrading a user’s PC and you need to carry over application deployment groups from their previous device.
Remove Device Groups – Quickly remove existing Entra ID security group memberships from a device. This is helpful when reprovisioning a PC for a different user and you need to clean up its previous group assignments.
Bulk Add to Group – Add multiple devices to an Entra ID security group at once by importing a list of device names from a CSV file.
Update Asset Status – Update a device’s Intune management name to reflect its current asset status, such as In-Stock, Assigned, or Recycled.
Bulk Update Asset Status – Update the asset status of multiple devices at once by importing a CSV file containing the device names.
App Dependency Check – Quickly identify which Intune applications depend on another application. This is particularly useful when replacing an existing Win32 application with a newer version, allowing you to identify its dependencies and easily reassign them to the updated application.
Some of these modules also include additional configuration options, allowing you to customize how they work within your environment. Check out the full README on GitHub for more information about each module, configuration options, and usage.
Along with the release of the Intune Toolkit, I’m also excited to officially launch The Endpoint Guy GitHub repository!
This repository will serve as the home for the Endpoint Guy Intune Toolkit, including future updates and new modules as I continue developing it. It will also be where I share other PowerShell scripts, automation tools, and projects that I think could be helpful to other IT administrators.
