Intune Enhancer

The details Intune leaves out: primary users, group sizes, setting checks and more. Read-only. Graph only, no data to developer.

Who uses this device? What does this group actually reach? Is this setting already configured? Intune Enhancer answers in the admin center itself, plus a workspace of read-only tools. • In the admin center: primary user beside every device, quick facts, check-in lights, compliance shields, friendly OS versions, low storage flags, group sizes, app install and policy status counts, filter rules on hover, column widths that stick. • In the workspace: Setting check across every policy, Recent changes, Group impact, Group roster, Cleanup, Stale and duplicates, OS builds, ID decoder. • Private: read-only, talks only to Microsoft Graph, no data to the developer, no tracking, nothing to set up in your tenant. IN THE ADMIN CENTER • Primary user labels: many lists show device names but not who uses them (group members, Discovered apps device lists and others). See each device's primary user right next to its name, so you no longer have to open devices one by one. • Device quick facts: click a label for compliance, OS, last check-in, last logged-on user, enrolment date and ownership at a glance. • Last logged-on user: see when someone other than a device's primary user signed in last, including on shared devices. • Full device names: long device names wrap instead of being cut off. • Jump to Intune: group member lists link devices to Entra. A small icon takes you straight to the device's Intune record instead. • Friendly OS versions: build numbers like 10.0.26100.4349 shown as Win11 24H2 (26100.4349). • Activity light and compliance shield: a traffic light shows how recently each device checked in (green today, yellow this week, orange this month, red longer), and a shield shows its compliance. • Low storage flag: free storage turns orange under 10 GB and red under 5 GB (adjustable). • Column widths: Device name, Policy name, App name and Group name columns open at the width you choose, which Intune itself doesn't remember. Drag a column once and it stays that wide. • Group size hint: device and user counts beside groups in group lists and in a policy's assignments, so you can see how far a policy reaches and spot empty groups. Click a count to open the group. • Filter rule on hover: see what an assignment filter actually matches without opening it. • App install status: how many devices each app installed on and failed on, right in the app list, so failing apps stand out. • Policy status: how many devices each configuration policy succeeded and failed on, right in the Configuration list. IN THE WORKSPACE (its own browser tab) • Setting check: is this setting already configured? Search by name, CSP path, ADMX category or OMA-URI across all your policies, see each value and who it's assigned to, and spot policies that disagree. One click lists deprecated settings still in use. • Recent changes: every policy, profile, script and app by when it was last changed or created, filtered by type and date range. • Group impact: thinking of retiring a group? See everything that references it (policies, apps, scripts, Conditional Access, licences, roles, nested groups) and get a clear verdict. • Group roster: a group's members with primary user, compliance, OS and last check-in. Filter stale devices, copy as a table or save as CSV. • ID decoder: paste any ID or admin center link to find out what it is. • OS builds: how many devices are on each Windows, iOS, Android and macOS release. • Stale and duplicates: devices that stopped checking in, and leftover records from re-imaged devices. • Cleanup: policies, apps and scripts that do nothing: unassigned, exclude-only, or assigned to deleted or empty groups. YOUR DATA STAYS BETWEEN YOU AND MICROSOFT • No data is sent to the developer, or anywhere other than Microsoft. • The extension only talks to Microsoft Graph (graph.microsoft.com), the same service the Intune admin center itself uses. Requests to any other address are blocked in the code. • No analytics, tracking, advertising, licensing checks or error reporting. • Your device list is stored only on your computer. Sign-in tokens are kept in memory and cleared when the browser closes. HOW IT WORKS • Uses the sign-in you already have in the Intune admin center. No app registration, no admin consent, nothing to set up in your tenant. • It can only see what your own Intune role can already see. • Read-only: it never changes anything in your tenant. • Nothing happens until you accept a short disclosure, which opens as soon as you install. WHAT THE LABELS MEAN • A name: the device's primary user (hover for their user principal name). • "Name +1": several Intune devices share that device name; hover to see them all. • "no primary user": a shared or userless device. • "not in Intune": no Intune managed device matches. Works in Google Chrome and Microsoft Edge. Not affiliated with or endorsed by Microsoft. Microsoft Intune is a trademark of the Microsoft group of companies.