TenuVault is a desktop app for Windows and macOS that backs up and restores Microsoft Intune configuration through Microsoft Graph, using your own delegated admin sign-in. It saves policies, scripts, apps and their assignments as encrypted snapshots on your computer or in your own Azure storage, and restores them as reviewed copies or in place. Scheduled backups use Everything except apps until you save a different choice for the tenant.
Restore Intune policies from a TenuVault configuration backup to recover a changed or deleted policy. Choose the items, review their supported restore mode and dependencies, and confirm the operation before TenuVault writes to Intune.
Intune drift detection in TenuVault compares your two newest complete backups to find added, changed and deleted items. It shows the setting differences so you can investigate the change and choose a supported recovery action.
TenuVault helps you deploy the independent community baseline, compare an existing deployment and investigate setting drift. OpenIntuneBaseline is maintained by SkipToTheEndpoint and contributors and is licensed under GPL-3.0.
TenuVault MSP provides Intune backup for MSPs: manage connected customer tenants from one desktop app, with per-tenant backups and storage, reviewed restore and baseline workflows, using your delegated admin sign-in.