Skip to main content

​
Quickstart Guide

This guide will help you get Intune Commander up and running quickly. You’ll learn how to build the application, configure your first profile, authenticate, and start viewing your Intune data.

​
Prerequisites Check

Before you begin, ensure you have:
  • .NET 10 SDK installed
  • An Azure AD app registration with Microsoft Graph permissions
  • Tenant ID and Client ID from your app registration
  • Admin consent granted for required permissions
If you haven’t set up your Azure AD app registration yet, see the App Registration Guide for detailed instructions.

​
Download & Build

1

Clone the repository

Clone the Intune Commander repository from GitHub:
git clone https://github.com/yourusername/intune-commander.git
cd intune-commander
2

Build the project

Build all projects using the .NET CLI:
dotnet build
This will restore NuGet packages and compile the application. The build should complete without errors.
3

Run the application

Launch Intune Commander:
dotnet run --project src/Intune.Commander.Desktop
The application window will open and display the login screen.

​
Configure Your First Profile

When you first launch Intune Commander, you’ll see the login screen. You have two options for configuring a profile:

​
Option 1: Manual Profile Creation

1

Enter connection details

Fill in the following fields on the login screen:
  • Profile Name: A friendly name (e.g., “Contoso-Production”)
  • Tenant ID: Your Azure AD tenant ID (GUID)
  • Client ID: Your app registration client ID (GUID)
  • Cloud: Select your cloud environment (Commercial, GCC, GCC-High, or DoD)
  • Auth Method: Choose Interactive (browser) or ClientSecret
2

Save the profile

Click Save Profile to persist your connection details. The profile will be encrypted and saved locally at:
  • Windows: %LOCALAPPDATA%\Intune.Commander\profiles.json
  • Linux: ~/.config/Intune.Commander/profiles.json
  • macOS: ~/Library/Application Support/Intune.Commander/profiles.json

​
Option 2: Import Profiles from JSON

1

Download the template

Download the profile template from the repository:
curl -O https://raw.githubusercontent.com/yourusername/intune-commander/main/.github/profile-template.json
2

Edit the template

Open profile-template.json in your text editor and replace the placeholder values:
[
  {
    "name": "Contoso-Commercial",
    "tenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
    "clientId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
    "cloud": "Commercial",
    "authMethod": "Interactive",
    "clientSecret": ""
  },
  {
    "name": "Fabrikam-GCCHigh",
    "tenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
    "clientId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
    "cloud": "GCCHigh",
    "authMethod": "ClientSecret",
    "clientSecret": "your-client-secret-value-here"
  }
]
3

Import the profiles

In Intune Commander:
  1. Click Import Profiles on the login screen
  2. Select your edited JSON file
  3. Profiles are merged automatically (duplicates are skipped)
  4. Imported profiles appear immediately in the Saved Profiles dropdown
You can configure multiple profiles for different tenants and cloud environments. Intune Commander makes it easy to switch between them.

​
First Login

1

Select your profile

Choose a saved profile from the dropdown, or use the connection details you just entered.
2

Authenticate

Click Connect to begin authentication.For Interactive authentication:
  • A browser window will open
  • Sign in with your Azure AD credentials
  • Grant consent if prompted
  • The browser will redirect to http://localhost:45132 and close automatically
For ClientSecret authentication:
  • Authentication happens silently using the client secret
  • No browser interaction required
3

Wait for connection

Intune Commander will:
  • Establish a connection to Microsoft Graph API
  • Verify your permissions
  • Initialize the Graph client for your cloud environment
  • Load the main application window
macOS Users: Due to Avalonia limitations, interactive browser authentication may not work as expected. Use Device Code authentication or ClientSecret authentication instead.

​
View Your Intune Data

Once connected, you’ll see the main Intune Commander window with a navigation panel on the left.
1

Navigate to a category

Click on any category in the left navigation panel:
  • Overview: Dashboard with charts and statistics
  • Device Configurations: View device configuration policies
  • Compliance Policies: View compliance policies
  • Conditional Access: View conditional access policies
  • Applications: View managed applications
  • And many more…
2

Load data

When you select a category for the first time, click Load to fetch data from Microsoft Graph API. Data is cached locally for 24 hours to improve performance.
3

Explore the data

Use the data grid to:
  • Sort columns by clicking headers
  • Search and filter items
  • View detailed properties
  • Inspect raw JSON responses
  • Export configurations

​
Common First Actions

​
View Dashboard Overview

  1. Click Overview in the navigation panel
  2. The dashboard loads automatically, showing:
    • Total policy counts
    • Charts for device configurations, compliance policies, and applications
    • Conditional Access policy summary

​
Export Configurations

  1. Navigate to any category (e.g., Device Configurations)
  2. Click Load to fetch policies
  3. Click Export and choose a destination folder
  4. Configurations are saved in JSON format organized by type

​
View Conditional Access Policies

  1. Navigate to Conditional Access
  2. Click Load CA Policies
  3. Review policies in the data grid
  4. Click Export PowerPoint to generate a comprehensive presentation

​
Inspect Raw JSON

  1. Navigate to any category and load data
  2. Select an item in the data grid
  3. Click View Raw JSON to see the complete Graph API response
  4. Use this for debugging or understanding policy structures

​
Next Steps

Prerequisites

Review detailed system and permission requirements

App Registration

Learn how to set up Azure AD app registrations for each cloud

Installation Guide

Detailed installation instructions and platform-specific notes

Architecture

Understand how Intune Commander works under the hood

​
Troubleshooting

​
Authentication Fails

  • Verify your Tenant ID and Client ID are correct
  • Ensure admin consent has been granted for Graph API permissions
  • Check that you’re using the correct cloud environment
  • Review the Debug Log window for detailed error messages

​
No Data Appears

  • Verify you have the required Microsoft Graph permissions
  • Check that policies exist in your tenant
  • Clear the cache and reload data
  • Review the Debug Log for API errors

​
Browser Window Doesn’t Open (Interactive Auth)

  • Check that port 45132 is not blocked by a firewall
  • On macOS, use Device Code or ClientSecret authentication instead
  • Ensure the redirect URI http://localhost:45132 is configured in your app registration
Use the Debug Log window (View menu) to see detailed information about Graph API requests, authentication flows, and any errors that occur.

Build docs developers (and LLMs) love

Get started for freeTalk to us