3 Releases 4 Tags

RSS Feed

• 4.0.0 15210313cd

  Compare

  4.0.0 — macOS Intune Toolkit Stable

  tomas.kracmar released this 2026-04-16 09:03:05 +00:00 | 4 commits to main since this release

  This release marks the CLI-first pivot for the macOS Intune Toolkit. The legacy WPF application surface has been removed; the supported workflow is now entirely headless PowerShell.

  Highlights

  • Unified launcher — Scripts/Start-IntuneToolkit.ps1 provides a single fzf-based (or numbered) terminal menu for every tool, with tenant caching and name resolution.
  • Browser auth — headless export/import now supports interactive browser authentication without needing an app secret.
  • Declarative baseline deployer — Deploy-IntuneBaseline.ps1 + ConvertTo-IntuneBaseline.ps1 bring YAML-driven, idempotent policy deployment with dry-run support.
  • Bulk assignment manager — add/remove assignments for any policy type (and apps) using the correct bulk /assign endpoint.
  • Auth initializer — Initialize-IntuneAuth.ps1 creates an Entra app registration, patches missing permissions, and stores secrets in the macOS Keychain (or Windows Credential Manager).
  • Bulk rename, device operations, and assignment backup/restore — complete the toolkit for day-to-day tenant operations.

  Fixes & improvements

  • Settings Catalog policies now use the name property and the correct #microsoft.graph.deviceManagementConfigurationPolicyAssignment type.
  • Invoke-GraphRequest throws on HTTP errors instead of returning silent nulls.
  • Group and policy queries support -AllPages for large tenants.
  • Retry logic for transient 5xx/429 errors in rename operations.

  See CHANGELOG_macOS_IntuneToolkit.md for the full details.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)