← cd ~/tools
// tools/intune-conflicts
Intune policy conflict finder
Load your Settings Catalog policies and find every setting that two or more policies configure, before the conflict shows up on devices. Conflicting values are flagged red, duplicates amber, and each one shows whether the policies' assignments overlap.
Runs entirely in your browser. Nothing you paste is sent anywhere.
Export your policies
This reads every Settings Catalog policy with its settings and assignments, using the Microsoft Graph beta endpoint that the Intune admin centre uses. It only reads.
Connect-MgGraph -Scopes DeviceManagementConfiguration.Read.All
$uri = "https://graph.microsoft.com/beta/deviceManagement/configurationPolicies?`$expand=settings,assignments&`$top=100"
$all = @()
while ($uri) { $r = Invoke-MgGraphRequest -Uri $uri; $all += $r.value; $uri = $r.'@odata.nextLink' }
@{ value = $all } | ConvertTo-Json -Depth 30 | Out-File intune-policies.jsonHow conflicts work
- When two policies assigned to the same device set the same setting to different values, Intune reports a conflict and the setting isn't applied from either.
- The same value in two policies isn't a conflict, but it's worth tidying up so there's one place to change it.
- Assignments here are compared by group. Two different groups can still share members, so "different groups" means "check whether anyone is in both".