IntuneTenantCloneKit
1.0.1
Reliably clone a Microsoft Intune configuration from one tenant to another (SOURCE -> TARGET): export, correct the classic serialization pitfalls, import, remap assignments by name, plus backup-grade helpers (checksums/verify, drift compare) and AI-assisted recreation for the manual remainder.
Minimum PowerShell version
7.4
Installation Options
Owners
Copyright
(c) 2026 Houmak / Minerva IA. Released under the MIT License.
Package Details
Author(s)
- Houmak
Tags
Intune MicrosoftGraph MEM Endpoint MDM Migration Backup Windows
Functions
Export-IntuneConfiguration Import-IntuneConfiguration Compare-IntuneExport Test-IntuneExport Copy-IntuneAssignment New-IntuneAppIdMap Remove-IntuneImportedObject Restore-IntuneScriptContent Restore-IntuneOmaSecret Invoke-IntuneAIAssist Convert-IntunePortalCapture Publish-IntuneApp New-IntuneCloneAppRegistration
PSEditions
Dependencies
-
- Microsoft.Graph.Authentication (>= 2.0.0)
Release Notes
1.0.1
- FIX (blocker): the Graph pagination helper Get-All returned ",$all", which the callers
collapsed with "@(Get-All ...)" into a single-element array. The per-family foreach then
iterated once over the WHOLE collection, so the per-item id became a space-joined list and
the per-item URL became "endpoint/<id1> <id2> ...", failing with "The provided URL is not
valid" and exporting 0 objects (except single-item families). Now streams "return $all".
Affected: Export-IntuneConfiguration and Copy-IntuneAssignment.
1.0.0
- First PowerShell Gallery release of the intune-tenant-clone-kit as a module.
- Core cmdlets: Export-IntuneConfiguration, Import-IntuneConfiguration (settings inline,
array preservation, scheduledActionsForRule injection, name-based idempotence, -NamePrefix),
Copy-IntuneAssignment, New-IntuneAppIdMap, Remove-IntuneImportedObject.
- Backup-grade helpers: Test-IntuneExport (SHA-256 integrity vs checksums.json),
Compare-IntuneExport (drift between two exports).
- Recovery helpers: Restore-IntuneScriptContent, Restore-IntuneOmaSecret.
- Assist helpers (never write to a tenant): Invoke-IntuneAIAssist, Convert-IntunePortalCapture,
Publish-IntuneApp (experimental), New-IntuneCloneAppRegistration.
- Requires PowerShell 7.4+ and Microsoft.Graph.Authentication. Conditional Access is imported
best-effort (created disabled). See project LIMITATIONS.md.
FileList
- IntuneTenantCloneKit.nuspec
- IntuneTenantCloneKit.psd1
- IntuneTenantCloneKit.psm1
- Public\Compare-IntuneExport.ps1
- Public\Convert-IntunePortalCapture.ps1
- Public\Copy-IntuneAssignment.ps1
- Public\Export-IntuneConfiguration.ps1
- Public\Import-IntuneConfiguration.ps1
- Public\Invoke-IntuneAIAssist.ps1
- Public\New-IntuneAppIdMap.ps1
- Public\New-IntuneCloneAppRegistration.ps1
- Public\Publish-IntuneApp.ps1
- Public\Remove-IntuneImportedObject.ps1
- Public\Restore-IntuneOmaSecret.ps1
- Public\Restore-IntuneScriptContent.ps1
- Public\Test-IntuneExport.ps1