Build a Microsoft Intune AI Agent with Foundry

Build a Microsoft Intune AI Agent with Foundry

We’ve all built PowerShell scripts to query Intune, wrapped them in some automation, and called it a day. It works. But with Azure OpenAI Service and models like GPT-4.1 and GPT-5.2 optimized for tool calling, there’s a more interesting approach—building an actual AI agent that can talk to your Intune environment.

Instead of writing a script for every query, you build one agent that understands natural language and calls the Graph API on your behalf. Ask it “which Windows devices are non-compliant?” and it figures out the right API call, executes it, and summarizes the results. It’s not magic—it’s function calling with a nice interface.

In this post, I’ll walk you through two different approaches to building this agent: the classic direct SDK approach and the newer Microsoft Agent Framework. Both use the same underlying Graph API client, but differ in how they orchestrate the AI. Let’s dive in.

Read More »
Convert Intune Device Groups to User Groups via Graph API

Convert Intune Device Groups to User Groups via Graph API

I currently attend at the MMS Fort Lauderdale conference, where an attendee asked a good question: Is it possible to convert a device group into a user group, and vice versa? The answer is both yes and no. While there’s no out-of-the-box functionality in Intune to achieve this directly, it is possible by leveraging the Microsoft Graph API.

Convert Intune Device Groups to User Groups via Graph API device to user group transformationMicrosoft Graph” class=”wp-image-7184″ />
Read More »
Export Intune Data to OneLake for Power BI with Fabric

Export Intune Data to OneLake for Power BI with Fabric

Intune provides a lot of data that can be exported via interfaces, which is also the foundation for Intune reporting and analytics. But wouldn’t it be cool if you could have everything from the data export to the Power BI dashboard in one place in a portal and additionally query the data Graph provides you with via SQL to build complex queries. That’s exactly what Microsoft Fabric delivers. In this blog we would like to take a closer look at this new platform.

Microsoft Fabric workflow exporting Intune data to OneLake
Read More »
Mastering Intune Reporting and Analytics

Mastering Intune Reporting and Analytics

In this new blog post I want to give you an overview of how you can start with reporting analytics with Intune. I already wrote several blogs on how to create custom reports via mail or Teams, and how to export and automate things. I also wrote a blog with an overview of the analytics capabilities of Intune. In this post I want to take a step back and give you an overview of how to start with this topic and which capabilities Intune offers.

Mastering Intune Reporting and Analytics
Read More »
How to get an report with all new enrolled devices

How to Get a Report of All New Enrolled Devices

Keeping track of newly enrolled devices in your organization can be a challenging task when relying solely on the Intune console. Wouldn’t it be awesome to receive a comprehensive report automatically via email? As you know, I love automating things. In this blog post, we’ll explore a simple and efficient way to generate a weekly report for all newly enrolled devices using PowerShell, Azure Automation Runbooks, and Microsoft Graph API. This automated solution will save you time and effort, allowing you to focus on more important tasks in managing your organization’s devices. So, let’s dive in and learn how to create this valuable report!

How to get an report with all new enrolled devices
Read More »
Intune mass export with the Graph Report API

Intune mass export with the Graph Report API

There are many ways to export information from Intune. For example, you can use Log Analytics, the Data Warehouse or the Graph API. But if you want to export several thousand devices or apps via Graph, it can happen that Graph has a paging. Paging means that you only get a certain number of entries with one call and then you have to make another call for the next range. This means for you that you have to write a script that loops through the pages.

Another problem if you want to export e.g. all Discovered apps you have to loop through all devices because this attribute is not shared in list calls. But if you have several 10k or 100k devices this takes a long time.

But there is a Graph Report API that is designed to export large amounts of data and provide it to you as a CSV in a really easy way. How you can use it I will explain in this blog.

Intune mass export with the Graph Report API
Read More »
Send Teams Alerts for Top 5 Intune App Install Errors

Send Teams Alerts for Top 5 Intune App Install Errors

It is always important as an Intune admin to have an overview of the environment. Intune offers a lot of reports but as we all know you don’t look into them every day. Isn’t it easier to get a daily or weekly message in Teams and see the top failed app installations. I have already released some blogs with the topic of detecting anomalies in Intune with the help of cognitive services. In this blog I want to show you how to send a report that is already available in Intune to Teams using Azure Automation.

Teams notification showing top five app installation errors
Read More »
Intune Tool Box – Rebuild of Intune in PowerShell

Intune Tool Box – Rebuild of Intune in PowerShell

This post introduces the Intune Toolbox — my open-source attempt at Rebuilding Intune in PowerShell. It is a modular collection of PowerShell scripts that wrap the most common Intune admin operations (devices, apps, policies, assignments) so you can run them from your terminal instead of clicking through the admin centre.

I think everyone who works with Intune on a daily basis knows the situation that they would like to have a simple feature that would simplify their daily work. In order to close exactly these gaps I decided to code my own tool with many small features that would make the life for Intune admins easier. This was the birth of the Intune Tool Box. This tool is a WPF application that is written in PowerShell. The app has the same design as Intune but offers small helpers for the daily work. The good thing is that this app is built in such a way that it can be easily extended at any time. If you have any features in your mind that you are missing in Intune console but is possible to solve this via graph so let me know that I can add this to the app. My plan is to develop the app step by step and bring in new cool features.

Intune Tool Box – Rebuild of Intune in PowerShell
Read More »
Daily Intune Device Reports via Logic Apps, Email & Teams

Daily Intune Device Reports via Logic Apps, Email & Teams

This step-by-step guide shows how to send daily Intune device reports via Logic Apps, email and Teams. The flow combines Microsoft Graph queries, Azure Logic Apps, and your existing Microsoft 365 channels — no third-party reporting tool needed, and the whole pipeline runs on the Azure consumption plan for a few cents per month.

For an Intune admin it is always helpful to get an overview of the current status of their tenant and an overview of the count of devices in the field. In this blog I would like to explain how you can use Logic Apps to send you a detailed daily report.

Azure Logic Apps workflow for daily Intune device report
Azure Logic Apps workflow for daily Intune device report
Read More »