Guides
Practical guides for getting the most out of IntuneSentry — from importing baselines to managing drift at scale.
Getting started
Getting started with IntuneSentry
Connect your first M365 tenant, import a baseline, and run your first security assessment in under 10 minutes.
Connecting an M365 tenant via OAuth
Step-by-step walkthrough of the Microsoft OAuth flow and the Graph API permissions IntuneSentry requests.
Setting up alert channels
Configure Slack, Teams, email, webhooks, PagerDuty, or Pushover to receive policy change notifications.
Baselines & deployment
Importing baselines from GitHub
Browse community repos like OpenIntuneBaseline, select policies by type, and create a deployment-ready baseline.
Importing baselines from a tenant
Pick policies from an existing connected tenant to build a baseline from your live environment.
Deploying baselines to tenants
Deploy all or selected policies, configure assignments (all users, all devices, or groups), and track progress.
Understanding dry-run mode
Preview what a deployment will do before pushing any changes to your tenant.
Drift & compliance
Understanding baseline drift
How IntuneSentry compares tenant policies against baselines and calculates compliance scores.
Accepting intentional deviations
When a drift is expected, accept it with a reason. Accepted drifts are excluded from compliance scoring.
Bulk managing drifts
Select multiple drifts and accept them all at once with a shared reason — great for onboarding or tenant-specific configs.
Running security assessments
Evaluate tenants against Intune best practices covering compliance, conditional access, app protection, and more.
Policy monitoring
Understanding change detection
How IntuneSentry compares policy snapshots and what triggers a change event.
Bulk acknowledging changes
Select multiple changes and acknowledge them at once. Filter by type, policy, or status first.
Conditional Access monitoring
Monitor changes to Conditional Access policies and get alerted before security gaps open.
MSPs & multi-tenant
IntuneSentry for MSPs
How to monitor multiple client tenants, deploy standardised baselines, and track compliance from a single account.
Onboarding a new client tenant
Connect, import a baseline, deploy it, set up alerts, and run an initial assessment — the recommended workflow.
Using tenant tags
Organise tenants with tags for filtering. Useful for grouping by client, region, or compliance tier.