Best Troubleshooting Tools for Microsoft Intune

A PowerShell diagnostic script for analyzing Windows Autopilot deployments. Provides comprehensive details about Autopilot profile settings, policies, apps, and certificate profiles tracked via Enrollment Status Page, with support for local PC analysis and captured log files.

A community-driven repository of 86+ PowerShell detection and remediation scripts for Microsoft Intune Endpoint Analytics. Includes scripts for system health, security hardening, device management, application management, optimization, and diagnostics.

A PowerShell-based GUI tool for visualizing comprehensive Intune device information. Shows Azure AD group memberships, Intune filter assignments, application and configuration targeting, BitLocker recovery keys, LAPS passwords, Autopilot profiles, and remediation script status with color-coded assignment states.

A PowerShell script for analyzing Intune Management Extension logs and creating timeline reports. Tracks Win32App deployments, WinGetApp packages, PowerShell scripts, Proactive Remediations, Custom Compliance, and Autopilot ESP phases with HTML reports and integrated LogViewerUI.

A Windows utility for monitoring and analyzing MDM SyncML protocol activity on Windows 10/11 devices. Features Autopilot hardware hash decoding, NodeCache registry lookup, hex viewer, real-time protocol stream capturing, health attestation status codes, and WiFi/VPN enumeration.

A macOS helper application designed to empower end-users by providing quick access to crucial information and actions. Features a tray menu, dashboard, user identity info, installed apps list, self-service capabilities, knowledge base access, and Company Portal integration.

A comprehensive Windows-based toolbox for troubleshooting Intune-managed devices. Features registry debugging, Autopilot validation, live MDM event monitoring, SyncML visualization, Win32 app redeployment, IME log analysis, and includes IntuneDeviceDetailsGUI, SyncMLViewer, and CMTrace.

A collection of PowerShell detection and remediation scripts for Microsoft Intune. Organized into categories: Device Compliance, Device Configuration, Device Performance, Microsoft Defender AV, Miscellaneous, Reporting, and Toast Notifications for proactive endpoint issue resolution.

Intune Log Reader for Windows delivers real-time analysis and monitoring of the Microsoft Intune Management Extension logs on Windows endpoints. It automatically parses logs, categorizes entries into Device, Applications, Configurations, Compliance, and Sync Status, detects recurring error patterns, and presents insights in a professional dashboard with advanced search and export options. Optional live monitoring updates provide up-to-date visibility for troubleshooting and auditing, built for Windows desktop with Flutter and Dart.

IntuneLogWatch is a macOS application for analyzing Microsoft Intune logs and delivering human-readable insights. It converts raw log data into understandable summaries, highlighting trends and issues for IT admins. Designed to simplify troubleshooting and ongoing monitoring of Intune deployments with clear, actionable information.

The Intune Network Requirements PowerShell tool is a comprehensive script designed to validate whether all required Microsoft Intune and related service endpoints are reachable from a given network. It performs layered tests, including DNS resolution, TCP/UDP connectivity, HTTP/S responses, TLS/SSL validation, and optional CRL verification, to detect issues such as blocked ports, incorrect routing, proxy or TLS interception, and missing endpoint access.

Intune Log Collector is an Azure-based solution that collects logs from Intune-managed devices, including files, directories, and event logs. It deploys a Function App, Storage Account, and Key Vault, with the Remediation script driving log collection per LogsGatherRules.json and uploading a compressed archive to the logs container. Deployments support Azure Template Spec (Bicep/ARM) or direct ARM templates, with optional UI and post-deployment steps.

A PowerShell module for Intune MDM policy reporting and debugging, similar to GPResult. Generates HTML reports showing device information, Intune sync status, applied settings by policy scope, Win32 app assignments, script policies, remediation status, LAPS settings, and certificate assignments.

PowerShell tool for Microsoft Intune that forces an immediate retry of a failed Win32 app deployment by clearing the local IME state for the target AppId and restarting the Intune Management Extension service. It does not uninstall the app or modify files; it only resets local Intune state to bypass the Global Re-evaluation Schedule (GRS) and prompt another install attempt. Includes a WhatIf preview and logs to C:\ProgramData\IME-DeepReset-<AppId>.log.

Windows Autopatch Fix provides intelligent detection and targeted remediation for Windows Update failures on Intune-managed devices. It offers 15 configurable repair steps that execute only when needed, minimizing downtime and system impact, with comprehensive logging and support for 20+ error codes.

GIST - Gist Intune Script Trigger is a compact collection of PowerShell scripts for diagnosing and troubleshooting Intune devices. It features a menu-driven interface accessible via a simple one-liner (iwr gist.ittips.ch | iex) and supports direct gist IDs for quick runs. The scripts require no parameters, have no external dependencies, and prioritize safety by not altering system settings.

A web-based diagnostic tool for troubleshooting Microsoft Intune device registration issues. Analyzes dsregcmd /status output to detect Entra ID and Hybrid Entra ID join states, MDM enrollment status, and provides instant error code mapping with actionable solutions. All processing happens locally in the browser.

macOS Defender Check is a testing toolkit for Microsoft Defender for Endpoint on macOS. It validates MDE installation and health, tests Tamper Protection and Web Protection across multiple browsers, and supports custom URL indicators with CSV import. The suite produces detailed logs and CSV reports to aid pre- and post-deployment validation, troubleshooting, and compliance auditing.