Back to all tools
Desktop AppPackaging

IntunePrepTool

A PowerShell GUI tool for streamlining application packaging for Microsoft Intune. Supports MSI, MSIX, EXE, PowerShell scripts, Winget, Chocolatey, and scheduled tasks. Features automatic script generation, direct Intune upload, registry modifications, shortcuts, and AI-assisted configuration via Azure OpenAI GPT-4.

Works with
WindowsWin32 AppsGraph APIWinget
Created by
Rink Turksma
Rink Turksma
GitHubDownload

Security Analysis

4of 6
2 Issues Found

5 files scanned on Jun 11, 2026

Issues Detected
No Remote Execution
No download-and-execute patterns
Downloads a Winget installer from an external URL (GitHub) and installs it, effectively performing remote code execution on the host. This introduces supply-chain and integrity risks; consider signature verification, pinned versions, and alternative trusted distribution methods.
No Hardcoded Secrets
No API keys or credentials in code
Generated client secret is stored in plaintext in a CSV file (c:\Users\$env:username\.IntunePrepTool\$customername.csv). This exposes credentials to users with access to the machine and risks leakage.
Passed Checks
No Obfuscated Code
No Credential Theft
No Data Exfiltration
No Malicious Patterns
AI Analysis

The IntunePrepTool scripts perform legitimate Graph-based app registration and credential management tasks but contain significant security considerations: plaintext storage of generated secrets in addAppRegPlainText.ps1, credential persistence on the endpoint via New-StoredCredential in addAppReg.ps1, and remote code execution risk from downloading and installing Winget via MicrosoftDesktopApp.ps1. No obfuscated code, no hardcoded secrets in the scripts, and Graph/API usage aligns with expected Intune/Graph workflows. Recommendations: enforce secret handling best practices (secure vault, encryption at rest, minimize plaintext exposure), audit credential storage usage, and implement integrity checks for downloaded binaries.

Screenshots1 / 4

Swipe to see more

You might also like

PowerShell Module

Wintuner

WinTuner is a tool that lets you take any WinGet app and upload it to Intune in minutes. It automates downloading the installer and logo, generates the intunewin package, creates the required deployment script details, and publishes the app to Intune. It also ships a PowerShell module for automation and includes documentation to guide you through the process.

Stephan van RooijStephan van Rooij
Web App

IntuneGet

A web-based tool that automates deploying Windows applications from the Winget package repository directly into Microsoft Intune. Handles the entire deployment pipeline - searching, packaging apps into .intunewin format, and uploading to your Intune tenant. Features AI-powered app discovery, auto-generated detection rules, PSADT v4 support, configurable update policies, pre-upload permission checks, and multi-channel notifications via Slack, Teams, Discord, email, and webhooks. Self-hostable via Docker with embedded SQLite.

Ugur KocUgur Koc
CLI Tool

AutomaTuner

A Python tool that automates packaging and deploying applications from the Winget repository into Microsoft Intune using WinTuner. Features automated packaging, direct publishing, dependency handling, duplicate detection, and report generation with Azure AD authentication.

Ayoub SekoumAyoub Sekoum
Desktop App

Deployment Editor

A visual software packaging editor for creating Windows deployment packages using PSAppDeployToolkit (PSADT). Build automated PowerShell deployment scripts through a GUI with drag-and-drop sequences, project templates, and one-click script generation for SCCM, Intune, WinGet, or task sequences.

Tugay TaskinTugay Taskin