Export complete Intune configuration for backup and migration. 26 categories including policies, profiles, and apps.
Related topics
intune export
intune backup
MDM export
device management
intune migration
endpoint manager
About this tool
The Intune Configuration Export tool provides comprehensive backup of your Microsoft Intune environment. Export 26 different configuration categories including device compliance policies, configuration profiles, app protection policies, enrollment restrictions, and more.
Generate migration-ready exports with assignment information preserved. Perfect for disaster recovery planning, tenant migrations, configuration documentation, and change management workflows.
The export produces JSON files organized by category, plus a migration manifest that can be used to recreate your Intune setup in another tenant.
Key features
Export 26 Intune configuration categories
Preserve policy assignments and groups
Generate migration-ready manifests
Document compliance policies
Export app configurations and assignments
Include device enrollment settings
Support for configuration comparison
Scheduled export automation (Pro+)
Use cases
Disaster recovery planning. Restore Intune configuration quickly after accidental deletion
Client documentation. Document and baseline Intune configuration for managed clients
Tenant consolidation. Export source tenant configuration for migration planning
Requires a paid edition (config). The Suite bundle includes this tool alongside every other capability in the catalogue.
Limitations & out-of-scope
The three requested scopes — DeviceManagementConfiguration.Read.All, DeviceManagementApps.Read.All, DeviceManagementManagedDevices.Read.All — are all read-only, meaning the export can document the 26 configuration categories but cannot push, reapply, or roll back a policy in a target tenant; recreation is a manual PowerShell or Graph SDK step an administrator performs afterward. Coverage stops at what Intune itself exposes through Graph, so device-vendor-specific settings applied outside Intune (OEM configurator profiles, firmware-level policies) are not captured.