Question Verifying InTune policy applied at the endpoint?

[ramseyrt]

Hello,

How would you verify that InTune controls are being applied on Azure AD joined systems? I can apply security controls using InTune, but I can't audit those controls using the client-side policy (like you would with a local domain joined GPO). Not every control has a GUI, like the firewall interface, where you can view the application of a specific control.

Thanks in advance!

Rob

 

[Ralston18]

The requirement being to just view the controls from a client that does not have admin rights to make changes - correct?

Perhaps something like:

https://learn.microsoft.com/en-us/answers/questions/870949/intune-powershell.html

https://powershelladministrator.com/2021/12/07/get-list-of-intune-managed-devices/

https://learn.microsoft.com/en-us/mem/intune/developer/intune-graph-apis

Take a look at the links and then do some additional searches with additional filtering as necessary for your requirements.

Hopefully there is a Get cmdlet that can be scripted to audit the controls.