# Weekly Intune change report by email | TenuVault Create a weekly Intune change report by email: compare complete backups, review setting values and actors, and understand scheduled delivery in TenuVault. Canonical: https://www.tenuvault.com/guides/weekly-intune-change-report-email Practical guide # Weekly Intune change report by email A weekly Intune change report by email uses two backups to show configuration differences, setting by setting. In TenuVault Pro or MSP, configure report recipients and a weekly scheduled backup, then enable the report after every scheduled backup. Automatic reports compare with the previous backup, so verify the actual time window. [Start free Pro trial](https://www.tenuvault.com/trial?src=feature)[Plans and features](https://www.tenuvault.com/pricing) ## How is a report different from a native audit export? Microsoft audit logs help investigate administrative activity. They are useful for who and when, while a comparison of saved configuration answers what differs between two points. A report joins those views, but a missing matching audit event does not prove that nobody made a change. This guide concerns a weekly review with setting-level evidence, rather than a notification for each audit poll. Change alerts name settings without their values. Change reports can show old and new values from backups, subject to their visibility settings, secret redaction and item limits. ## How do I make a weekly Intune change report by email? 1\. In Reports, select the tenant and generate an initial report. Last 7 days compares the newest complete backup with the newest complete backup at least seven days older. If history is shorter, it uses the oldest complete backup, so read the dates. 2\. Under Email and automation, enter approved recipients and choose Save recipients. Follow the permission documentation for Mail.Send. Open the report and use Send by email to verify the recipient list and attachment before relying on automation. 3\. Configure a weekly backup schedule and turn on Make a report after every scheduled backup and send it. The automation compares each completed scheduled backup with its predecessor. A manual backup between weekly runs can shorten that comparison window; do not label every automatic attachment a seven-day history without checking. ## What will the setting-by-setting evidence include? The report groups deleted, changed and added items. Changed items show before and after values, and renamed items show their old names. New and deleted items include their settings, up to 300 settings per item. Not compared identifies files left out because they could not be read. Other activity contains audit events that match no compared item, including changes made and undone between snapshots. Assignment groups appear as object IDs. Secret values are not shown; a changed secret becomes a Secret values row without its contents. Review those boundaries when preparing the report for an auditor. ## Which delivery and completeness limits matter? Turn off Show setting values or Name who made each change when recipients should not receive those details. The choices apply to subsequently generated reports. The email body shows the summary and first 20 changes, with a PDF or Markdown attachment. Oversized attachments can fall back to Markdown or a message directing the reader to TenuVault. Automatic reports skip backups completed with warnings. With Send nothing when nothing changed enabled, the report is saved without email. Without recipients, it is also saved but not sent. A missing message therefore needs investigation of report status and backup results rather than an immediate assumption that mail delivery failed. ## How can I try this on my tenant? Download TenuVault and compare two approved test backups with one known setting edit between them. Check the exact value change, UTC timestamps and any matching actor evidence. Send that report to a test mailbox and inspect the attachment as a recipient would. Keep the source backup dates in your review record. Desktop report automation needs TenuVault running and a usable tenant sign-in, even if a Backup Reader made the backup. Cloud backups can produce reports without a computer: the Azure watcher emails them after separate setup. Those cloud reports are emailed only and do not appear in the desktop Reports list. - [Configuration backup and comparison](https://www.tenuvault.com/intune-backup) - [Prepare a backup schedule](https://www.tenuvault.com/guides/intune-backup-setup) - [Investigate the change actor](https://www.tenuvault.com/guides/who-changed-intune-policy) - [Download TenuVault](https://www.tenuvault.com/download) ## Read the technical guides - [Detailed product documentation](https://docs.tenuvault.com/reports/) Product scope reviewed 11 November 2026. Check your installed release and the current plan table before using a workflow. ## Frequently asked questions ### Q: Is there a separate weekly report timer? A: The documented desktop automation runs after each completed scheduled backup. Use a weekly backup schedule, and inspect the comparison dates if other backups occur between runs. ### Q: Do reports require a paid plan? A: Generating, exporting and emailing change reports are included in Pro and MSP. The pricing page and report documentation describe availability. ### Q: Will every report identify the administrator? A: No. Audit access, retention and matching affect actor evidence. Reports still show configuration differences when actor information is unavailable and explain the gap. ## Related guides - [get notified about Intune changes](https://www.tenuvault.com/intune-alerts) - [Who changed an Intune policy](https://www.tenuvault.com/guides/who-changed-intune-policy) - [Email alerts for Conditional Access changes](https://www.tenuvault.com/guides/email-conditional-access-changes) - [Intune change events to a webhook](https://www.tenuvault.com/guides/intune-change-events-webhook) ## Review your setup before the first change Community is free for one tenant. Try Pro free by connecting a new tenant in the app, no email or card needed. Tenant access, supported restore types and scheduling requirements still apply. [Start free trial](https://www.tenuvault.com/trial?src=cta)[Book a 30-minute demo](https://cal.com/ugur-koc/tenuvault-demo)[Permissions and data flows](https://www.tenuvault.com/trust)