MDO Documentation
These guides describe the screens in MDO as they are today. Where something is planned but not built, the page says so and links to Coming next.
Start here
Section titled “Start here”- Getting started: connect a tenant through Microsoft admin consent.
- Tenants and roles: the tenant switcher, inviting people and the four roles.
- Deploying apps: Quick Deploy, Winget and the Microsoft Store, packaged with PSADT on Linux.
- Custom apps: upload your own MSI or EXE.
- Editing an app: the app sheet, drift, new packages, roll back, uninstall everywhere, delete and adopt.
- Updating apps: moving an app to a newer version today.
Compliance and baselines
Section titled “Compliance and baselines”- Compliance: CIS v5, Essential Eight and Microsoft baselines, In policy and On devices, scope, exceptions and attestation.
- CIS Compliance (older page): the older page, under More › Old CIS page.
- Baselines: MDO’s CIS sets and the MDO Hardening card.
Drift, backup and restore
Section titled “Drift, backup and restore”- Drift detection: changed settings, acknowledging changes, and approving, reverting or dismissing them.
- Storage setup: a storage account in your own Azure subscription.
- Backup and restore: nightly backups and restoring a policy.
- Audit and Activity: every Intune and Entra change with who made it, Revert, alerts, protected objects, anomalies and reports, and Activity, the record of who did what in MDO.
Reference
Section titled “Reference”- Troubleshooting
- How MDO treats your tenant: permissions, backups, roles and data.