IntuneHydrationKit

0.8.1

Hydrates Microsoft Intune tenants with best-practice baseline configurations including policies, compliance packs, enrollment profiles, dynamic groups, security baselines, and conditional access starter packs.

Minimum PowerShell version

7.0

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name IntuneHydrationKit

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name IntuneHydrationKit

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) 2026 Jorgeasaurus. All rights reserved.

Package Details

Author(s)

  • Jorgeasaurus

Tags

Intune Microsoft365 Graph Baseline Compliance Security Autopilot MDM Endpoint MEM Azure EntraID ConditionalAccess DeviceManagement

Functions

Invoke-IntuneHydration Connect-IntuneHydration Test-IntunePrerequisites New-IntuneDynamicGroup New-IntuneStaticGroup Get-OpenIntuneBaseline Import-IntuneBaseline Import-CISBaseline Import-IntuneCompliancePolicy Import-IntuneAppProtectionPolicy Import-IntuneNotificationTemplate Import-IntuneEnrollmentProfile Import-IntuneDeviceFilter Import-IntuneConditionalAccessPolicy Import-IntuneMobileApp Import-IntuneWinGetApp Initialize-HydrationLogging Write-HydrationLog Import-HydrationSettings New-HydrationResult Get-ResultSummary Get-GraphErrorMessage Test-HydrationKitObject Get-ObfuscatedTenantId

PSEditions

Core

Dependencies

Release Notes


Install directly from the PowerShell Gallery:

```powershell
Install-Module -Name IntuneHydrationKit -Scope CurrentUser
```

To update to the latest version:

```powershell
Update-Module -Name IntuneHydrationKit
```

## v0.8.1

- **Authentication:** Interactive sign-in now uses a themed browser PKCE flow with fresh-token retry and no persistent refresh-token cache.
- **Mobile Apps:** Added bundled WinGet app templates and WinGet-backed Win32 app import support under the Mobile Apps workflow.
- **Pre-flight checks:** Device Filter runs now validate selected Intune workload access before imports and report concise authorization guidance.
- **Runtime permission checks:** Added selected-import access checks and clearer Global Administrator guidance for tenants where PIM-elevated roles may not be accepted by downstream Intune authorization.
- **Mobile Apps:** Fixed new mobile app names to append ` - [IHD]` after the app name instead of prefixing `[IHD]`.
- **Mobile Apps:** Fixed legacy Windows mobile app TemplateId matching for nested Store and M365 templates.
- **Sovereign clouds:** Centralized Graph environment metadata for consistent GCC High and DoD endpoint handling.

FileList

Version History

Version Downloads Last updated
0.8.1 (current version) 0 5/26/2026
0.7.1 27 5/8/2026
0.7.0 37 4/26/2026
0.6.1 25 4/16/2026
0.6.0 25 4/5/2026
0.5.1 15 4/1/2026
0.3.4 231 1/18/2026
0.3.3 27 1/11/2026
0.3.1 15 1/9/2026
0.3.0 52 1/5/2026
0.2.9 7 1/5/2026
0.2.8 15 1/3/2026
0.2.7 19 1/1/2026
0.2.6 45 12/22/2025
0.2.5 23 12/18/2025
0.2.3 58 12/14/2025
0.2.2 97 12/9/2025
0.2.1 25 12/8/2025
0.1.1 30 11/28/2025
Show more