What are these admin tools and why do I need them?

These are specialized PowerShell scripts and applications designed to automate and simplify IT management tasks. They help IT administrators save time on repetitive tasks, reduce manual errors, generate detailed reports, and manage infrastructure at scale. The projects extend native capabilities and make complex operations more accessible.

Where can I find licensing and deployment details?

Each project publishes its own license, hosting model, requirements, and deployment guidance. Follow the project link to review the current documentation and terms before using it in your environment.

Do I need programming knowledge to use these tools?

While basic PowerShell knowledge is helpful, most tools are designed to be user-friendly and come with detailed documentation and step-by-step instructions. Many tools feature graphical user interfaces (GUI) that make them accessible even if you're not comfortable with command-line interfaces. Each tool's GitHub repository includes comprehensive guides to help you get started.

Which tool should I start with?

Choose based on your most pressing management challenge. For device management, start with the Assignment Checker. For macOS environments, IntuneBrew or IntuneMacAdmins are ideal. For identity documentation, try Entra Documentation or Intune Documentation. For automation, explore Agents For Admins or KQL Search. If you need device lifecycle management, the Device Offboarding Manager is essential.

How often are these tools updated?

All tools marked as "Actively Maintained" receive regular updates to support new features, security improvements, and bug fixes. Updates are released as needed, typically when significant platform changes occur or when community members report issues or request features. You can track updates by watching the GitHub repositories.

Can I use these tools in my enterprise environment?

Absolutely. These tools are designed for enterprise use and are already deployed in organizations of all sizes, from small businesses to large enterprises. They follow Microsoft security best practices, support certificate-based authentication, and can be integrated with Azure Automation for scheduled execution. Always test in a non-production environment first and review your organization's security policies.

Blog

Oktay Sari joins ugurlabs as CTO for OpenAdminOS

Oktay Sari

CTO, OpenAdminOS · October 20, 2026

I don’t write blog posts about myself very often, but this one deserves a post. As of today I’m joining ugurlabs as Chief Technology Officer for OpenAdminOS. OpenAdminOS is one of ugurlabs’ products, and it’s the one I’ll be working on. Solely. One product, full focus.

ugurlabs (in case you didn’t know) is the company behind tools a lot of us already use: Intune Assignment Checker, IntuneBrew, KQL Search, IntuneGet and a long list of others. Practical tools, built from field experience, for people who actually run tenants.

Ugur Koc and I have been friends for years. We’ve travelled a lot together, to join community events and to grab a beer, some food and a great conversation. I’ve watched him ship things the community needed before the community knew it needed them. Getting to build with him instead of just cheering from the sidelines is something I’m genuinely looking forward to.

Why OpenAdminOS?

Because I already use this thing almost daily. OpenAdminOS is an open-source desktop app for Intune and Entra admins. You run AI agents against your Microsoft 365 tenant from your own machine. Three things made me fall for it:

It runs on a local LLM

Pick Ollama, pull a model, and your tenant data and prompts never leave your laptop. No per-token bill, no “where did my device list just go” moment. Hosted providers are optional and clearly labeled before anything leaves the device. For the environments I work in that’s not a nice-to-have.

Every change waits for you

Read-only agents run on their own. Write agents stop at a diff. Destructive actions require you to type the phrase shown on screen, every single time. There is no “trust this agent” toggle. As someone who spends his days on hardening and Zero Trust, this is the part I like a lot. The full trust model is public.

Agent Team

This is the feature that gets me excited. Instead of one agent doing one job, you get a roster of teammates with persistent personas, each with their own assignments and schedules, coordinated by a Chief of Staff! It even has a little animated office where you can watch them work :) That’s the kind of thing I want to be part of.

Oh, and the team trained its own community models (OpenAdmin 8B and 20B). I expected a small local model to be a compromise, but feel free to read their benchmark and let me know what you think.

What I’ll actually be doing

My scope is technical leadership of the product and technical content and community presence for OpenAdminOS. It’s already a strong product. My goal is simple: contribute in a positive way and help make it even better for the admins who rely on it.

One more thing

I’m not the only one joining. Another familiar face from the community is coming on board, a Microsoft MVP with a long track record in automation, Infrastructure as Code and End User Computing, and someone who has spent years mentoring and lifting up others in this industry. I’ll leave the introduction to her, but I’m very much looking forward to working together.

Try it yourself

Download it, install Ollama, connect a test tenant and run the inactive devices agent. Then come find me and tell me what breaks. That’s the job now.