IntuneHydrationKit

0.3.0

Hydrates Microsoft Intune tenants with best-practice baseline configurations including policies, compliance packs, enrollment profiles, dynamic groups, security baselines, and conditional access starter packs.

Minimum PowerShell version

7.0

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name IntuneHydrationKit -RequiredVersion 0.3.0

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name IntuneHydrationKit -Version 0.3.0

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) 2025 Jorgeasaurus. All rights reserved.

Package Details

Author(s)

  • Jorgeasaurus

Tags

Intune Microsoft365 Graph Baseline Compliance Security Autopilot MDM Endpoint MEM Azure EntraID ConditionalAccess DeviceManagement

Functions

Invoke-IntuneHydration Connect-IntuneHydration Test-IntunePrerequisites New-IntuneDynamicGroup New-IntuneStaticGroup Get-OpenIntuneBaseline Import-IntuneBaseline Import-IntuneCompliancePolicy Import-IntuneAppProtectionPolicy Import-IntuneNotificationTemplate Import-IntuneEnrollmentProfile Import-IntuneDeviceFilter Import-IntuneConditionalAccessPolicy Import-IntuneMobileApp Initialize-HydrationLogging Write-HydrationLog Import-HydrationSettings New-HydrationResult Get-ResultSummary Get-GraphErrorMessage Test-HydrationKitObject Get-ObfuscatedTenantId

PSEditions

Core

Dependencies

Release Notes

## v0.3.0

- **Fixed:**
 - Issue #12: Logs and reports now created when using `-WhatIf` parameter
   - Log files are always written regardless of WhatIf mode
   - Summary reports (both Markdown and JSON) are always generated
   - Report mode correctly displays "Dry-Run" when WhatIf is enabled
 - Issue #13: TenantId parameter consistency across functions
   - Both `Connect-IntuneHydration` and `Invoke-IntuneHydration` now require GUID format
   - Documentation and examples updated to reflect GUID-only requirement
 - Tenant ID obfuscation in console output for security (e.g., `0e3028c5****-****-****-eea5ff7417b5`)

- **Changed:**
 - Logging and reporting operations now explicitly bypass `-WhatIf` using `-WhatIf:$false`
 - TenantId parameter validation standardized to GUID format across all public functions

FileList

Version History

Version Downloads Last updated
0.3.1 12 1/9/2026
0.3.0 (current version) 50 1/5/2026
0.2.9 5 1/5/2026
0.2.8 13 1/3/2026
0.2.7 17 1/1/2026
0.2.6 44 12/22/2025
0.2.5 21 12/18/2025
0.2.3 56 12/14/2025
0.2.2 95 12/9/2025
0.2.1 23 12/8/2025
0.1.1 29 11/28/2025
Show more