v1.1.5 — Free & Open Source

Intune
Backup

A comprehensive Windows GUI and PowerShell CLI for backing up, exporting, comparing, and importing Microsoft Intune configurations. Built with .NET 10 and WPF.

⬡ .NET 10 / WPF 🪟 Windows 10+ v1.1.5
★ View on GitHub 📦 Download Latest
20+
Policy Categories
5
Baseline Sources
CSV
Export Format
100%
Free

Complete Intune Configuration Management

Back up every policy category, compare against security baselines, export to CSV, and import settings — all from one tool.

💾

Full Intune Backup

Back up 20+ policy categories including Device Configurations, Compliance Policies, Settings Catalog, Conditional Access, Endpoint Security, App Configurations, and more.

🔍

Security Baseline Comparison

Compare your live Intune configuration against CIS Benchmarks, DISA STIGs, Microsoft Security Baselines, and custom ADMX/GPO exports. See exactly where you differ.

📊

CSV Settings Export

Export all or selected Intune settings to a single CSV file with Category, PolicyName, SettingName, Value, Platform, AssignedTo, and ExcludedFrom columns.

🖥️

Platform Detection

Every policy and comparison row automatically shows the target OS — Windows, macOS, iOS, Android, Linux, or Cross-Platform — based on the policy’s OData type.

⚠️

Conflict Detection

Before importing baseline settings, the tool scans your existing Intune policies and flags any settings that are already configured — including value mismatches.

📥

Baseline Import

Import security baseline recommendations directly into Intune as ADMX GroupPolicyConfigurations or Settings Catalog stub policies with a comprehensive conflict summary.

📍

Intune Location Mapping

Each baseline comparison row shows the exact Intune portal location where the setting should be configured, eliminating guesswork.

🖱️

Full GUI + CLI

Use the modern WPF desktop application with point-and-click workflows, or automate everything via the PowerShell CLI script with 8 menu options.

📋

Assignment Tracking

See which Azure AD groups each policy is assigned to and excluded from, across every backup and export — no more digging through the Intune portal.

What’s New in v1.1.5

The latest release adds CSV export, platform detection, conflict detection, and a rewritten baseline import engine.

📊 Export Settings CSV

Export all or selected Intune settings to a flat CSV. Supports 20+ policy categories with full assignment tracking. Available in both GUI and CLI (option 8).

🖥️ Applied OS / Platform

Every policy row now shows its target platform. Settings Catalog reads platform from JSON metadata; Device Config and Compliance use OData type mapping.

⚠️ Conflict Detection

Baseline comparison now shows a Conflicts column identifying existing Intune policies that configure the same setting, with value-mismatch warnings before import.

📍 Intune Location Column

The comparison table now includes an Intune Location column showing exactly where in the Intune portal each setting should be configured.

How It Works

Three steps from connection to actionable comparison reports.

  1. Connect to Microsoft Graph

    Authenticate using your Azure AD credentials. The tool uses Microsoft Graph API to read your Intune configuration with read-only permissions.

  2. Back Up Your Configuration

    Select individual categories or back up everything. Policies are saved as JSON files with full metadata, organized by category in timestamped folders.

  3. Compare Against Baselines

    Load a CIS Benchmark, DISA STIG, Microsoft baseline, or custom GPO export. The tool maps baseline settings to your Intune configuration and shows matches, mismatches, and missing settings.

  4. Export or Import

    Export your settings to CSV for reporting, or import baseline recommendations directly into Intune with full conflict detection and summary.

Supported Security Baselines

Compare your Intune configuration against industry-standard security frameworks.

BaselineFormatCoverage
CIS Microsoft Intune for WindowsExcel (.xlsx)Level 1 & Level 2 benchmarks
CIS Microsoft 365Excel (.xlsx)E3 and E5 recommendations
DISA STIGXCCDF (.xml)Windows 10/11 STIG checks
Microsoft Security BaselinesGPO BackupWindows 10/11 security baselines
Custom GPO / ADMXPolicyRules.xml / ADMXAny Group Policy export
💡 Tip The comparison engine automatically detects the baseline format and maps settings to their Intune equivalents. Results include Platform, Intune Location, and Conflicts columns.

Comprehensive CSV Export

Get a complete inventory of your Intune settings in a single, filterable spreadsheet.

What’s Included

ColumnDescription
CategoryPolicy type (Settings Catalog, Device Configuration, etc.)
PolicyNameThe policy’s display name
SettingNameIndividual setting key
ValueCurrent value
PlatformTarget OS (Windows, macOS, iOS, Android, Linux)
AssignedToAzure AD groups receiving the policy
ExcludedFromAzure AD groups excluded from the policy

Supported Categories

Core Policies

Settings Catalog, Device Configurations, Compliance Policies, Endpoint Security (Intents)

Access & Enrollment

Conditional Access, Device Enrollment, Autopilot Deployment Profiles

App Protection

iOS, Android, and Windows app protection policies plus managed app configurations

Updates & Scripts

Windows Feature/Quality/Driver Updates, PowerShell scripts, Shell scripts, Health scripts

Technical Specifications

Runtime

  • .NET 10.0 (self-contained)
  • WPF desktop framework
  • PowerShell SDK 7.4.6
  • No runtime prerequisites

Platform

  • Windows 10 / 11 (x64)
  • MSI installer available
  • Portable single-file EXE
  • CLI script (PowerShell 5.1+)

Authentication

  • Microsoft Graph API
  • Azure AD / Entra ID
  • Read-only scopes for backup
  • Interactive browser auth flow

Output

  • JSON policy backups
  • CSV settings export
  • Comparison reports in GUI
  • ADMX & Settings Catalog import

Frequently Asked Questions

What permissions does the app need?
The tool uses Microsoft Graph with read-only scopes for backup and export. Import operations require write permissions to create policies in Intune. Authentication is handled via interactive browser sign-in to Azure AD / Entra ID.
Can I use the CLI script without the GUI?
Yes. IntuneBackup.ps1 is a standalone PowerShell script with an interactive menu offering 8 options: backup, compare, export, import, and more. It works with PowerShell 5.1+ and requires the Microsoft.Graph.Intune module.
Which security baselines are supported?
CIS Benchmarks (Excel format for Intune for Windows and Microsoft 365), DISA STIGs (XCCDF XML), Microsoft Security Baselines (GPO backup format), and custom Group Policy / ADMX exports.
What does the MSI installer include?
The MSI installs the self-contained GUI executable and PowerShell script to C:\Program Files\Platysoft\Intune Backup. It creates Start Menu and Desktop shortcuts. No .NET runtime installation is required since the app is self-contained.
How does conflict detection work?
Before importing baseline settings, the tool scans all existing Intune policies for settings with the same name. It reports which policies already configure each setting and whether the current value matches or conflicts with the baseline recommendation.
Can I export only specific policy categories?
Yes. In the GUI, check or uncheck categories before exporting. In the CLI, pass the -SelectedCategories parameter with an array of category folder names like @('DeviceConfigurations','CompliancePolicies').
Is the app free?
Yes, completely free and open-source under the MIT license. Source code is available on GitHub at github.com/AresX0/backupINtune.

Ready to Secure Your Intune Configuration?

Download Intune Backup free — back up, compare, export, and manage your Intune policies with confidence.

★ View on GitHub 📦 Download Latest