Book a demo
Policy history for Intune

Undo the policy change that ruined Monday

Intune’s audit log tells you who changed a policy. Eido keeps every version and restores the one that worked.

Free trial, no credit card required.

Policy settings history in Eido: each setting of each policy, its value, when that value took effect and how long it has held, such as minimum OS versions and BitLocker encryption methods.

Trusted by teams delivering secure digital workplaces

  • Nerdio
  • EBF
  • Fyffes
  • Morrison
  • @GROUP
  • Premier Trailer Leasing
  • Buchanan Technologies
  • Artelia
  • The Children’s Society
  • UMB
  • ConXioN
  • Uniq
The Friday change

Who changed it is only half the answer

Friday afternoon, somebody changes a compliance policy. On Monday, devices that were fine are failing and the service desk is full. The audit log names who did it. What you need is the version that worked, and without it you are rebuilding settings from memory and screenshots while devices stay out of compliance.

Intune on its own

The audit log records who changed a policy and which properties. There is no saved version to go back to. Microsoft Learn: Audit changes and events in Intune

With Eido

A new version of a policy every time it changes, the value of every setting over time, and a restore when a change goes wrong.

See every version of your own policies, and how a restore works.

Version history

Every version, every setting

Eido checks your policies about once an hour and keeps a new version whenever a policy’s settings or assignments change. See exactly what changed, when, and how long each value held.

  • Every policy type backed up, from compliance and settings catalog to app protection and Conditional Access
  • Each version against the one before it, side by side, settings and assignments
  • Who made each change, from Intune’s own audit log where Eido can tell
  • A policy deleted from Intune, kept with its history for 30 days
Policy Management in Eido: every Intune policy Eido has backed up, grouped by type on the left, with its platform, tenant, policy type, status and when it was last backed up.
Restore

Put back the version that worked

Three steps, started by an administrator, and nothing changes until you confirm.

  1. 1

    Pick the version that worked

    Open the policy’s Version History and press Restore on the version you want back.

  2. 2

    Choose what to put back

    The settings, the assignments, or both, and see exactly what will be written before anything changes.

  3. 3

    Confirm it is you

    A quick Microsoft sign-in, and the policy is back. Eido keeps the version it replaced, so the restore can be undone too.

We reduced broken configuration policies, cut unused licences, and saved approximately $30,000.

The visibility Eido gave us changed everything.

Morrison Leo MIT Leader, Morrison Global

Next time a change goes wrong, have the version that worked ready to put back.

The rest of Eido

There is more to Eido than policy backup

The same product, alongside Intune, in one place.

120+ Intune reports, ready the day you connect

Compliance, patching, apps, Autopilot, policy and audit, joined to every device, user and Entra group, with 12 months of history behind them. No Power BI project, and no Graph API scripts to maintain.

An Eido dashboard: compliance, device and issue tiles, compliance broken down by department, the top issues, and charts of devices by OS, patch status and warranty cover.

Each team sees its own devices, without scope tags

Rules on real device and user attributes, such as department, office or device name, applied to every report and dashboard. No scope tags to set up or maintain.

Your Intune estate
  • London service desk Office is London
  • Mobile team OS is iOS, iPadOS
  • VIP support Department is C-Level
Each team sees only its own devices, in every report and dashboard.

Problems reach the service desk on their own

When an alert fires or an automation runs, Eido raises a ServiceNow incident with the device’s primary user as the caller, or posts to Teams, Slack, email or a webhook. ServiceNow SAM reads app usage from Eido.

No spreadsheets, and nobody copying anything across by hand.

Complete patch status, on every platform

Windows, Windows 365, macOS, iPhone, iPad and Android in one view, graded against your own rules with update ring deferrals taken into account. Down to each patch on each device.

OS patch status by platform 811 devices
  • Windows 66% 28% 542
  • Windows 365 73% 27% 100
  • macOS 83% 17% 48
  • iPhone 65% 32% 82
  • iPad 75% 25% 20
  • Android 89% 11% 19

Device data from minutes ago, not hours

Intune checks in about every 8 hours. With the Eido Client, inventory refreshes as often as every 15 minutes, up to 32x fresher, and a device can be fixed from its page without a remote session.

In one day, Intune's scheduled check-in happens about 3 times. At its fastest settings the Eido Client refreshes inventory up to 96 times, checks the event log 288 times and samples performance up to 28,800 times. One day on one Windows device. The Eido Client at its fastest settings; each tenant chooses its own. Intune’s scheduled check-in is about every 8 hours (Microsoft Learn), and some changes are pushed sooner.

Know why the laptop is slow before the ticket arrives

An experience score for every device, every night, with the reason behind it: the app, the network, the logon or the Intune change.

Experience score 77Fair 30-day average, 596 devices scored
  • Startup and logon 68
  • Performance 74
  • Network 81
  • Reliability 85
  • Device health 89

Intune changes that hurt experience

  • Win11 – Security Baseline Settings changed 7 Oct Worse Logons +38% 214 devices
  • Teams – Update Policy Assignments changed 6 Oct Worse Crashes +61% 88 devices

Each change compared with the rest of the tenant over the same days, so a bad Monday is not blamed on it.

See who opens every paid app, before you renew it

Intune knows where an app is installed, not who uses it. Eido shows who ran each app, on how many days and for how long, so a renewal is a decision, not a guess. No new agent to install.

App usage, last 30 days UsersAvg hours / user
  • Tableau Desktop 12 19.4
  • Adobe Photoshop 21 11.3
  • Microsoft Visio 26 10.4
  • Microsoft Project 14 10.4
  • Adobe Illustrator 13 10.1
  • Bloomberg Terminal 9 6
  • Autodesk AutoCAD 9 1.6

9 users, 1.6 hours each in a month. Worth a look before the renewal.

See the product page for more →

FAQs

Questions about policy backup and restore

Which policy types can Eido restore?

Compliance policies, device configuration and settings catalog policies, PowerShell and shell scripts, remediations, and Windows driver, quality and feature update profiles. App configuration, app protection, Windows Information Protection and Conditional Access policies are backed up and their versions can be compared, but not restored from Eido.

Who can restore a policy?

An administrator, on a tenant linked to Eido with Read-Write Access. Before the restore runs, Eido asks for a Microsoft sign-in to confirm it is still you, unless you signed in or confirmed it in the last 15 minutes.

Does Eido change my tenant without asking?

No. Syncing is read-only, and Eido never changes your tenant in the background. It writes to Intune only when an administrator restores a policy or deploys a policy template, and it never deletes a policy. A tenant linked read-only cannot be written to at all. The documentation lists every permission.

See every version of your own policies

In 15 minutes we will show you a policy’s versions, what changed between them and how a restore works. Or request a trial and connect your own tenant.

Book a demo

A 15-minute look at Eido on the Intune problems you have today. Pick a time that suits.

Form not loading? Open it on its own page.

Request a trial

Connect your own tenant and try every feature, Software Metering included. No credit card required.

Form not loading? Open it on its own page.