Ugur Koc

Ugur Koc

@ugurkoc.de

Microsoft MVP | 📊 http://KQLSearch.com | 🍎 http://IntuneMacAdmins.com | 🗑️ http://IntuneOffboarding.com | 🔜 http://IntuneMonitoring.com

378 followers58 following184 posts

Ugur Koc
@ugurkoc.de

Thanks everyone for your feedback on IntuneDocumentation! Along with several bug fixes, I’ve also added support for Conditional Access documentation.

Ugur Koc
@ugurkoc.de

TenuVault is no longer just one developer coding in the evenings. The feedback I’ve received made it clear that the core team needed to grow. Today, I’m welcoming three new members to the project.

Ugur Koc
@ugurkoc.de

Maxime, James, and Joery are bringing fresh ideas and a lot of skill to the table. The goal hasn’t changed. We’re building a backup and restore solution for Intune that’s safe, straightforward, and completely in the admin’s control.

View full thread
Ugur Koc
@ugurkoc.de

It’s a rare opportunity to keep one foot in the community and the other in product development. And I’m looking forward to what’s next. Thanks to everyone who’s shared feedback, tested scripts, or helped shape ideas. You’ve made all the difference. Let’s keep building.

Ugur Koc
@ugurkoc.de

Those who follow my work know I enjoy building tools and scripts for the Intune community. Over the last 2 years, glueckkanja AG has supported that mission giving me the space to solve real problems and share the results as open-source tools. That won’t change.

Ugur Koc
@ugurkoc.de

I will be in San Francisco this November for Microsoft Ignite. It’s always nice to meet others who work with Intune, write scripts, or just try to make IT a bit easier. If you’re going too, let me know. Would be great to say hi in person. Who else will be there?

Ugur Koc
@ugurkoc.de

I am focusing on areas that tend to slow me down in day-to-day Intune work: • Dynamic device targeting based on software inventory • Visibility into RBAC admin access • Tracking changes across Intune To help with that I created and shared 3 new PowerShell scripts on IntuneAutomation.com:

View full thread
Ugur Koc
@ugurkoc.de

A straightforward overview of who has admin rights in Intune. Includes unassigned roles, user and group resolution, and scoped access. Helpful for access reviews and audits. All scripts are free, open-source, and built for admins by an admin.

Ugur Koc
@ugurkoc.de

I am focusing on areas that tend to slow me down in day-to-day Intune work: • Dynamic device targeting based on software inventory • Visibility into RBAC admin access • Tracking changes across Intune To help with that I created and shared 3 new PowerShell scripts on IntuneAutomation.com:

Ugur Koc
@ugurkoc.de

🛠 Create App-Based Groups: Build Entra ID device groups based on what’s actually installed on your Intune-managed endpoints. Useful for deploying policies or apps only to devices with (or without) certain software. Wildcard support, version filtering, and dry run included.

Ugur Koc
@ugurkoc.de

🔍 Get Intune Audit Logs: Quickly review recent changes made in Intune. See who did what, when, and whether it succeeded. Optional filters, CSV and HTML exports, and a clear report view help with troubleshooting and compliance. 🔐 Get Intune Role Assignments:

Ugur Koc
@ugurkoc.de

Offboarding devices in Intune, Autopilot, and Entra ID used to be tedious. One device at a time. Multiple Portals. No clear feedback. That’s what motivated me to build Device Offboarding Manager and the latest update (v0.2) makes the process even smoother. What’s new?

View full thread
Ugur Koc
@ugurkoc.de

Visit github.com/ugurkocde/D... Installing it is super easy: Install-Script DeviceOffboardingManager

github.comGitHub - ugurkocde/DeviceOffboardingManager: A PowerShell GUI tool for efficiently managing and offboarding devices from Microsoft Intune, Autopilot, and Entra ID, featuring bulk operations and real-time analytics for streamlined device lifecycle management.A PowerShell GUI tool for efficiently managing and offboarding devices from Microsoft Intune, Autopilot, and Entra ID, featuring bulk operations and real-time analytics for streamlined device lifec...
Ugur Koc
@ugurkoc.de

Offboarding devices in Intune, Autopilot, and Entra ID used to be tedious. One device at a time. Multiple Portals. No clear feedback. That’s what motivated me to build Device Offboarding Manager and the latest update (v0.2) makes the process even smoother. What’s new?

Ugur Koc
@ugurkoc.de

✅ Bulk offboarding with a single confirmation ✅ Choose which services to offboard from ✅ Summary with success/failure stats for all devices ✅ Clickable dashboard with drilldowns ✅ Export everything (search, playbooks, dashboard) to clean CSVs ✅ Permission fixes and better playbook reliability

Ugur Koc
@ugurkoc.de

Just pushed IntuneBrew v0.9, this one is for people wanting to run this script on a macOS and also handle App Updates smarter. New in this release: 1. Cross-Platform Support with -ConfigFile ✅ Works on macOS (no more Windows-only limitation)

View full thread
Ugur Koc
@ugurkoc.de

✅ Maintains version history and assignment tracking ✅ Helps avoid clutter in your Intune environment Feedback, ideas, and contributions are always welcome on GitHub. Thanks to the community that created a PR for this Update.

Ugur Koc
@ugurkoc.de

Visit: IntuneBrew.com Quickstart in PowerShell: Install-Script IntuneBrew -Force Source Code: github.com/ugurkocde/I...

github.comGitHub - ugurkocde/IntuneBrew: IntuneBrew is a PowerShell-based tool that simplifies the process of uploading and managing macOS applications in Microsoft Intune. It automates the entire workflow from downloading apps to uploading them to Intune, complete with proper metadata and logos.IntuneBrew is a PowerShell-based tool that simplifies the process of uploading and managing macOS applications in Microsoft Intune. It automates the entire workflow from downloading apps to uploadi...
Ugur Koc
@ugurkoc.de

Just pushed IntuneBrew v0.9, this one is for people wanting to run this script on a macOS and also handle App Updates smarter. New in this release: 1. Cross-Platform Support with -ConfigFile ✅ Works on macOS (no more Windows-only limitation)

Ugur Koc
@ugurkoc.de

✅ Supports non-interactive auth which is great for CI/CD, GitHub Actions ✅ No more dependency on Windows dialogs 2. Smarter App Updates with -UseExistingIntuneApp ✅ Replaces existing apps instead of creating duplicates ✅ Keeps pre/post-install scripts and custom configs

Ugur Koc
@ugurkoc.de

Hope everyone’s enjoying the weather lately. Before I head off to @WPNinjasUK tomorrow, I wanted to share a quick update. I just released a much-needed update to the IntuneRBAC Health Check Tool.

View full thread
Ugur Koc
@ugurkoc.de

Got feature ideas or feedback? Drop it in the comments or open an Issue on GitHub. Always happy to improve it together with the community.

Ugur Koc
@ugurkoc.de

Hope everyone’s enjoying the weather lately. Before I head off to @WPNinjasUK tomorrow, I wanted to share a quick update. I just released a much-needed update to the IntuneRBAC Health Check Tool.

View full thread
Ugur Koc
@ugurkoc.de

• Parallel group member lookups (finally fast) • Progress bar with ETA so you know when it’s coffee time • HTML generation now uses StringBuilder (much quicker) • Batch Graph API requests for better efficiency

Ugur Koc
@ugurkoc.de

Most of these improvements came directly from feedback especially from admins working in large environments where the old version was too slow. Batching and better output handling have made a noticeable difference.

Ugur Koc
@ugurkoc.de

Hope everyone’s enjoying the weather lately. Before I head off to @WPNinjasUK tomorrow, I wanted to share a quick update. I just released a much-needed update to the IntuneRBAC Health Check Tool.

Ugur Koc
@ugurkoc.de

Version 0.4 focuses on performance, usability, and making the output more actionable. A few things that changed: • Dark Mode toggle with persistent preference • CSV export for roles, permissions matrix, and security analysis • Global Search with auto-expand and result highlighting

Ugur Koc
@ugurkoc.de

📢 Self-Service App for macOS - Version 0.1 is live This project started as a weekend idea. Now it supports over 2000 macOS apps via Homebrew – letting users install, uninstall, and update apps directly on their devices.

View full thread
Ugur Koc
@ugurkoc.de

This is built for the community, and eventually I want it to be by the community. The code will be open-sourced with version 1.0. Not rushing that part yet because I want to get it right before making it public. Try it on your test devices. Let me know what breaks.

Ugur Koc
@ugurkoc.de

📢 Self-Service App for macOS - Version 0.1 is live This project started as a weekend idea. Now it supports over 2000 macOS apps via Homebrew – letting users install, uninstall, and update apps directly on their devices.

Ugur Koc
@ugurkoc.de

It’s still an early build, so please don’t roll this out in production yet. But if you work with Intune and macOS, I’d really appreciate your feedback. The core features work, but bugs and rough edges are expected. I’ll be patching frequently based on what you report.

Ugur Koc
@ugurkoc.de

Managing software on macOS should not feel like a constant back-and-forth between users and IT administrators. I’ve been working on a self-service portal that allows users to install and update approved apps independently while giving admins full control. 📦 Users see what's approved

View full thread
Ugur Koc
@ugurkoc.de

Version 0.1 drops this Saturday. It's an early alpha, but releasing it now means the community can help shape what comes next. I will also explain why this approach helped me to remain sane and be able to uninstall, repair and update apps that the Company Portal App could not.

Ugur Koc
@ugurkoc.de

Back in November 2024, I was already building toward this kind of app. Looking at it now, I feel more confident about where it's headed especially in terms of the UI and overall experience. This was the early version:

Ugur Koc
@ugurkoc.de

Managing software on macOS should not feel like a constant back-and-forth between users and IT administrators. I’ve been working on a self-service portal that allows users to install and update approved apps independently while giving admins full control. 📦 Users see what's approved

Ugur Koc
@ugurkoc.de

✅ Admins can push updates when needed 🚫 Block or allow specific apps and vendors 🔁 Better reporting on installed apps and available updates Built with Homebrew and Intune, it's meant to simplify macOS app management without locking things down too tightly.

View full thread
Ugur Koc
@ugurkoc.de

When a certificate is about to expire, when devices start going out of compliance, or when apps fail to install across many devices. It saves time and it means I can enjoy my coffee instead of clicking through logs all morning 😄

Ugur Koc
@ugurkoc.de

I’ve just updated and added 4 scripts that help with this: • Apple Token Expiration • Device Compliance Drift • Stale Device Cleanup • App Deployment Failure They check the tenant for problems and let you know before users start calling. No more guessing or manual checks.

Ugur Koc
@ugurkoc.de

IntuneAutomation is here! A tool that brings together PowerShell scripts to help you automate common (and not-so-common) tasks in Intune. Think compliance reports, app inventory, assignments, diagnostics, and more, all organized by category and ready to use locally or as a Azure Runbook.

View full thread
Ugur Koc
@ugurkoc.de

IntuneAutomation is here! A tool that brings together PowerShell scripts to help you automate common (and not-so-common) tasks in Intune. Think compliance reports, app inventory, assignments, diagnostics, and more, all organized by category and ready to use locally or as a Azure Runbook.

Ugur Koc
@ugurkoc.de

If you’ve ever said, “There must be a better way,” this might save you some time. ▶️ Browse the collection ▶️ Contribute your own scripts ▶️ Use it as a foundation for your own workflows 💡 Built for IT admins, by an IT admin.