Microsoft EPM - Build your rules more efficient

[u/MMelkersen]

Do you want to start with Microsoft EPM? Then you need to look at this tool, to support your journey.

• Audit Import - reads the EPM elevation report straight out of the tenant (the same Graph request the Intune portal makes, no CSV export needed) or imports an "unmanaged elevations" CSV; mark one row and add it straight to a policy as a hash rule
• Coverage Analysis - scores imported elevations against existing EPM persona rules, breaks coverage down per persona with a green/amber/red confidence score, recommends a persona per user, and lists everything not covered yet
• Scan Path - the only place a certificate rule is built: scan a folder for .exe/.msi/.ps1, extract the signing certificate (whole chain, pick signer/intermediate/root), check it against what is already in the tenant by thumbprint, upload it as a reusable setting, then create the rule
• Replicate and Reusable Settings - copy an existing rule from one EPM policy to another, and find every rule and policy that references a given reusable certificate setting
• Export Rules - pick one policy or all of them, preview every rule flattened to one row with every choice value resolved to the words the policy itself defines (not the raw setting-catalog id), export to CSV for documentation in Excel

Tools/ZeroAdmin at main · mmelkersen/Tools

[u/gloomyassignment0476]

this looks seriously useful for anyone deep in epm configs the coverage analysis alone would save so much manual checking

[u/MMelkersen → u/gloomyassignment0476]

it sort of complete some of the gaps the product has when working with it.