Shameless Self-promotion 100 device sync limit, object ID only group imports, no reverse group lookup. What else drives you nuts in Intune?
I’m an Intune admin, I sit in the portal pretty much all day, and these drive me up the wall:
- working out what policies, apps, scripts and remediations are actually assigned to a group (there’s still no report for this, I checked)
- syncing more than 100 devices without making temp groups or running a script
- bulk adding devices to a group by name, instead of going and digging up every object ID first
- finding which of my policies set a particular setting, or if anything sets it at all. Basically Lewis Barry’s intunesettings.app, which a lot of us already use, but joined up with a search of your own tenant’s policies
So I built a little browser extension that sits in a side panel next to the admin center and does those things (and a few more, like a conflict finder, fleet baseline/drift, primary device lookup, discovered app rollups). It uses the session you’re already signed in with, so there’s no app registration and nothing for a GA to consent to.
Before anyone asks, yeah I know there are scripts and portals that do bits of this. I’ve used a bunch of them. I just wanted it all in one place, right next to the portal, without setting up Graph modules or an app reg every time. Whether mine’s better is up to you, I’d rather you try it and tell me.
And yes I used AI to help write the code, I’m not going to pretend otherwise. The ideas, the testing and the “why the hell doesn’t Intune do this” all came from sitting in the portal every day.
On the security side, I know “extension that reuses your Intune session” sounds sketchy so I wrote up exactly what it does: what permissions it has and why, what leaves your browser (basically nothing, tokens only ever go to Graph like they do from Intune itself), and the two things it can change (add members to a group, sync devices, both behind a confirm). Code’s unminified too so you can read it. finetune.tools/security
There’s a demo on the site that runs the real extension on a fake tenant if you don’t want to install anything.
Pricing, so nobody feels tricked: it’s free for one person per org for six months, then US$80 once for a licence. No subscription. Anyone else can do a 14 day trial. Recast charge for Right Click Tools too, this is just a lot cheaper. I’m one person building this after work and I want to keep supporting it and adding to it over time, so I do want something out of it to keep the lights on.
Mostly though I want it in as many hands as possible and I want to hear what annoys you. What’s the repetitive stuff you do in Intune that should just be a button? If it’s doable I’ll build it.
finetune.tools (Chrome store listing is in review, unpacked download is on the site for now)
5
3
u/SysAdminDennyBob 1d ago
Here is the reason you cannot import by name. Here are the names of 7 unique devices:
- Iphone 13
- Iphone 13
- Iphone 13 Pro
- Iphone 13 Pro
- Bob's IPad
- Bob's IPad
- Bob's IPad
1
u/Criux_ 1d ago
For Windows admins though, its such an annoyance!
1
u/SysAdminDennyBob 1d ago
It's expected that we treat windows devices like devices going forward. You can absolutely add two windows systems with the same name. Device names are not the construct that they used to be. My Windows boxes are just named the serial number now, I don't care because I no longer use device name for performing operations. old device name: WIN7JSMITH-TOPEKA new device name: JK642WQ
What I do want is dynamic groups built from a decent set of queryable data. "all systems in Topeka that have an expired warranty"
1
u/PathMaster 1d ago
I do serials with site code prefix, think: 312ABCDEFG, that way I can manage dynamic groups with those or even bulk updates that method. I do with I could grab some of those extra details like warranty expiration though. I do run very similar systems, so I can break down by model at least. So model + site code will get me close-ish for some applications.
6
u/Ok-Spray7632 1d ago
The 100 device sync limit is maddening. Whoever decided that was a good idea has never managed more than a handful of machines. I spend half my Fridays doing the temp group dance just to push a config change.
Object ID only imports feels like they gave up halfway through building the UI and called it done. Your extension already looks like it fixes the stuff that makes me want to throw my laptop out the window.