u/eatsleepblink1802 — reddlx

Interactive study aid for Microsoft Intune and Microsoft Entra ID

You work through support tickets, inspect the evidence and decide what to do next. Each answer review explains the correct response and includes a Microsoft Learn reference.

The Intune scenarios include device compliance, Win32 app detection and Windows update recovery. The Entra ID scenarios cover Conditional Access, authentication strengths, PIM activation and Temporary Access Pass.

Some tickets bring the two together. For example, successful MFA doesn’t necessarily explain why an application is still blocked. You need to check the policy requirements, device status and stated local procedure before choosing a response.

Hosted it on my website: controlaltdeletetechbits.co.uk. Select the Tenant Defender desktop icon to try it.

u/eatsleepblink1802 — 14 days ago

▲ 7 r/Intune

IntuneAccess an open source tool for Intune RBAC, assignment analysis and more.

IntuneAccess started with one question:

“Why is this Intune policy reaching this device?”

Answering that can mean tracing assignment intent, Microsoft Entra group membership, included and excluded groups, assignment filters, user or device targeting, policy applicability, scope tags and the other Intune configurations that may also be targeting the same device

Quick Video here: https://files.catbox.moe/mpinz5.mp4

You may then need to correlate that administrative access with policies, applications, scripts, updates, devices and reported deployment evidence.

That is where IntuneAccess comes in.

IntuneAccess is a free, open source, read-only PowerShell module designed to collect and correlate that evidence in local Explorer.

Rather than looking at each object in isolation, it builds an evidence trail between administrators, Intune RBAC permissions, role assignments, scopes and managed resources.

Current functionality includes:

Intune RBAC permission and assignment analysis

Built-in and custom Intune role support

Admin Group, Scope Group and Scope Tag evidence

Role assignment and resource scope correlation

Assignment impact across policies, applications, scripts and updates

Device 360 and User 360 views

Supported deployment outcomes and error evidence

Local snapshots and change comparison

Conservative policy overlap and potential conflict analysis

IntuneAccess retrieves the required tenant data through Microsoft Graph and processes it locally in the PowerShell session.

It does not create, modify or delete Intune configuration and does not request Microsoft Graph write permissions.

There is no hosted tenant service, telemetry or analytics, and tenant data is not uploaded anywhere else.

Install from the PowerShell Gallery:

Install-Module IntuneAccess -Scope CurrentUser

Then run:

Start-IntuneAccess

PowerShell Gallery:

https://www.powershellgallery.com/packages/IntuneAccess/2.0.1

GitHub:

https://github.com/ControlAltDeleteTechBits/intune-access

It is still being developed, so feel free to give it a try.

reddit.com

u/eatsleepblink1802 — 2 months ago

▲ 8 r/entra

Visualising Microsoft Entra access relationships

The project is intended to answer a common Microsoft Entra administration question:

Why does this user have access?

Investigating that question can mean moving between users, groups, directory roles, enterprise applications, PIM assignments, authentication methods and Conditional Access policies.

Identity Atlas collects tenant information using delegated, read-only Microsoft Graph permissions and presents the collected relationships as a local, interactive map.

It is a free, open-source community project, with feedback helping to shape future features, coverage and improvements.

The collected data remains local and is not uploaded to an external service.

Repository:

https://github.com/ControlAltDeleteTechBits/identity-atlas

Please read the installation guidance. Feedback and issue reports are welcome through GitHub.

u/eatsleepblink1802 — 3 months ago

▲ 30 r/entra

I built a free SC-300 study hub after renewing the exam

I recently renewed my SC-300 and decided to turn my study notes into something more useful.

I have built a free SC-300 study hub for Microsoft Identity and Access Administrator, based around the current Microsoft Learn study guide and the areas I focused on during renewal.

It includes the following

250 practice questions split across the main SC-300 course areas

Scenario-based questions using fictional companies

Case study style sections for reading requirements and constraints

A downloadable 30-day cram PDF for anyone with the exam coming up soon

Objective mapping against Microsoft Learn, so it is easier to update when the exam changes

The fictional companies used in the examples are Liver Shipping, Blink Inc, Mill Town Engineering, and Whippet Exports. The aim is to make the questions feel closer to the style of the exam.

Link here

u/eatsleepblink1802 — 5 months ago