HomeNewsletterCommunityToolsArchiveBlogAboutQuick Links Subscribe free

🔧 Community Tools

44 free tools built by MVPs and IT professionals — the tools the Microsoft IT community actually uses every day

🔗 Looking for Community Picks? →
Browse GitHub ↗
πŸ”§Intune👁
IntuneManagement
Mikael Karlsson Β· MVP
Full PowerShell GUI to backup, restore, compare and export every Intune object via Graph API. The definitive Intune config management tool.
πŸ“¦Intune👁
Win32App Migration Tool
Ben Whitmore Β· byteben.com
Converts ConfigMgr/SCCM applications into Intune-ready Win32 packages automatically β€” saves hours of manual repackaging.
πŸ”„Intune👁
IntuneCD
Almen CΓ³rner Β· Community
GitOps and CI/CD pipeline for Intune. Export, version-control, test and redeploy your entire Intune configuration as code.
πŸ“‘Intune👁
Graph X-Ray
Merill Fernando Β· MVP
Browser extension that captures every Graph API call fired by any Microsoft portal β€” perfect for building Intune automation scripts.
πŸ“‹Intune👁
Patch My PC
Patch My PC Ltd
Third-party app patching built for Intune and SCCM. Supports 1,200+ applications with automatic update detection and deployment.
πŸ“Intune👁
cmtrace.dev
Salzmann Β· Auer Β· Open Source
Modern browser-based CMTrace replacement. Drag-and-drop .log files for instant analysis β€” no install, no setup, works anywhere.
πŸ›‘οΈEntra👁
Maester
Merill Fernando Β· MVP
Automated M365 and Entra ID security test framework. Run 200+ tests against your tenant and get a clear pass/fail scored report.
πŸ”¬Entra👁
AADInternals
Dr. Nestori Syynimaa
Deep-dive Entra ID PowerShell toolkit used globally by security teams for tenant assessments, token analysis, and research.
πŸ’ΎEntra👁
Microsoft Entra Exporter
Microsoft Β· Community
Export your entire Entra ID configuration to JSON for backup, drift detection, or infrastructure-as-code workflows.
πŸ”‘Entra👁
MSIdentityTools
Microsoft Identity Team
Swiss army knife for Entra ID β€” token inspection, CA policy analysis, MFA status reports, and dozens more identity cmdlets.
🩺Entra👁
AzureAD Assessment
Microsoft Β· Community
Tenant health-check tool that analyses your full Entra ID config, scores it, and outputs prioritised recommendations.
☁️Windows👁
OSDCloud
Gary Blok Β· MVP
Cloud-native Windows OS deployment with no PXE, no MDT, no WDS. Deploys straight from WinPE via the internet β€” modern imaging.
🏷️Windows👁
AutopilotBranding
Michael Niehaus Β· Microsoft
Custom OOBE branding during Autopilot enrollment β€” set wallpaper, language, timezone, and company info via a simple Intune script.
πŸ”Windows👁
PSWindowsUpdate
MichaΕ‚ Gajda Β· Community
PowerShell module to query, download and install Windows Updates programmatically. Essential for scripted patch management at scale.
πŸ”Windows👁
Sysinternals Suite
Mark Russinovich Β· Microsoft
ProcMon, Process Explorer, Autoruns, PsExec and 70+ tools. The gold standard for Windows troubleshooting β€” trusted since 1996.
πŸ“M365👁
Microsoft365DSC
Brian Alderman + community
Infrastructure-as-Code for every M365 workload β€” Teams, Exchange, SharePoint, Intune, Entra, Defender. Export, test and redeploy configs.
🏒M365👁
CIPP
Kelvin Tegelaar Β· Community
Open-source multi-tenant M365 management platform built for MSPs. Manage hundreds of tenants from one pane of glass.
πŸ¦…M365👁
HAWK
Jonathan Butler Β· Community
M365 incident response and forensics toolkit. Automatically gathers audit logs, sign-in data and mailbox activity for IR investigations.
πŸ¦‰M365👁
ORCA
Cam Murray Β· MVP
Analyses your EOP and Defender for Office 365 configuration against Microsoft best practices β€” outputs a detailed scored report.
🀝M365👁
PnP PowerShell
Microsoft 365 PnP Community
Thousands of PowerShell cmdlets for SharePoint, Teams, and M365 automation. The community standard for M365 scripting.
⚑W365/AVD👁
Nerdio Manager
Nerdio
Enterprise AVD and Windows 365 management with autoscaling, cost analytics, image management, and simplified operations.
πŸš€W365/AVD👁
AVD Accelerator
Microsoft Β· Community
Automated reference architecture for Azure Virtual Desktop. Deploys a secure, production-ready AVD environment in under an hour.
🧰W365/AVD👁
EUC Toolbox
EUC Community
Community aggregator for EUC, AVD and VDI tools, scripts and templates. Curated by engineers who live in the VDI world.
🎯Defender👁
PSADT
PSAppDeployToolkit Project
Enterprise-grade PowerShell app packaging framework. Used globally for Defender, Intune and SCCM deployments with advanced UI and logging.
πŸ”ŽDefender👁
Defender Hunting Queries
Microsoft Β· Community
800+ MITRE ATT&CK-mapped KQL hunting queries for Microsoft Defender XDR. Community-contributed and production-ready.
🌐Defender👁
Microsoft Sentinel KQL
Microsoft Β· Community
Hundreds of data connectors, detection rules, workbooks and hunting queries for Microsoft Sentinel from the global IT community.
πŸ›‘οΈIntune👁
WDAC Wizard
Microsoft
Official Microsoft GUI for building and editing Windows Defender Application Control (WDAC) policies β€” no XML editing required. Far simpler than writing policy XML by hand.
πŸ”Intune👁
Intune Debug Toolkit
Oliver Kieselbach
Windows GUI that shows exactly which Intune policies apply to a device in real time, with conflict detection and compliance state. Invaluable for troubleshooting.
πŸ“ŠIntune👁
Endpoint Analytics
Microsoft
Built into Intune β€” tracks device startup performance, app reliability scores and proactive remediations across your fleet. Spot slow devices before users complain.
πŸ”§Entra👁
IdFix
Microsoft
Scans on-prem Active Directory for object errors β€” duplicate UPNs, invalid characters β€” before you run Entra Connect. Prevents sync failures from day one.
🩻Entra👁
Entra Connect Health
Microsoft
Monitor hybrid identity infrastructure β€” ADFS, Entra Connect Sync, AD DS β€” with alerts and diagnostics built into the Entra portal.
πŸ“¦Entra👁
WPNinjas Conditional Access
Daniel Chronlund Β· MVP
The community baseline for Conditional Access policy design β€” used by thousands of tenants as a starting framework for zero-trust deployments.
❓Windows👁
WhyNotWin11
Robert C. Maehl
Open-source tool that checks every Windows 11 hardware requirement and explains exactly why a device cannot upgrade β€” far more detail than Microsoft's PC Health Check.
πŸ“‹Windows👁
Policy Analyzer
Microsoft
Compare Group Policy Objects and Security Baselines side by side β€” instantly spot conflicts, gaps and differences across multiple GPO sets and Microsoft baselines.
πŸ”ŽWindows👁
SetupDiag
Microsoft
Automatically analyses Windows upgrade failure logs and identifies the exact root cause. Built into Windows 11 setup β€” also available as a standalone tool.
πŸ—οΈWindows👁
MDT (Deployment Toolkit)
Microsoft
The traditional task-sequence-based Windows imaging toolkit for on-prem and hybrid shops not yet on Autopilot. Still the backbone for many enterprise deployments.
πŸ—œοΈWindows👁
NTLite
NTLite
Windows image customisation tool β€” strip components, inject drivers and updates, apply tweaks, and create slimmed-down ISOs for faster deployment.
πŸ”—M365👁
Microsoft Graph PowerShell
Microsoft
Official PowerShell SDK for Microsoft Graph β€” replaces the deprecated AzureAD and MSOnline modules. The modern standard for all M365 and Entra scripting.
πŸ“€M365👁
SharePoint Migration Tool
Microsoft
Free Microsoft tool to migrate file shares and on-prem SharePoint content to SharePoint Online and OneDrive at enterprise scale β€” no third-party license needed.
🌐M365👁
Remote Connectivity Analyzer
Microsoft
Test Exchange, Teams, Outlook and auth connectivity from Microsoft's own infrastructure. First stop for diagnosing mail flow failures, auth loops and hybrid issues.
πŸ“§M365👁
ExchangeOnlineManagement
Microsoft
The official PowerShell module for Exchange Online β€” modern auth, REST-based cmdlets, and the only supported path for bulk mailbox and transport rule management.
πŸ—ΊοΈDefender👁
Attack Surface Analyzer
Microsoft
Compares system state before and after a software installation to surface new attack vectors β€” ideal for hardening reviews, app packaging and change tracking.
πŸ”Defender👁
KQL Search
Community
Community-driven KQL query library for Microsoft Sentinel and Defender XDR β€” search, discover and reuse hundreds of production-ready hunting and detection queries.
πŸ§ͺDefender👁
Atomic Red Team
Red Canary
Library of small, portable tests mapped to MITRE ATT&CK. Run in your own environment to validate that Defender detects techniques before attackers use them.
💡

Know a tool that should be here?

Share any free tool built for Microsoft IT — Intune, Entra, Windows, M365, Defender or W365/AVD.

🔧 Submit a tool →