What's New

Platform Filter in HTML Report (fixes #103)

• A new Platform filter dropdown has been added to the HTML report
• Dynamically populated with all unique platforms found across policies and apps
• Works alongside the existing Group Search, Assignment Type, and Scope Tag filters
• Filter layout updated to a 2x2 grid to accommodate all four filter controls

Platform Column on All Tabs

• All policy types now include platform information (Device Configurations, Compliance Policies, Settings Catalog, Endpoint Security, Scripts, Autopilot, etc.)
• The Platform column is now shown on every tab, not just app tabs
• Platform filter works consistently across all tabs

What's New

Multi-Device Handling (fixes #94)

• When multiple Entra ID devices share the same display name (common with Hybrid Join + Entra Join), the script now detects this and presents an interactive selection list
• Each device is displayed with OS, trust type, device ownership, compliance status, last sign-in date, and Object ID
• In parameter mode, a warning lists all matching devices with their Object IDs so the user can re-run with a specific ID
• Device lookup by Object ID (GUID) is now supported as direct input, bypassing display name ambiguity entirely
• Device query switched from v1.0 to beta endpoint for richer disambiguation properties

Scope Tag Filter in HTML Report (fixes #85, #96)

• A new Scope Tag filter dropdown has been added to the HTML report alongside the existing Group Search and Assignment Type filters
• The dropdown is dynamically populated with all unique scope tags across policies and apps
• Uses regex-based matching for accurate filtering of comma-separated scope tag values

Platform Column in "All Policies & Apps" Tab (fixes #96)

• The combined "All Policies & Apps" tab now includes a Platform column, showing the platform/OS for applications to help distinguish duplicate app names across Android and iOS/iPadOS

Bug Fixes

• Fixed the Assignment Type filter in the HTML report which targeted a hardcoded column index and broke on tables with different column counts (e.g., app tabs with a Platform column)
• The filter now dynamically finds the correct column by header text

What's New

• Nested Group Support: Group assignment checks now resolve nested (transitive) group memberships, so inherited assignments are surfaced correctly (#53)
• Client Secret Authentication: Added support for authenticating with a client secret in addition to certificate-based auth (#48)
• Compare Groups Table Format: Compare Groups output now uses a cleaner table format for easier readability (#45)
• Scope Tag Support: Added scope tag display in HTML reports and a new -ScopeTagFilter parameter to filter results by scope tag name

Bug Fixes

• Endpoint Security in reports: Fixed missing Endpoint Security items in HTML/CSV exports (#71)
• Version display: Fixed runtime version showing 3.5.0 instead of the actual version (#102)
• PSScriptAnalyzer CI: Fixed PSScriptAnalyzer failures in CI pipeline

What's New

• Show Apps Without Assignments (Option 8): Option 8 now includes unassigned apps alongside unassigned policies. Uses the Graph API isAssigned eq false filter for efficient querying. Renamed to "Show Policies and Apps Without Assignments". (#100)

Bug Fixes

• Device platform filtering: Fixed Admin Templates (Group Policy) incorrectly appearing for non-Windows devices by adding a Windows-only guard
• App platform filtering: Added support for winget (Windows Package Manager) and new Microsoft Store app types in device platform filtering so these apps are no longer excluded from Windows device results

What's New

• Device Platform Filtering (Option 3): When checking device assignments, results are now filtered to only show policies and apps applicable to the device's platform. Windows-only sections (Autopilot, ESP, CloudPC) are skipped entirely for non-Windows devices. (#33)
• App Registration Script: New Register-IntuneAssignmentCheckerApp.ps1 script to automate the creation of the required Entra ID app registration with all necessary permissions. (#75)
• Graph Connectivity Check: Added a connectivity check to verify Microsoft Graph access before running queries.

Bug Fixes

• Fixed excluded group assignments incorrectly appearing as included (#101)
• Fixed Endpoint Security legacy intent policies not appearing in results (#97)
• Fixed Autopilot Deployment Profile variable bug and added missing device check collections (#99)
• Fixed PSScriptAnalyzer warnings by adding settings file and fixing empty catch blocks

What's New in v3.5.0

This release addresses multiple bugs reported by the community, with a focus on cross-platform compatibility and improved policy detection.

Bug Fixes

• macOS Policies - Fixed macOS policies not being returned in group checks (#92)
• Windows 365 / Cloud PC - Added CloudPC.Read.All scope and fixed provisioning policies URI format. W365 warnings are now suppressed for unlicensed tenants (#89, #88)
• App Protection Policies - Fixed App Protection Policies not being reported (#69)
• Export Improvements - CSV/Excel exports now include app assignments (Required, Available, Uninstall apps) (#93)
• HTML Export - Fixed path issues on Windows (System32) and macOS (#83, #81)
• Cross-Platform CSV Export - Fixed CSV export dialog hanging on macOS/Linux (#43)
• Disk Encryption - Fixed disk encryption profiles not displaying correctly (#77)
• Error Messages - Improved 403 permission error messages with specific scope guidance (#30)

Cross-Platform Improvements

• HTML report generation now works correctly on Windows, macOS, and Linux
• Save file dialog replaced with cross-platform path prompt on non-Windows systems
• Temp directory handling fixed for all platforms

Full Changelog

v3.4.5...v3.5.0

What's New in 3.4.5

Tenant Switching Capability

• Added ability to disconnect and connect to a different tenant without restarting the script
• Menu now displays current connected tenant name and logged-in user
• New menu option [12] to switch between tenants mid-session

This release addresses the issue where users were unable to switch between different Microsoft 365 tenants during the same session. The script now properly manages tenant context and allows seamless switching between tenants.

Full Changelog: 3.4.4...3.4.5

🚀 IntuneAssignmentChecker v3.4.0

This release introduces significant new features and improvements to the IntuneAssignmentChecker tool.

✨ What's New

🔍 Show All Failed Assignments (NEW)

• Added option 11 to display all policy deployment failures across your Intune environment
• Shows failed Device Configuration and Compliance Policy assignments
• Displays policy name, device, failure reason, and last attempt timestamp
• Helps administrators quickly identify and troubleshoot deployment issues

☁️ Windows 365 Support

• Added support for Windows 365 Cloud PC Provisioning Policies
• Added support for Windows 365 Cloud PC User Settings
• Enhanced HTML export to include these new policy types

🧹 Cleanup & Improvements

• Removed deprecated Administrative Templates option (was option 10)
• Renumbered menu options for better organization:
  • Compare Assignments Between Groups is now option 10
  • Show All Failed Assignments is option 11

📋 Full Release Notes

Version 3.4.0:

• Added support for Windows 365 Cloud PC Provisioning Policies and User Settings
• Updated HTML export to include these new policy types
• Enhanced assignment checking functionality
• NEW: Added "Show All Failed Assignments" feature (option 11) to display policy deployment failures
• Removed deprecated Administrative Templates option (was option 10)
• Renumbered menu options: Compare Groups is now option 10

🔗 Related Issues

• Addresses #76 (Windows 365 support)

📥 Download

You can download the latest version of the script from the repository.

Fixed the HTML Export in Option 7 not working. It was referring to a locally stored html-export.ps1 but should have downloaded it first from GitHub automatically. This is now fixed #70

Fixed the output for Option 5 where ESP and Autopilot Profiles where not visible

Full Changelog: v3.3.2...v3.3.3