Managing Intune Objects

Intune Commander provides a unified interface for managing over 30 types of Intune objects across device configurations, compliance policies, applications, and identity policies.

​

Navigation Structure

The app organizes Intune objects into logical navigation groups:

​

Devices

• Device Configurations
• Compliance Policies
• Settings Catalog
• Administrative Templates
• Endpoint Security
• Device Categories
• Device Health Scripts
• Compliance Scripts
• Feature Updates
• Device Management Scripts (PowerShell)
• Device Shell Scripts (macOS)

​

Applications

• Applications
• Application Assignments
• App Protection Policies
• Managed Device App Configurations
• Targeted Managed App Configurations
• VPP Tokens

​

Enrollment

• Enrollment Configurations
• Autopilot Profiles
• Apple DEP
• Cloud PC Provisioning Policies

​

Identity & Access

• Conditional Access
• Named Locations
• Authentication Strengths
• Authentication Contexts
• Terms of Use

​

Tenant Admin

• Scope Tags
• Role Definitions
• Role Assignments
• Assignment Filters
• Policy Sets
• Intune Branding
• Azure Branding
• Terms and Conditions
• Cloud PC User Settings
• ADMX Files
• Reusable Policy Settings

​

Groups & Monitoring

• Dynamic Groups
• Assigned Groups
• Mac Custom Attributes
• Notification Templates

​

Loading Data

​

Initial Connection

When you connect to a tenant, Intune Commander loads core object types automatically:

• Device Configurations
• Compliance Policies
• Applications
• Settings Catalog Policies

Status updates appear in the bottom status bar showing progress.

​

Lazy Loading

Other object types use lazy loading—they’re loaded only when you navigate to that category for the first time:

1. Click a category in the navigation tree
2. The app checks if data is cached
3. If cached, data loads instantly from disk
4. If not cached, the app fetches from Graph API
5. Data is cached for future visits

This approach reduces initial connection time and API calls.

​

Manual Refresh

To reload data from Microsoft Graph:

​

Viewing Objects

​

Data Grid View

Most object types display in a searchable data grid:

• Columns: Display name, type, platform, created date, last modified date, etc.
• Sorting: Click column headers to sort ascending/descending
• Filtering: Use the search box to filter by name or other fields
• Selection: Click a row to view details in the side panel

​

Detail Panel

When you select an object, the detail panel shows:

• Properties: All object properties in a scrollable list
• Raw JSON: Click “View Raw JSON” to inspect the full Graph API response
• Assignments: For assignable objects, see group assignments (include/exclude)

​

Overview Dashboard

The Overview category provides a visual dashboard powered by LiveCharts with real-time analytics computed from loaded data. Tenant Summary Card:

• Tenant name and ID
• Cloud environment (Commercial, GCC, GCC-High, DoD)
• Active profile name

Policy & App Counts:

• Device Configurations count
• Compliance Policies count
• Applications count (total and unassigned)
• Settings Catalog policies
• Endpoint Security intents
• Administrative Templates
• Conditional Access policies
• Enrollment Configurations
• Scripts (PowerShell, macOS shell, health scripts)
• App Protection policies

Visual Analytics:

• Applications by Platform — Pie chart showing distribution across Windows, iOS, Android, macOS, web
• Configurations by Platform — Pie chart showing device configuration breakdown
• Color-coded charts with interactive tooltips

Recent Activity:

• Recently Modified Policies — Last 10 policies sorted by modification date
• Recently Modified Apps — Last 10 apps sorted by modification date
• Click any item to navigate to that category

Quick Navigation Cards: Click dashboard cards to jump directly to a category:

• Device Configurations
• Compliance Policies
• Applications
• Conditional Access
• Settings Catalog

​

Searching and Filtering

​

Global Search

The search box at the top of the data grid filters the current view:

• Searches across Display Name, Description, and other text fields
• Case-insensitive
• Updates results in real-time as you type
• Shows result count: “Showing 15 of 127 items”

Examples:

• Windows → Shows all items with “Windows” in name or description
• W10 → Shows items matching “W10”
• Security → Shows security-related policies

​

Filter by Type

For categories with multiple subtypes (e.g., Device Configurations), the grid automatically includes a Type column:

• Windows10GeneralConfiguration
• IosGeneralDeviceConfiguration
• AndroidDeviceOwnerGeneralDeviceConfiguration
• etc.

Click the column header to sort by type.

​

Filter by Platform

Many grids include a computed Platform column derived from the OData type:

• Windows
• iOS
• macOS
• Android
• Cross-platform

​

Object Types and Properties

​

Device Configurations

Display Name, Platform, Type, Created Date, Last Modified Date, Version Types include:

• Device restrictions
• Wi-Fi profiles
• VPN profiles
• Email profiles
• Certificate profiles

​

Compliance Policies

Display Name, Platform, Type, Created Date, Last Modified Date, Version Settings include:

• Password requirements
• Device health attestation
• System security
• Non-compliance actions

​

Applications

Display Name, Publisher, Platform, Type, Version, Created Date, Last Modified Date Types include:

• Win32 apps
• Microsoft Store apps
• iOS/macOS apps
• Web apps
• Built-in apps

​

Settings Catalog

Name, Platforms, Technologies, Created Date, Last Modified Date, Setting Count, Template Name Features:

• Granular Windows settings
• macOS settings
• Template-based or custom

​

Conditional Access Policies

Display Name, State (Enabled/Disabled/Report-only), Created Date, Last Modified Date Includes:

• User/group conditions
• Cloud app assignments
• Grant controls
• Session controls

​

Working with Assignments

​

Viewing Assignments

For assignable objects (policies, apps, etc.):

1. Select the object in the grid
2. The detail panel shows Assignments section
3. View Include and Exclude groups
4. See assignment intent (Available, Required, Uninstall)

​

Application Assignments View

The Application Assignments category provides a flattened view:

• One row per app + assignment combination
• Shows app details + assignment details in a single row
• Filterable by app name, group, intent
• Exportable to CSV for reporting

Columns include:

• App Name
• Publisher
• App Type
• Assignment Type (Group/All Users/All Devices)
• Target Name
• Install Intent (Required/Available/Uninstall)
• Assignment Settings

​

Group Lookups

​

Dynamic Groups

View all dynamic membership groups:

• Group name
• Membership rule
• Processing state
• Member counts (users, devices, nested groups)

​

Assigned Groups

View all assigned (static) groups:

• Group name
• Member counts
• Security enabled/Mail enabled flags

​

Group Members

Click View Members to see:

• User members
• Device members
• Nested group members

​

Keyboard Navigation

​

Performance Considerations

​

Large Tenants

For tenants with thousands of objects:

• Pagination: Graph API uses pagination automatically (no action required)
• Caching: First load is slow; subsequent loads are instant
• Filtering: Search/filter locally after data is loaded

​

Settings Catalog Export

Settings Catalog policies with hundreds of settings may take several seconds to export. Progress is shown in the status bar.

​

Assignment Reports

Intune Commander includes a powerful Assignment Report feature accessible from the Tools menu. This provides 10 different report modes for analyzing policy and app assignments across users, groups, and devices.

​

Report Modes

​

Additional Report Modes

• All Users Assignments — Auto-run report showing every policy assigned to “All Users” target
• All Devices Assignments — Auto-run report showing every policy assigned to “All Devices” target
• Unassigned Policies — Auto-run report listing policies with zero assignments (potential orphans)
• Empty Group Assignments — Auto-run report showing policies assigned to groups with zero members
• Compare Groups — Select two groups and see assignment differences
• Failed Assignments — Lists assignments with processing errors or conflicts

​

Running a Report

​

Use Cases

Troubleshooting Assignment Issues

• User reports not receiving expected app → Run “User Assignments” report
• Verify group membership is triggering assignments correctly

Audit and Cleanup

• Identify unassigned policies consuming license quota
• Find policies assigned to empty groups (potential cleanup candidates)
• Compare two groups to ensure consistent assignments

Compliance Reporting

• Export “All Policies Overview” for audit documentation
• Verify “All Users” and “All Devices” targeting is intentional

Migration Planning

• Compare group assignments before/after migration
• Document current state with CSV exports

​

Related Topics

• Export/Import Workflows
• Bulk Operations
• Caching
• Debugging