Skip to main content
NewLocal MCP is available on npm

Intune Assignment
Checker

Explain Microsoft Intune assignments through detailed PowerShell reports or a local, read-only MCP. See which policies and apps target users, groups, and devices, and why.

GitHubPS Gallery
PowerShell 7
PS C:\Users\UgurKoc> Install-PSResource IntuneAssignmentChecker
PS C:\Users\UgurKoc> IntuneAssignmentChecker
Interactive Demo of the ReportGetting Started Guide
Local MCP · Read-only

Bring Intune assignment answers into your AI workflow

Your MCP client launches the open-source server locally through npx. Microsoft sign-in happens in your browser, tokens stay protected on your machine, and every Graph request is bounded and read-only.

Install the Local MCPReview the Security Model

Works with local stdio MCP clients

  • Claude Desktop
  • Claude Code
  • ChatGPT Desktop
  • Codex
  • Cursor
  • VS Code
stdio · local
$ npx -y intune-assignment-checker-mcp@latest

Ask

“Why does this device receive the Endpoint Security policy?”

Assignment reason chain

  1. Policy assignment loaded from Microsoft Graph /beta
  2. Included group matched the signed-in user's device
  3. No exclusion or assignment filter blocked targeting
Read-only Graph scopesTokens stay localOpen-source package

Key Features

Comprehensive Assignment Checks

Check assignments for users, groups, and devices with detailed reporting.

All Users & Devices View

View all 'All Users' and 'All Devices' assignments in one place.

Secure Authentication

Support for both interactive and certificate-based authentication.

Interactive Reports

Generate detailed HTML reports with charts and filterable tables.

Policy Management

Track Configuration Profiles, Compliance Policies, and Applications.

Auto-Update Feature

Built-in functionality to keep the tool up to date.