IntuneAssignmentChecker

4.0.0

Analyze and audit Microsoft Intune policy assignments. Check user, group, and device assignments, simulate group membership changes, search policies and settings, generate HTML reports, and more.

Minimum PowerShell version

7.0

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name IntuneAssignmentChecker

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name IntuneAssignmentChecker

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) Ugur Koc. All rights reserved.

Package Details

Author(s)

  • Ugur Koc

Tags

Intune MEM Endpoint Assignment Policy Settings Audit Microsoft Graph

Functions

Invoke-IntuneAssignmentChecker Connect-IntuneAssignmentChecker Get-IntuneUserAssignment Get-IntuneGroupAssignment Get-IntuneDeviceAssignment Get-IntuneAllPolicies Get-IntuneAllUsersAssignment Get-IntuneAllDevicesAssignment New-IntuneHTMLReport Get-IntuneUnassignedPolicy Get-IntuneEmptyGroup Compare-IntuneGroupAssignment Get-IntuneFailedAssignment Test-IntuneGroupMembership Test-IntuneGroupRemoval Search-IntunePolicy Search-IntuneSetting Update-IntuneSettingDefinition

Dependencies

Release Notes

Version 4.0.0:
- BREAKING: Converted from script to PowerShell module (use Install-Module instead of Install-Script)
- Add Option 12: Simulate Group Membership Impact
- Add Option 13: Simulate Removing User from Group
- Add Option 14: Search Policy Assignments (reverse lookup)
- Add Option 15: Search for Specific Settings (across Settings Catalog and Endpoint Security)
- Add terminal-width-aware separators
- Add UPN format validation before network calls
- Normalize y/n prompts to accept Y/y/Yes/yes
- Fix app platform detection showing Windows apps (win32LobApp, winGetApp, microsoftStoreForBusinessApp, officeSuiteApp) as Multi-Platform in HTML report
- Remove deprecated groupPolicyConfigurations (Administrative Templates) policy type
- Migrate deviceStatuses API endpoints
- Fix hardcoded Graph URLs to use dynamic GraphEndpoint
- All features available as individual cmdlets (e.g., Get-IntuneUserAssignment, Search-IntuneSetting)

FileList

Version History

Version Downloads Last updated
4.0.0 (current version) 55 4/21/2026