For IT admins & MSPs · Microsoft Intune
Fix the Intune ownership mess
Affintra automatically resolves endpoint ownership using real usage data, so you stop guessing who actually uses which device.
Sign inLast sign-in: 214 days ago
Primary User assignments drift. Quietly.
In every Intune tenant, the gap between who a device is assigned to and who actually uses it grows over time, and everything built on that assignment degrades with it.
Why it happens
IT enrollment
Devices get enrolled by a technician account, and that account stays the Primary User forever.
Handoffs & reimaging
Devices change hands or get reimaged, but the ownership record never follows.
Shared & forgotten devices
Shared machines and forgotten manual updates leave stale assignments behind.
What it costs you
Wrong app assignments
User-targeted apps and policies land on the wrong people, or not at all.
Unreliable reporting
Ownership-based reports and compliance views stop reflecting reality.
Manual cleanup work
IT teams burn hours cross-referencing sign-in logs to fix assignments by hand.
Safe by construction
It can't break your tenant. By design.
Affintra treats write access to your Intune tenant as a privilege that must be earned every time. Four independent safety gates stand between a recommendation and a change.
01
Dual gates
Nothing writes unless both Prod Mode AND a kill-switch are explicitly enabled. Two independent switches, both required.
02
Dry-run mode
Preview every change before it happens. See exactly what would be written, without writing anything.
03
Idempotent
Never re-applies a change that is already correct. Running twice is always safe.
04
Fully audited
Every write attempt, blocked or successful, is logged with who, what, when, and why.
Evidence in, confidence out
A lightweight agent observes real sign-in and session activity on each device. Affintra turns that evidence into a single confidence score, and only acts when the score says it is safe to.
The confidence model
- Dominance40%
How much of the observed usage belongs to the top user
- Margin30%
How far ahead the top user is over the runner-up
- Consistency20%
How stable the usage pattern is across the window
- Recency10%
How recent the observed usage is
What each score means
0-59
Never apply
60-74
Manual review
75-89
Recommended
90-100
Safe auto-apply
The Evidence Gate
Even a high confidence score won't trigger auto-apply without enough observed usage days behind it. The gate is downgrade-only: it can lower an action, never inflate trust.
From sign-up to first recommendation
Six steps, no agents to babysit, and read-only until you say otherwise.
- 1
Create your account
Sign up and set up your organization workspace.
- 2
Add a tenant
Register the Microsoft Intune tenant you want Affintra to observe.
- 3
Connect Azure
Set up an App Registration with the guided wizard: least-privilege permissions, step by step.
- 4
Download your Remediation package
Grab the tenant-specific package generated for your environment.
- 5
Deploy via Intune
Push it to your devices as an Intune Remediation: SYSTEM context, 64-bit PowerShell.
- 6
Review recommendations in the dashboard
Evidence starts flowing in. Nothing writes until you explicitly enable Prod Mode.