Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Compare Intune tenants #203

Closed
Influencer101 opened this issue Mar 6, 2024 · 7 comments
Closed

Compare Intune tenants #203

Influencer101 opened this issue Mar 6, 2024 · 7 comments

Comments

@Influencer101
Copy link

Hi, I'm looking for a way to compare different tenants to standard baseline(s). While it seems the tool can be used to compare the configuration of an Intune tenant with an exported config, it doesn't seem possible to compare a tenant with an export of another tenant due to different object IDs. Is this a correct assessment, and do you have plans to add this capability? Maybe if the compare could be automated/scripted, then this would offer a solution to compare Intune configurations against exported configurations. Thanks, and great job on what you've accomplished so far

@Micke-K
Copy link
Owner

Micke-K commented Mar 7, 2024

Hello,

Yes, it will have a few differences like ID, last modified, created etc. I normally open the csv in excel and filter out those properties.

This is also something I am currently looking into. I have many ideas for the compare functionality. In fact, I'm looking into a redesign of many of the features. However, all the changes takes longer than I thought for many different reasons.

Cheers!

@Influencer101
Copy link
Author

For us, it's already a big help to quickly deploy policies. If it can also be used to automatically detect configuration drift, it will be fabulous 😀. I hope you find the time to continue to improve the tool. Keep up the good work! Thanks!

@DanClowry
Copy link

I have created a small Powershell script that copies the IDs from one set of exported policies to another so they can be compared using the "Files in Exported Folders" option. It uses the exported file name to determine if the policies are the same so the policies must have the same name in the baseline & comparison tenant. The script was written in 30min so it probably doesn't cover edge cases but works well enough for me.

https://gist.github.com/DanClowry/893b97b33805a17bd64f4b316e246412

Usage:

  1. Export the objects from your baseline tenant
  2. Export the objects from the tenant you want to check
  3. Run the following command replacing the paths with wherever you exported the files: .\DuplicateIntuneManagerIds.ps1 -BaselinePath C:\temp\OpenIntuneBaseline-main\WINDOWS\ -TenantExportPath C:\temp\export\Contoso\
  4. Compare the two folders in IntuneManagement using the "Files in Exported Folders" option - IntuneManager will now be able to properly compare the policies and identify any differences.

@Micke-K
Copy link
Owner

Micke-K commented May 15, 2024

Hello,

Thank you so much! I'll have a look at this.

I did some minor updates to compare in the last version but still have a few more things to add.

Still working hard on the new version. This will be way easier to implement there but I'll see what I can do in meantime. It should be fairly easy to implement in the existing version as well.

Cheers!

@Micke-K
Copy link
Owner

Micke-K commented May 19, 2024

Hello

Can you test this? Replace Xaml files in the Xaml folder and psm1 in the Extensions folder.

I added a new Compare provider "Intune Objects with Exported Files (Name)". This will compare Intune objects with exported files and identify exported objects based on name in file. I renamed the default provider to "Exported Files with Intune Objects (Id)".

I also added a couple of extra Skip options to exclude missing exported files or skipping missing Intune objects.

I fixed a bug when skipping Basic properties + added ScopeTags as Basic Properties eg matching value will be skipped if you select that.

Let me know how it goes if you test it.

Cheers!

Compare.zip

@DanClowry
Copy link

I've tested with those new files and it's working great. The "Intune Objects with Exported Files (Name)" comparison method correctly identifies what settings differ in the tenant's current policies vs our baseline export. The options to skip missing policies also works great and has made it really easy to compare multiple tenants against our baseline without it getting cluttered with policies unique to specific tenants.

Thanks for adding this in so quick!

@Micke-K
Copy link
Owner

Micke-K commented May 22, 2024

Thank you for the update!

Cheers

@Micke-K Micke-K closed this as completed Jul 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants