Back to all tools
PS ScriptConfiguration

IntuneFirewallMigration

IntuneFirewallMigration is a public-preview tool that migrates Group Policy and local firewall rules into Intune as Settings Catalog policies. It supports selecting specific firewall profiles (Domain, Private, Public) and importing only inbound or outbound rules, using Microsoft.Graph.Authentication with Invoke-MgGraphRequest. The script disables telemetry, requires Graph permissions (DeviceManagementConfiguration.ReadWrite.All), and works with PowerShell 5 or 7 to modernize firewall management in Intune.

Works with
WindowsGraph APISettings Catalog
Created by
Nick Benton
Nick Benton
GitHub

Security Analysis

5of 6
1 Issue Found

22 files scanned on Jan 8, 2026

Issues Detected
No Remote Execution
No download-and-execute patterns
Automatic runtime installation and update of dependencies (Microsoft.Graph.Authentication and ImportExcel) from the PowerShell Gallery without explicit signature verification or pinned versions beyond a few hard-coded checks. This creates a supply-chain risk: downloaded modules could be compromised or malicious if gallery integrity is breached or a rogue package is published.
Passed Checks
No Obfuscated Code
No Credential Theft
No Data Exfiltration
No Malicious Patterns
No Hardcoded Secrets
AI Analysis

The codebase for IntuneFirewallMigration presents security/reliability concerns primarily around runtime dependency installation from external sources without robust verification, potential error handling weaknesses (Break in catch), and a logic-case mismatch in direction filtering that could affect firewall rule processing. No hardcoded secrets detected in the provided segments.

Screenshots

You might also like

PS Script

PowerShell ADMX wizard

PowerShell ADMX Wizard creates custom ADMX/ADML templates from a CSV of registry keys, enabling Windows policies via Intune. It generates GUID-based templates, adds registry entries (STRING, DWORD, BINARY), and logs progress. After creation, upload the ADM/ADML to Intune as Imported ADMX to apply through a configuration profile.

Niklas RastNiklas Rast
PS Script

Feature Update Controller

Feature Update Controller is a remediation package for Microsoft Intune that centralizes Windows feature upgrades with configurable setup, scripts, and custom actions. It generates and manages SetupConfig.ini, prestages Script Modules, and configures Custom Actions to tailor upgrade behavior, including post-install and rollback steps. The solution downloads and applies a manifest.json, stages scripts and actions, and supports updating or removing configurations on devices for a consistent upgrade experience.

Nickolaj AndersenNickolaj Andersen
Desktop App

InToolz

InToolz is a management tool for Microsoft Intune designed to simplify cross-tenant migrations and bulk configuration tasks. It enables tenant-to-tenant copy of Intune content, bulk assignment deployment and removal between groups, profiles, and applications, and mass updates to description fields. Note that the project is a work in progress, with several features planned for future releases.

Jørgen SundetJørgen Sundet
PS Script

Windows Media Creation CLI

Windows Media Creation CLI is a PowerShell-based tool that automates building Windows installation media on a USB drive. It supports Windows 11 (22H2-25H2) and Windows 10, with customizable architecture, language, region and edition, enabling fully automated media creation. It also supports OEM driver injection via AUTOUNATTEND or DISM, single or multi-driver packs, and can generate an installwimdrivers.csv catalog to track installed drivers.

Niklas RastNiklas Rast