Microsoft Intune iconIntune Health Check
Microsoft Intune product logo

Intune Health Check: from guesswork to evidence in two minutes

How healthy is your Intune tenant?

Sign in with an administrator account for your own Microsoft 365 tenant. The Intune Health Check reads your configuration read-only, directly in your browser and shows you the findings immediately.

Permissions, data, access: what to know

What we read and what we do not

Every permission the Health Check asks for is a Read.All permission. Nothing is changed in your tenant, and nothing is transmitted to us unless you decide to share it at the end.

Icon of a shield with a warning triangle: the Intune Health Check is read-only

Read-only by design

  • No changes to any policy or device
  • No user data, no mail, no files
  • You sign in with Microsoft, so your credentials never reach us
Icon of a monitor showing binary digits: Intune policies read as data

What the Health Check looks at

  • Configuration profiles, compliance policies, device configurations, app protection and app configuration policies
  • The groups and filters those policies target
  • Tenant-level Intune health: connectors, Apple/Android tokens, enrollment, RBAC
Icon of a bar chart on a monitor: the Intune Health Check findings

What you get right away

  • The findings on screen, with the policies they came from
  • The complete Health Check as a file, yours to keep in any case
  • A 30-minute session with us if you want the full comparison
Show the exact permissions requested

    How the Intune Health Check works

    • Sign in
      Sign in
      An administrator approves read-only access to Intune.
    • Pick the platforms
      Pick the platforms
      All platforms give the fullest picture. Windows and macOS, or mobile alone, is the faster option.
    • Run the Health Check
      Run the Health Check
      Your browser reads policies, assignments and tenant health from Microsoft Graph, on your machine, never on ours.
    • See the findings
      See the findings
      On screen right away, plus the complete data as a download.
    Icon of a stopwatch: the Intune Health Check takes about two minutes

    Two minutes, not two weeks

    No questionnaire, no workshop, no access request. The Health Check reads what is actually configured, evidence instead of assumptions.

    Icon of a monitor and a phone: Windows, macOS, iOS/iPadOS and Android devices managed in Intune

    Every platform you manage

    Windows, macOS, iOS/iPadOS and Android. We only assess the platforms you actually manage in Intune, never the ones you deliberately left out.

    Icon of a checklist with ticks: measured against the glueckkanja Intune Foundation baseline

    Measured against the Intune Foundation

    The findings here come from your own tenant. The full assessment compares them against the glueckkanja Intune Foundation, the baseline behind our Managed Intune service.

    Questions we hear about permissions, data, and access

    Answered briefly. If your question isn't here, ask us below.

    I cannot approve the permissions myself.

    No problem. The read-only permissions only need to be approved once for your tenant, by someone who can approve apps in your organization. Simply forward this page to them: they sign in, approve, and can run the Health Check right away or leave it to you.

    If that is not an option, for example because your organization does not approve third-party apps, just let us know below. We are happy to send you a PowerShell script that runs the same checks.

    Which account do I sign in with?

    Any account that can already read Intune: an Intune Administrator, a Global Reader, or a Global Administrator. The permissions are delegated, so the Health Check sees exactly what your account sees, never more.

    Can I remove the access again?

    Yes, at any time. The approval appears as the enterprise application glueckkanja Intune Health Check in the Microsoft Entra admin center. Delete it there and the Health Check cannot read anything until an administrator approves it again. There is nothing to revoke on our side, because nothing was stored.

    Does anything leave my browser?

    Not on its own. Your browser reads the configuration from Microsoft Graph and keeps the result in the open tab. The one exception is your choice: when you request a session, you can tick a box to send the export along with it.

    What happens after the Health Check?

    You keep the findings on screen and the complete data as a download. If you want the full comparison against the glueckkanja Intune Foundation, request a session below and we schedule 30 minutes with you. Nothing happens automatically: we only get in touch when you send the form.

    Let's talk about your Intune tenant.

    How far is your tenant from the glueckkanja Intune Foundation, and what would it take to close the gap? Leave your details and we will get in touch to schedule your session.
    Portrait of Alexander Schlindwein, Workplace Lead at glueckkanja
    Modern device management means cloud, standards, and automation. Anything else just wastes time, energy, and puts your security at risk.
    Alexander SchlindweinWorkplace Lead

    Prefer to talk directly?

    site/phone +49 69 4005520
    site/mail info@glueckkanja.com

    You sign in with Microsoft to send the request. Your credentials never reach us.