Monitor · Baseline · Deploy · Assess

Everything you need to manage Intune policies at scale

Import community baselines, deploy to tenants, monitor for drift, run security assessments, and get alerted when something changes — all from one dashboard.

Baseline Import

Import baselines from GitHub, tenants, or JSON

Browse community repositories like OpenIntuneBaseline directly from IntuneSentry. Select the policies you want, and we'll create a baseline ready to deploy. Or import from an existing tenant's live policies, or paste raw JSON.

  • One-click import from any GitHub repo with Intune policy JSON
  • OpenIntuneBaseline pre-configured as a default source
  • Import from existing tenant — pick policies from a live environment
  • Mix policy types in a single baseline (compliance, config, settings catalog, etc.)
  • Manual JSON entry for custom configurations

OpenIntuneBaseline

SkipToTheEndpoint/OpenIntuneBaseline

Settings Catalog (42 policies)
Compliance Policies (12 policies)
Device Configuration (8 policies)
App Protection (4 policies)
Deploy

Deploy baselines to tenants with assignments

Select specific policies or deploy an entire baseline. Choose to assign to all users, all devices, or a specific Entra ID group. Dry-run first to preview what will happen. Real-time progress tracking shows you exactly what's deploying.

  • Deploy all or selected policies from any baseline
  • Assign to all users, all devices, or specific Entra ID groups
  • Dry-run mode — preview without pushing changes
  • Live deployment progress with success/failure counts
  • Full deployment logs for audit trails

Deploying OIB Baseline

92 of 92 policies · Contoso Ltd

Complete
Progress 92 / 92

90

Succeeded

2

Failed

Change Detection

Know the moment a policy changes

Hourly scans across 10 Intune policy types via the Microsoft Graph API. Every modification is captured with a field-level diff. Bulk-acknowledge expected changes or investigate unexpected ones.

10 policy types monitored

Configuration Profiles
Compliance Policies
Conditional Access
App Protection
Update Rings
Endpoint Security
Settings Catalog
Autopilot
App Deployment
Enrollment Config

Policy Modified

Windows Compliance · 3 min ago

"passwordMinLength": 6
+ "passwordMinLength": 12
"requireDeviceEncryption": false
+ "requireDeviceEncryption": true
Baseline Drift

Track drift with compliance scoring

Every tenant gets a compliance score based on how closely its policies match your baselines. Click any drift to see an expandable inline diff showing exactly what diverged. Accept intentional deviations with a documented reason — accepted drifts are excluded from the score.

  • Per-tenant compliance score updated on every scan
  • Expandable inline diffs showing baseline vs current values
  • Accept deviations individually or in bulk with documented reasons
  • Accepted drifts excluded from compliance scoring
  • Smart comparison — OData metadata and navigation properties filtered automatically
98.6%

Contoso Ltd

2 active drifts

84.2%

Fabrikam Corp

12 active drifts

100%

Northwind Traders

0 active drifts

Security Assessments

Assess tenants against security best practices

Run on-demand security assessments that evaluate your tenant's Intune configuration against best practices. Get a scored report with pass/fail/warning for each check, plus remediation guidance.

Assessment Categories

28.3%

Policy Coverage

Compliance, CA, app protection, endpoint security, update rings

Compliance Settings

Password, encryption, jailbreak detection per policy

Conditional Access

Active policies, MFA enforcement

App Protection

PIN required, data transfer, backup restrictions

Monitoring Health

Percentage of policies with monitoring enabled

Baseline Compliance

Active drift count against baselines

Alerting

Get alerted where your team works

Route policy change notifications to any of 6 supported channels with custom alert rules.

Email

Slack

Teams

Webhooks

PagerDuty

Pushover

Multi-Tenant

Connect unlimited M365 tenants

Connect via Microsoft OAuth with a single click. Tag tenants for organisation. Each tenant gets its own dashboard with policies, changes, drift, alerts, and assessments.

  • OAuth-based authorisation — no credentials stored
  • Tag tenants for filtering and organisation
  • Per-tenant policies, changes, drift, alerts, and assessments
  • Team access with role-based permissions
  • REST API for automation and integration

Contoso Ltd

48 policies monitored

98.6%

Fabrikam Corp

32 policies monitored

84.2%

Northwind Traders

67 policies monitored

100%

Ready to take control of your Intune policies?

Start your 14-day free trial. No credit card needed.