IntuneHydrationKit

1.1.2

Hydrates Microsoft Intune tenants with best-practice baseline configurations including policies, compliance packs, enrollment profiles, dynamic groups, security baselines, and conditional access starter packs.

Minimum PowerShell version

7.0

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name IntuneHydrationKit

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name IntuneHydrationKit

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) 2026 Jorgeasaurus. All rights reserved.

Package Details

Author(s)

  • Jorgeasaurus

Tags

Intune Microsoft365 Graph Baseline Compliance Security Autopilot MDM Endpoint MEM Azure EntraID ConditionalAccess DeviceManagement

Functions

Connect-IntuneHydration Get-GraphErrorMessage Get-ObfuscatedTenantId Get-OpenIntuneBaseline Get-ResultSummary Import-CISBaseline Import-HydrationSettings Import-IntuneAppProtectionPolicy Import-IntuneBaseline Import-IntuneCompliancePolicy Import-IntuneConditionalAccessPolicy Import-IntuneDeviceFilter Import-IntuneEnrollmentProfile Import-IntuneMobileApp Import-IntuneNotificationTemplate Import-IntuneWinGetApp Initialize-HydrationLogging Invoke-IntuneHydration New-HydrationResult New-IntuneDynamicGroup New-IntuneStaticGroup Test-HydrationKitObject Test-IntunePrerequisites Write-HydrationLog

PSEditions

Core

Dependencies

Release Notes


## v1.1.2

- **Conditional Access:** Fixed policy imports failing when templates contain prefixed OData annotations (e.g. `authenticationStrength@odata.context`); annotations are now stripped recursively while `@odata.type` is preserved.
- **License detection:** Removed Defender for Cloud Apps (`ADALLOM_S_STANDALONE`) and Defender for Identity (`ATA`) service plans from Entra ID Premium P2 detection, so risk-based Conditional Access templates are correctly skipped on tenants without P2.

FileList

Version History

Version Downloads Last updated
1.1.2 (current version) 5 7/12/2026
1.1.1 11 7/6/2026
1.1.0 14 6/26/2026
1.0.1 16 6/20/2026
1.0.0 57 5/31/2026
0.8.1 28 5/26/2026
0.7.1 43 5/8/2026
0.7.0 39 4/26/2026
0.6.1 33 4/16/2026
0.6.0 26 4/5/2026
0.5.1 15 4/1/2026
0.3.4 232 1/18/2026
0.3.3 28 1/11/2026
0.3.1 16 1/9/2026
0.3.0 53 1/5/2026
0.2.9 8 1/5/2026
0.2.8 16 1/3/2026
0.2.7 20 1/1/2026
0.2.6 46 12/22/2025
0.2.5 24 12/18/2025
0.2.3 59 12/14/2025
0.2.2 99 12/9/2025
0.2.1 26 12/8/2025
0.1.1 31 11/28/2025
Show more