Tools

MacPPPC

Free Client-side macOS Intune

Building a Privacy Preferences Policy Control profile by hand means writing XML you’d rather not write, and the usual shortcut is a tool that assumes you run Jamf. MacPPPC generates macOS PPPC profiles in the browser and can push them straight into Intune — no XML, no JSON, nothing to install.

What it does

  • Builds PPPC profiles for permissions like Full Disk Access, Screen Recording and Input Monitoring
  • Deploys directly to Intune through Microsoft Graph using your own Entra ID sign-in
  • Or download a .mobileconfig or Settings Catalog JSON and upload it yourself
  • Unlisted app? Drop in its Info.plist, or a zipped .app bundle and it reads the bundle identifier for you
  • Enforces Apple’s actual rules — Camera and Microphone can only be denied, so the tool won’t let you build a profile macOS will ignore
  • 100% client-side. Nothing is proxied through a server, because there isn’t one
Open MacPPPC Read the write-up

MSIinfo

Free Client-side Windows Intune

Getting a ProductCode out of an MSI usually means installing something, running Orca, or trusting an upload site with a vendor installer. Drag the MSI onto MSIinfo instead and it reads the properties you actually need for a Win32 detection rule — in the browser, in a second.

What it does

  • Drag and drop an MSI, get its properties immediately
  • ProductCode, ProductVersion, UpgradeCode and the rest of what detection rules and packaging need
  • No Orca, no PowerShell, no admin rights — works on a locked-down client
  • The file is parsed locally and never uploaded, which matters when the installer is a customer’s
Open MSIinfo Read the write-up

Found a bug, or want something added?

Both tools are free and I keep improving them based on what people actually hit. Open an issue on GitHub, or write to me at simon@simsen.dk.