Welcome to Toolbox Rundown, where I share my collection of golden online resources in the endpoint management area! Here, I’ve curated a collection of top-notch tools, insightful blogs, and much more to empower you in endpoint management. Whether you’re a seasoned professional or just diving into the world of endpoint management, you’ll find everything you need to boost your productivity, stay ahead of the curve, and unlock new levels of success. So, come on in, explore, and uncover the treasures that await you in the ToolVault!
Table of Contents
- Tools
- Azure AD Object ID To SID Converter
- Base64 Decode and Encode
- Get-WindowsTroubleshootingReportCommunity
- Graph Explorer
- idPowerToys CA Documenter
- Intune Assignment Checker
- IntuneBrew
- Intune Debug Toolkit
- Intune Management
- iOS Bundle ID Finder
- KQL Kusto Queries
- KQL Search
- Loom
- Microsoft Cloud Group Analyzer
- Maester
- Power DMARC
- PsExec
- Regshot
- Rufus
- URLVOID
- What Is My Tenant ID
- Knowledge
Tools
A good tool might be half the job! Join me as I give a toolbox rundown and share most of my valuable tools for endpoint management.
Azure AD Object ID To SID Converter
Azure AD Object ID to SID Converter is a tool for translating an Azure AD Object ID (a GUID) to a SID (Security Identifier). You might need this when working with account protection policies in Microsoft Intune.
Base64 Decode and Encode
Base64 Decode and Encode Online is a handy tool for quickly encoding or decoding your data by pushing a button.
Get-WindowsTroubleshootingReportCommunity
Get-WindowsTroubleshootingReportCommunity is Petri Paavola’s Ultimate Windows and Intune Troubleshooting Tool, which analyzes and visualizes Windows Event logs and log files.
Graph Explorer
Graph Explorer, available from aka.ms/ge, is a go-to resource for finding all the properties and settings for Intune and Entra ID.
idPowerToys CA Documenter
Merill’s Conditional Access documentation tool helps document your conditional access policies as a PowerPoint presentation.
Intune Assignment Checker
Intune Assignment Checker by Ugur Koc will provide a detailed overview of assigned Intune Configuration Profiles, Compliance Policies, and Applications for users, groups, and devices.
(I am a proud contributor to enhanced login options on v2.2)

IntuneBrew
IntuneBrew is a community tool by Ugur Koc for automating the uploading and managing of macOS applications in Microsoft Intune, complete with metadata and logos.

Intune Debug Toolkit
Intune Debug Toolkit by MSEndpointMgr is a community-developed solution that provides better and easier debugging possibilities on devices co-managed or Intune-managed only.
Intune Management
Intune Management by Micke Karlson is an excellent tool for documenting and copying Intune configurations.
iOS Bundle ID Finder
iOS Bundle ID Finder is an excellent tool for discovering the Bundle ID for each app in the App Store. You might need this when creating App Protection policies in Microsoft Intune.
KQL Kusto Queries
This Collection of KQL queries can be a lifesaver when doing advanced hunting.
KQL Search
KQL Search is a search engine for KQL queries
Loom
Loom is an AI-powered screen recorder.

Microsoft Cloud Group Analyzer
Microsoft Cloud Group Analyzer is for Microsoft Cloud admins who struggle to keep track of where Entra groups are used. This blog post discusses it.

Maester
Maester is your Microsoft security test automation framework.
Power DMARC
Power DMARC is a free lookup tool for your domain’s email security. It will check and score your MX, SPF, DKIM, DMARC, BIMI, MTA-STS, and TLS-RPT configurations.
PsExec
PsExec is a neat tool for testing scripts and application installations such as LOCAL SYSTEM on a Windows computer.

The screenshot above shows how to use the tool from a virtual machine.
Regshot
Regshot is a small, free, open-source registry compare utility that allows you to quickly take a snapshot of your registry and compare it with a second one.

Rufus
Rufus is a utility that helps format and create bootable USB flash drives, such as USB keys/pen drives, memory sticks, etc.
URLVOID
This URL reputation scanner gives vital information about the domain and insights into its reputation from 40+ third-party security services. URLVOID can be a valuable tool if users are blocked from visiting webpages by Microsoft Defender SmartScreen, etc.
What Is My Tenant ID
What Is My Tenant ID is a tool for finding your Azure AD and Microsoft 365 Tenant ID.
Knowledge
Knowledge is also an essential ingredient in the toolbox, and some great blogs, newsletters, and other resources provide knowledge from the bleeding edge of fancy!
- aka.ms/IntuneID – The In development page for Microsoft Intune
- Bluesky: Intune Communities — Bluesky, a list of Intune communities
- Bluesky: MS Intune — Bluesky, a list of Intune contributors
- Bluesky: Starter Pack — Bluesky, a starter pack of Intune resources
- Entra.News – Your weekly dose of Microsoft Entra from Merill Fernando
- Intune Newsletter from Andrew Taylor
- Intune Quicklinks from Andre Jones
- Microsoft Intune product and capabilities documentation | Microsoft Learn
- Modern Endpoint Management Group on LinkedIn
- MSEndpointMgr blog and community for Microsoft Endpoint Manager
- What’s new in Microsoft Intune from Microsoft Learn lists all new additions in Intune