Keyword search across multiple Entra object types from a single page. Filter by object type using keywords.
+
Search across multiple Entra object types from a single page. Accepts bulk input — UPN, Device Name, Device ID, Group Name, or Group ID — one per line. Supports multiple search terms simultaneously with results deduplicated across all types. Filter by Users, Devices, Security Groups, and M365 Groups. Optionally resolve managers for User objects.
Search across Users, Groups, Devices, and Service Principals with real-time filtering
@@ -669,7 +670,7 @@
Find Groups by Owners
-
Enter UPNs, get all groups they own with Group Type, Membership Type, and Member Count.
+
Enter UPNs to find all groups they own with Group Type, Membership Type, and Member Count. Leave the input empty to discover all groups without an owner — a powerful audit tool for identifying orphaned groups in your tenant.
Identify all groups owned by specific users with detailed ownership insights
@@ -728,8 +729,8 @@
Unified device information from Entra ID and Intune with extensive field coverage
-
Intune Policy Assignments
-
Runtime or project decisions, get instant insights about Intune policies, Assignment Groups, Assignment Filters and associated Filter Types. Generate output filtered by keywords, Policy Type, Sub-Type, OS platform.
+
Get Policy Info (formerly Intune Policy Assignments)
+
Runtime or project decisions, get instant insights about Intune policies, Assignment Groups, Assignment Filters and associated Filter Types. Generate output filtered by keywords, Policy Type, Sub-Type, and OS platform. Now includes Compliance Policy assignments, classic Autopilot Profile reports, Autopilot Device Preparation assignment reports, and ESP assignment reports with priority visibility.
Browse all Intune policies with assignment group visibility
@@ -742,6 +743,17 @@
View assignment filters and their associated filter types
+
+
Get App Info NEW in V0.7
+
+ A major enhancement for application visibility. Get instant app insights to know what apps were (or were not) deployed via Intune. Query Discovered Apps, Managed Apps, or both simultaneously across your fleet.
+
+
+
Discovered & Managed Apps — See what is actually installed on devices versus what Intune deployed
+
Managed App Assignments — Full assignment details including groups, filters, and filter modes
+
Flexible Filtering — Filter by Platform, Ownership, and App Keywords
+
Multiple Input Types — Input Devices, Users (devices resolved based on filters), or Groups (resolves nested groups for Users/Devices)
+
@@ -831,7 +843,7 @@
Prerequisite Handling
-
MDM-ODA includes automatic prerequisite detection and installation. The tool proactively checks for missing components and handles setup without manual intervention.
+
MDM-ODA includes automatic prerequisite detection and installation. The tool proactively checks for missing components and handles setup without manual intervention.
The orchestrator can be launched from a standard PowerShell 5.1 host. On startup, it detects the running PowerShell version and, if PowerShell 7 is not already active, automatically locates or installs PowerShell 7 via winget — then re-launches itself in the PS7 runtime. This ensures the full WPF interface and Microsoft Graph SDK modules load correctly without any manual intervention from the user.
@@ -889,6 +901,10 @@
DeviceManagementManagedDevices.Read.All
Query managed devices by Azure AD device ID or serial number
+
+
DeviceManagementApps.Read.All
+
Read Intune managed and discovered apps, app assignments, and app configurations
+
offline_access
Maintain refresh token for persistent session
@@ -991,6 +1007,46 @@
+
+
Changelog — V0.7
+
+
New Features
+
+
Get App Info Major Enhancement
+
+
Get Discovered or Managed (or both) apps — instant app insights to know what apps were (or were not) deployed via Intune
+
Managed App Assignment details including filters and filter modes
+
Ability to filter based on Platform, Ownership, and Keywords
+
Input Devices or Users (devices resolved based on filters) or Groups (resolves nested groups for Users/Devices)
+
+
+
Search Entra Objects
+
+
Now capable of handling multiple objects of multiple types simultaneously with deduplication
+
Get Manager checkbox — adds Manager UPN column for User objects
+
+
+
Find Groups by Owners
+
+
Will now show all groups without an owner when searched without an input UPN — powerful audit capability for orphaned groups
+
+
+
Get Policy Info (formerly "Get Policy Assignments")
+
+
Renamed from "Get Policy Assignments" to "Get Policy Info"
+
Compliance Policy assignments including filters and filter modes
+
Classic Autopilot Profile assignment report with Description and Deployment Mode columns
+
Autopilot Device Preparation assignment report
+
ESP assignment report including priority column
+
+
+
Improvements
+
+
Horizontal scroll bar added to all output tables across all blades
+
Resizable columns on all output DataGrids for better data visibility
+
+
+
Roadmap
MDM-ODA is actively evolving. Here's what's planned for upcoming releases:
@@ -1010,16 +1066,6 @@
Driver Updates — Driver deployment state and version coverage
-
Application Landscape
-
End-to-end application lifecycle visibility and management:
Assignments — Assignment group mapping and coverage analysis
-
Deployment States — Install success/failure rates and trend analysis
-
Filters — Assignment filter integration for targeted deployments
-
App Creation/Modification Workflows — Streamlined app packaging and configuration
-
-
Defender Integration
Bringing Microsoft Defender for Endpoint data into the same operational view:
@@ -1054,13 +1100,13 @@
-
-
⚠️ Disclaimer: This tool is provided "as-is" without warranty of any kind, express or implied. The author assumes no liability for any damages arising from its use. Always validate operations in a non-production environment before deploying to production tenants.
-
-
+
+
⚠️ Disclaimer: This tool is provided "as-is" without warranty of any kind, express or implied. The author assumes no liability for any damages arising from its use. Always validate operations in a non-production environment before deploying to production tenants.
@@ -889,6 +901,10 @@