Endpoint Toolbelt
Intune problems fixed on the device itself. Without admin rights.
An app that stays stuck, a sync that does not come, a full disk. Endpoint Toolbelt says in plain words what is wrong, and fixes it when there is an action for it.
Version 1.1.0 is released. The download follows once code signing is in place.
Endpoint Toolbelt by SoulBit. Works with Microsoft Intune.
Sound familiar?
An app stays on installing
The IME tries again later. When depends on the error code and the next check-in.
Someone has to walk over
The fix is often one known step, but it needs admin rights.
Collecting logs is manual work
IME logs, MDM diagnostics and sign-in state are each in a different place.
How it works
An app that does not install, from report to fixed.
Step 1 of 4
The user gets stuck
An app stays stuck. Instead of calling, the user opens Endpoint Toolbelt.
Step 1 of 4Step 2 of 4
The app says what is wrong
One line at the top, such as "1 problem, 1 to check.", and only the checks that need attention, with the action that fixes them.
Step 2 of 4Step 3 of 4
One action fixes it
Retry apps & policies restarts the Intune Management Extension, clears the wait and requests a sync.
Step 3 of 4Step 4 of 4
Evidence, not a promise
An action reports success only when the device shows the effect. If it fails, the user copies the result for the service desk with Copy summary.
Step 4 of 4
What Endpoint Toolbelt fixes
The first two are buttons in the main window, the others are under More tools. Below each heading is the name in the app.
In the main window
Retry apps and policies
Retry apps & policies
Shows for each app how far its last attempt got, and reports a download that is stuck.
In the main window
Support package
Create support package
Logs and diagnostics for the service desk in one zip file.
Full IME reset
Clears app state, downloads and policy cache. Scripts are left alone.
Download app files again
Clear downloaded app content
Have unpacked app files that are not in use downloaded again.
Repair Windows Update
Diagnoses first. Changes nothing when the device is current, and never restarts it.
Secure the recovery key
Back up recovery key
The existing BitLocker key to Microsoft Entra ID, without reading it.
Update Defender
Update Defender definitions
With Defender's own update tool.
Sync the clock
Sync clock
Resync with the time source, without changing it.
Free up disk space
Temporary files, Delivery Optimization and the component store.
Safe for a standard user
No admin rights for the user
A small Windows service does the work, and runs only a fixed set of actions.
The administrator sets the limits
Waiting times, an hourly maximum and your own support text, for example through Intune.
Visible what changed
After every action, a list of what was changed on the device.
On shared devices too
On Azure Virtual Desktop, actions for every session ask for an extra confirmation.
Common tasks
One task from start to finish: first what Intune itself offers, then what this product adds.
All the details
The nine checks
The window opens with one line about the device, for example “All 9 checks OK.”, and shows only the checks that need attention. “Show all 9 checks” shows them all:
- the connection with Intune: enrollment, the Intune certificate and the last sync;
- the Intune Management Extension: the service and the last time it fetched apps;
- the work account: Entra join and the sign-in token;
- the network to Intune, free disk space and a pending restart;
- configuration profiles that could not be applied, the clock and Microsoft Defender.
When something is wrong, the app says in one sentence what it is, with a link to the action that fixes it when there is one, and otherwise with a pointer to the service desk. For the service desk there is a device report with the technical details.
Tools for the user
Besides the repair actions, the app has tools that work in the user’s own context: a connectivity test to Intune, refreshing the work account sign-in, resetting the user’s own sign-in cache, clearing the Teams cache, resetting the Company Portal data, opening the IME logs, and Copy summary, which copies the result for a message to the service desk.
Limits the administrator sets
Far-reaching actions always ask for confirmation; that is built into the app. The administrator sets the waiting time between two full IME resets and between two Windows Update repairs (0 switches a waiting time off), the maximum number of actions per user per hour (which cannot be switched off), whether actions that affect every session on a shared device are blocked, a support text and link of their own in the app, and among other things settings for the Windows Update repair. That can be done at installation or through the registry, for example with Intune.
What you need
- Windows 10 22H2 or Windows 11, 64-bit, enrolled in Microsoft Intune.
- .NET Framework 4.8 and Windows PowerShell 5.1, which are part of Windows.
- Installation with admin rights: the MSI package, for example as a Win32 app in Intune installed as System.
License
Endpoint Toolbelt is free, also for use in your organization. The plan is to make the source code public under the MIT license once code signing is in place.
Want to know when the download is out?
Mail us, and we will let you know.
Also from SoulBit
Toolbelt Connect
Remote support for Intune-managed Windows devices
Your service desk does remotely what Endpoint Toolbelt does on the device: from the browser and, by default, with the user's consent.
More about Toolbelt Connect
Endpoint ToolbeltTell me when it is out