🔧 Community Tools

🔧Intune👁

IntuneManagement

Mikael Karlsson · MVP

Full PowerShell GUI to backup, restore, compare and export every Intune object via Graph API. The definitive Intune config management tool.

📦Intune👁

Win32App Migration Tool

Ben Whitmore · byteben.com

Converts ConfigMgr/SCCM applications into Intune-ready Win32 packages automatically — saves hours of manual repackaging.

🔄Intune👁

IntuneCD

Almen Córner · Community

GitOps and CI/CD pipeline for Intune. Export, version-control, test and redeploy your entire Intune configuration as code.

📡Intune👁

Graph X-Ray

Merill Fernando · MVP

Browser extension that captures every Graph API call fired by any Microsoft portal — perfect for building Intune automation scripts.

📋Intune👁

Patch My PC

Patch My PC Ltd

Third-party app patching built for Intune and SCCM. Supports 1,200+ applications with automatic update detection and deployment.

📁Intune👁

cmtrace.dev

Salzmann · Auer · Open Source

Modern browser-based CMTrace replacement. Drag-and-drop .log files for instant analysis — no install, no setup, works anywhere.

🛡️Entra👁

Maester

Merill Fernando · MVP

Automated M365 and Entra ID security test framework. Run 200+ tests against your tenant and get a clear pass/fail scored report.

🔬Entra👁

AADInternals

Dr. Nestori Syynimaa

Deep-dive Entra ID PowerShell toolkit used globally by security teams for tenant assessments, token analysis, and research.

💾Entra👁

Microsoft Entra Exporter

Microsoft · Community

Export your entire Entra ID configuration to JSON for backup, drift detection, or infrastructure-as-code workflows.

🔑Entra👁

MSIdentityTools

Microsoft Identity Team

Swiss army knife for Entra ID — token inspection, CA policy analysis, MFA status reports, and dozens more identity cmdlets.

🩺Entra👁

AzureAD Assessment

Microsoft · Community

Tenant health-check tool that analyses your full Entra ID config, scores it, and outputs prioritised recommendations.

☁️Windows👁

OSDCloud

Gary Blok · MVP

Cloud-native Windows OS deployment with no PXE, no MDT, no WDS. Deploys straight from WinPE via the internet — modern imaging.

🏷️Windows👁

AutopilotBranding

Michael Niehaus · Microsoft

Custom OOBE branding during Autopilot enrollment — set wallpaper, language, timezone, and company info via a simple Intune script.

🔁Windows👁

PSWindowsUpdate

Michał Gajda · Community

PowerShell module to query, download and install Windows Updates programmatically. Essential for scripted patch management at scale.

🔍Windows👁

Sysinternals Suite

Mark Russinovich · Microsoft

ProcMon, Process Explorer, Autoruns, PsExec and 70+ tools. The gold standard for Windows troubleshooting — trusted since 1996.

📐M365👁

Microsoft365DSC

Brian Alderman + community

Infrastructure-as-Code for every M365 workload — Teams, Exchange, SharePoint, Intune, Entra, Defender. Export, test and redeploy configs.

🏢M365👁

CIPP

Kelvin Tegelaar · Community

Open-source multi-tenant M365 management platform built for MSPs. Manage hundreds of tenants from one pane of glass.

🦅M365👁

HAWK

Jonathan Butler · Community

M365 incident response and forensics toolkit. Automatically gathers audit logs, sign-in data and mailbox activity for IR investigations.

🦉M365👁

ORCA

Cam Murray · MVP

Analyses your EOP and Defender for Office 365 configuration against Microsoft best practices — outputs a detailed scored report.

🤝M365👁

PnP PowerShell

Microsoft 365 PnP Community

Thousands of PowerShell cmdlets for SharePoint, Teams, and M365 automation. The community standard for M365 scripting.

⚡W365/AVD👁

Nerdio Manager

Nerdio

Enterprise AVD and Windows 365 management with autoscaling, cost analytics, image management, and simplified operations.

🚀W365/AVD👁

AVD Accelerator

Microsoft · Community

Automated reference architecture for Azure Virtual Desktop. Deploys a secure, production-ready AVD environment in under an hour.

🧰W365/AVD👁

EUC Toolbox

EUC Community

Community aggregator for EUC, AVD and VDI tools, scripts and templates. Curated by engineers who live in the VDI world.

🎯Defender👁

PSADT

PSAppDeployToolkit Project

Enterprise-grade PowerShell app packaging framework. Used globally for Defender, Intune and SCCM deployments with advanced UI and logging.

🔎Defender👁

Defender Hunting Queries

Microsoft · Community

800+ MITRE ATT&CK-mapped KQL hunting queries for Microsoft Defender XDR. Community-contributed and production-ready.

🌐Defender👁

Microsoft Sentinel KQL

Microsoft · Community

Hundreds of data connectors, detection rules, workbooks and hunting queries for Microsoft Sentinel from the global IT community.

🛡️Intune👁

WDAC Wizard

Microsoft

Official Microsoft GUI for building and editing Windows Defender Application Control (WDAC) policies — no XML editing required. Far simpler than writing policy XML by hand.

🔍Intune👁

Intune Debug Toolkit

Oliver Kieselbach

Windows GUI that shows exactly which Intune policies apply to a device in real time, with conflict detection and compliance state. Invaluable for troubleshooting.

📊Intune👁

Endpoint Analytics

Microsoft

Built into Intune — tracks device startup performance, app reliability scores and proactive remediations across your fleet. Spot slow devices before users complain.

🔧Entra👁

IdFix

Microsoft

Scans on-prem Active Directory for object errors — duplicate UPNs, invalid characters — before you run Entra Connect. Prevents sync failures from day one.

🩻Entra👁

Entra Connect Health

Microsoft

Monitor hybrid identity infrastructure — ADFS, Entra Connect Sync, AD DS — with alerts and diagnostics built into the Entra portal.

📦Entra👁

WPNinjas Conditional Access

Daniel Chronlund · MVP

The community baseline for Conditional Access policy design — used by thousands of tenants as a starting framework for zero-trust deployments.

❓Windows👁

WhyNotWin11

Robert C. Maehl

Open-source tool that checks every Windows 11 hardware requirement and explains exactly why a device cannot upgrade — far more detail than Microsoft's PC Health Check.

📋Windows👁

Policy Analyzer

Microsoft

Compare Group Policy Objects and Security Baselines side by side — instantly spot conflicts, gaps and differences across multiple GPO sets and Microsoft baselines.

🔎Windows👁

SetupDiag

Microsoft

Automatically analyses Windows upgrade failure logs and identifies the exact root cause. Built into Windows 11 setup — also available as a standalone tool.

🏗️Windows👁

MDT (Deployment Toolkit)

Microsoft

The traditional task-sequence-based Windows imaging toolkit for on-prem and hybrid shops not yet on Autopilot. Still the backbone for many enterprise deployments.

🗜️Windows👁

NTLite

NTLite

Windows image customisation tool — strip components, inject drivers and updates, apply tweaks, and create slimmed-down ISOs for faster deployment.

🔗M365👁

Microsoft Graph PowerShell

Microsoft

Official PowerShell SDK for Microsoft Graph — replaces the deprecated AzureAD and MSOnline modules. The modern standard for all M365 and Entra scripting.

📤M365👁

SharePoint Migration Tool

Microsoft

Free Microsoft tool to migrate file shares and on-prem SharePoint content to SharePoint Online and OneDrive at enterprise scale — no third-party license needed.

🌐M365👁

Remote Connectivity Analyzer

Microsoft

Test Exchange, Teams, Outlook and auth connectivity from Microsoft's own infrastructure. First stop for diagnosing mail flow failures, auth loops and hybrid issues.

📧M365👁

ExchangeOnlineManagement

Microsoft

The official PowerShell module for Exchange Online — modern auth, REST-based cmdlets, and the only supported path for bulk mailbox and transport rule management.

🗺️Defender👁

Attack Surface Analyzer

Microsoft

Compares system state before and after a software installation to surface new attack vectors — ideal for hardening reviews, app packaging and change tracking.

🔍Defender👁

KQL Search

Community

Community-driven KQL query library for Microsoft Sentinel and Defender XDR — search, discover and reuse hundreds of production-ready hunting and detection queries.

🧪Defender👁

Atomic Red Team

Red Canary

Library of small, portable tests mapped to MITRE ATT&CK. Run in your own environment to validate that Defender detects techniques before attackers use them.