Conditional Access PowerPoint Export

Intune Commander can export Conditional Access policies to a comprehensive PowerPoint presentation. This feature is ideal for:

• Executive briefings
• Compliance audits
• Documentation for change management
• Stakeholder reviews

​

Overview

The PowerPoint export feature uses Syncfusion.Presentation.Net.Core to generate a multi-slide deck that includes:

• Cover slide with tenant name and export timestamp
• Tenant summary with policy counts
• Policy inventory table showing all policies
• Detailed slides for each policy:
  • Policy name and state (Enabled/Disabled/Report-only)
  • User/group conditions (include/exclude)
  • Cloud app assignments
  • Grant controls (MFA, compliant device, etc.)
  • Session controls

​

Using the Feature

​

Presentation Structure

​

Slide 1: Cover

• Title: “Conditional Access Policies”
• Subtitle: Tenant name (from your profile)
• Footer: Export timestamp

​

Slide 2: Summary

• Total policy count
• Breakdown by state:
  • Enabled
  • Disabled
  • Report-only

​

Slide 3: Policy Inventory

Table with columns:

• Policy Name
• State
• Created Date
• Last Modified Date

​

Slides 4+: Policy Details (one per policy)

Each policy gets a dedicated slide: Header: Policy name and state badge Conditions:

• Users: Include (e.g., “All Users”, “Marketing Group”)
• Users: Exclude (e.g., “Break Glass Accounts”)
• Cloud Apps: Include (e.g., “Office 365”, “All cloud apps”)
• Platforms (if specified)
• Locations (if specified)

Grant Controls:

• Require MFA
• Require compliant device
• Require hybrid Azure AD joined device
• Require approved client app
• etc.

Session Controls:

• Sign-in frequency
• Persistent browser session
• App enforced restrictions

​

Current Limitations

If you attempt to export from a non-Commercial tenant, the Export PowerPoint button is disabled.

​

Syncfusion Licensing

The PowerPoint export feature requires a Syncfusion license.

​

For End Users

If you downloaded Intune Commander from the official release, the feature works without any action from you.

​

For Developers and Self-Builders

If you’re building from source or running in development:

​

Community License (FREE)

Syncfusion offers a free community license for:

• Companies/individuals with < $1M annual revenue
• Maximum 5 developers

Register at: https://www.syncfusion.com/sales/communitylicense

​

Commercial License

Required for companies exceeding Community License thresholds. Visit: https://www.syncfusion.com/sales/products

​

Setting Up the License Key

Once you have a license key:

1. Set the environment variable:
   SYNCFUSION_LICENSE_KEY=your-license-key-here
   
2. Restart your IDE or command prompt
3. Build and run the app

​

How the Official Release Gets the Key

The official release CI/CD workflow:

1. Reads SYNCFUSION_LICENSE_KEY from GitHub Actions secrets (stored in codesigning environment)
2. Passes it as -p:SyncfusionLicenseKey=... during dotnet publish
3. The key is baked into the binary as assembly metadata
4. Azure Trusted Signing code-signs the binary
5. The key never appears in source code or git history

​

Troubleshooting

​

Export button is disabled

Cause: One of the following:

• Not connected to a tenant
• No Conditional Access policies loaded
• Tenant is non-Commercial cloud (GCC/GCC-High/DoD)

Solution:

• Ensure you’re connected and have loaded CA policies
• Check your profile’s Cloud setting

​

Watermarks on slides

Cause: Missing or invalid Syncfusion license key Solution:

• Set SYNCFUSION_LICENSE_KEY environment variable
• Restart the app
• If using the official release, this should not happen—report a bug

​

Export fails with “Access Denied”

Cause: Missing Graph API permissions Solution:

• Ensure your app registration has Policy.Read.All or Policy.ReadWrite.ConditionalAccess permission
• Grant admin consent

​

Presentation is incomplete

Cause: Some policies failed to load Solution:

• Check the Debug Log window for Graph API errors
• Re-load Conditional Access policies and try again

​

Comparison with idPowerToys

Intune Commander’s CA PowerPoint export is inspired by idPowerToys by Merill Fernando. Key Differences: Goal: Feature-level parity, not pixel-perfect template matching.

​

Future Enhancements

Planned for future releases:

• GCC/GCC-High/DoD support: Extend to all cloud environments
• Advanced dependency lookups: Resolve named location IDs to IP ranges, auth strength details, etc.
• Custom templates: Allow users to provide their own PowerPoint templates
• Include/exclude filter: Export only selected policies

​

Related Topics

• Managing Conditional Access Policies
• Multi-Cloud Environments
• Debugging
• Troubleshooting