3 Releases 4 Tags

RSS Feed

• v4.1.0 e333af978c

  Compare

  v4.1.0 Stable

  tomas.kracmar released this 2026-04-16 13:43:42 +00:00 | 0 commits to main since this release

  Highlights

  • App registrations are now named after the authenticated Entra user (e.g. IntuneManagement-tomas.kracmar@cqre.net) for better audit-log accountability.
  • Added -Delete and -DeleteApp switches to Initialize-IntuneAuth.ps1 for cleaning up local credentials and Entra app registrations.
  • TUI now has menu items 14 and 15 for auth deletion, and onboarding flows straight into init.
  • Added Accountability & PIM caveats documentation.

  See CHANGELOG_macOS_IntuneToolkit.md for full details.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
• 4.0.1 1ff059342f

  Compare

  4.0.1 — fzf detection and install hints Stable

  tomas.kracmar released this 2026-04-16 09:36:25 +00:00 | 2 commits to main since this release

  This patch release adds user-friendly detection for missing fzf and shows platform-specific install hints before falling back to numbered menus.

  What's new

  • Scripts/Start-IntuneToolkit.ps1 — detects missing fzf at startup and prints install commands for macOS (brew), Linux (apt/dnf/pacman), and Windows (winget/choco).
  • Scripts/Start-IntuneManagementTui.ps1 — same hint behavior for the standalone TUI entry point.
  • README.md — lists fzf as an optional runtime dependency with per-platform install instructions.

  Everything else from 4.0.0 remains unchanged.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
• 4.0.0 15210313cd

  Compare

  4.0.0 — macOS Intune Toolkit Stable

  tomas.kracmar released this 2026-04-16 09:03:05 +00:00 | 4 commits to main since this release

  This release marks the CLI-first pivot for the macOS Intune Toolkit. The legacy WPF application surface has been removed; the supported workflow is now entirely headless PowerShell.

  Highlights

  • Unified launcher — Scripts/Start-IntuneToolkit.ps1 provides a single fzf-based (or numbered) terminal menu for every tool, with tenant caching and name resolution.
  • Browser auth — headless export/import now supports interactive browser authentication without needing an app secret.
  • Declarative baseline deployer — Deploy-IntuneBaseline.ps1 + ConvertTo-IntuneBaseline.ps1 bring YAML-driven, idempotent policy deployment with dry-run support.
  • Bulk assignment manager — add/remove assignments for any policy type (and apps) using the correct bulk /assign endpoint.
  • Auth initializer — Initialize-IntuneAuth.ps1 creates an Entra app registration, patches missing permissions, and stores secrets in the macOS Keychain (or Windows Credential Manager).
  • Bulk rename, device operations, and assignment backup/restore — complete the toolkit for day-to-day tenant operations.

  Fixes & improvements

  • Settings Catalog policies now use the name property and the correct #microsoft.graph.deviceManagementConfigurationPolicyAssignment type.
  • Invoke-GraphRequest throws on HTTP errors instead of returning silent nulls.
  • Group and policy queries support -AllPages for large tenants.
  • Retry logic for transient 5xx/429 errors in rename operations.

  See CHANGELOG_macOS_IntuneToolkit.md for the full details.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)