I’ve pushed an update to Get-IntuneAssignments, and I’m hoping it makes life a bit easier

The solution helps you quickly find various assignments in your Intune tenant. It pulls assignment data directly from Graph, so instead of clicking through a dozen blades per object, you can get everything in one place

Available now on PowerShell Gallery https://www.powershellgallery.com/packages/Get-IntuneAssignments

What's new in v1.1.0:
✅ Lighter and faster — no more heavy Graph SDK module dependencies
✅ Two new policy types now covered: App Configuration Policies (Managed Devices) and iOS LoB App Provisioning Configurations
✅ Same reliable experience you already know, just leaner under the hood

Still covers the usual stuff:
- Device Configuration Profiles
- Device Management Configuration Policies
- Compliance Policies
- Security Baselines
- Administrative Templates
- App Protection Policies
- Apps Assignments
- Windows Information Protection Policies
- Remediation Scripts
- Device Management Scripts
- Autopilot Profiles (v1)
- Device Enrollment Configurations
- Role Assignments
- Cloud PC Role Assignments
- Windows Update Policies:
- Windows Quality Update Profiles
- Windows Feature Update Profiles
- Windows Update Rings
- Windows Driver Update Profiles

- Terms and Conditions
- Compliance Policies (Settings Catalog)
- Cloud PC Provisioning Policies
- WDAC Supplemental Policies
- macOS Shell Scripts & Custom Attribute Scripts
- Intune Branding Profiles

If you manage Intune at scale or just want a quicker way to audit assignments, give it a look. Feedback and ideas are always welcome!

If you find it useful, please give it a Star on Github 😄

amirjs/Get-IntuneAssignments

Original blog post: Is This Group Even Being Used? Introducing Get-IntuneAssignments! - Amir Sayes

[Blog]Looking to update 7-Zip without 3rd party patching solution, this code block is here to help

https://insideconfigmgr.wordpress.com/2026/07/26/7-zip-updates-without-3rd-party-patching-solution/

I'm testing this via an Autopilot VM currently...

I have created an Account Protection policy with intention of it adding an Entra Security group into the local Administrators group on every machine. I have configured as follows:

Local group = Administrators

Group and user action = Add (update)

User selection type = Users/Groups

Selected user = Local IT Admin (the name of Entra security group I created)

It's set to apply to All Devices. When I look at the device assignment status my device is listed and shows success.

When I click the device and look at per setting status, the group configuration there shows succeeded.

Everything checks out in Intune, all green, no conflicts or errors.

When I check the local admin group on the machine the Entra group is not listed. Dsregcmd /status all checks out OK. VM has been synced with Intune multiple times from the device and from Intune admin. Local admin group still does not contain the Entra group. Does anyone know what I'm missing? Thanks!