Monitor, baseline
and deploy your
Intune policies
IntuneSentry continuously monitors your Intune policies, detects drift from baselines, deploys configurations to tenants, and runs security assessments — so your fleet stays compliant.
No credit card required
Built for IT teams and MSPs managing Microsoft 365 & Intune
One platform for your entire Intune lifecycle
From importing community baselines to deploying policies and tracking drift — IntuneSentry keeps every tenant under control.
Import
Import baselines from GitHub (like OpenIntuneBaseline), from existing tenants, or create them manually.
Deploy
Push baseline policies to any connected tenant with assignment options — all users, all devices, or specific groups.
Monitor
Scan 10 Intune policy types every hour via Graph API. Field-level diffs show exactly what changed.
Assess
Run security assessments against best practices. Get a compliance score with actionable remediation steps.
See exactly where tenants drift from your baselines
Compare every tenant's live policies against your baselines. Expandable inline diffs show each field-level deviation. Accept intentional differences or remediate real drift — with a compliance score that updates in real time.
Learn more about drift detection2 active drifts
Contoso Ltd · vs OIB baseline
Everything you need to manage Intune at scale
GitHub baseline import
Import community baselines like OpenIntuneBaseline directly from GitHub. Browse policies, select what you need, and create a baseline in seconds.
Multi-source baselines
Create baselines from GitHub repos, import from existing tenants, or build manually. Mix policy types in a single baseline.
Selective deployment
Deploy all or selected policies from a baseline. Assign to all users, all devices, or specific Entra ID groups.
10 policy types
Device config, compliance, conditional access, app protection, endpoint security, settings catalog, update rings, autopilot, and more.
Security assessments
Run on-demand assessments that check policy coverage, compliance settings, conditional access, app protection, and monitoring health.
Drift with bulk accept
View every drift with expandable inline diffs. Accept intentional deviations individually or in bulk — accepted drifts are excluded from scoring.
Multi-tenant
Connect unlimited M365 tenants from a single account. Perfect for MSPs and IT consultancies.
6 alert channels
Route notifications to Slack, Teams, email, webhooks, PagerDuty, or Pushover with custom alert rules.
API access
Full REST API for integrating IntuneSentry with your existing tooling and workflows.
Simple pricing. No tiers.
Ready to take control of your Intune policies?
Start your 14-day free trial. No credit card required.