How to create a backup of your Microsoft Endpoint Manager (Intune) infrastructure!

Dear Microsoft Intune Friends,

Imagine the following situation. You have invested several hours to build your Microsoft Endpoint Manager (Intune) infrastructure. After the final tests, everything is now working exactly as you imagined. Now the question arises how can I backup all these settings and configurations? I will answer this question in this article.

Note: I will describe how to compare and restore the backup in a next article.

https://techcommunity.microsoft.com/t5/microsoft-intune/compare-and-restore-a-microsoft-endpoint-manager-intune-backup/m-p/2993736

What we can do in the Microsoft Endpoint Manager portal is export configuration settings to a CSV file. However, this is not exactly what I wanted.

To create a complete backup of our tenant we need the power of PowerShell (power of PowerShell - funny )

I used the PowerShell ISE for this configuration. But you are also very welcome to use Visual Studio Code, just as you wish. Please start with the following steps to begin the deployment (the Hashtags are comments):

#The first two lines have nothing to do with the configuration, but make some space below in the blue part of the ISE
Set-Location
Clear-Host

#Customize the ExecutionPolicy (absolutely OK for this demo)
Set-ExecutionPolicy -ExecutionPolicy Unrestricted

#Install the Module
Install-Module -Name Microsoft.Graph.Intune -Verbose -Force -AllowClobber

#Install the Module
Install-Module -Name MSGraphFunctions -Verbose -Force -AllowClobber

#Import the Module
Import-Module -Name MSGraphFunctions

#Install the Module
Install-Module -Name AzureAD -Verbose -Force -AllowClobber

#Install IntuneBackupAndRestore from the PowerShell Gallery
Install-Module -Name IntuneBackupAndRestore -Verbose -Force -AllowClobber

#Update the Module
Update-Module -Name IntuneBackupAndRestore -Verbose

#Import the Module
Import-Module IntuneBackupAndRestore

#Connect to Microsoft Graph
Connect-MSGraph

Here you must agree to the extended permissions.

#Create a folder
New-Item -ItemType Directory -Path C:\Backup\IntuneBackup

#Switch to the folder
Set-Location C:\Backup\IntuneBackup

#Create the Full-Backup
Start-IntuneBackup -Path 'C:\Backup\IntuneBackup'

It starts with the creation of the backup.

#Let's look at the content
Get-ChildItem -Path 'C:\Backup\IntuneBackup'

Let's start Windows Explorer and navigate to our backup folder, Bingo....we have a complete backup!

I know that was nothing spectacular, but I still wanted to share my experience with you.

Thank you for taking the time to read this article.

Kind regards, Tom Wechsler

P.S. All scripts (#PowerShell, Azure CLI, #Terraform, #ARM) that I use can be found on github! https://github.com/tomwechsler