What is Movewise?
A free, open-source Windows app that migrates Microsoft 365 policies from one tenant to another: Conditional Access, Intune, Defender for Office 365, Defender for Endpoint, Exchange Online, Purview, Teams and SharePoint settings. It maps every dependency, runs a pre-flight dry run, deploys in order and can roll back.
Is it free?
Yes. Movewise is free and open source under the MIT license. The source code and releases are on GitHub.
Does it migrate mailboxes, files or Teams chats?
No. Movewise migrates policies and settings only. Mailboxes, OneDrive and SharePoint files, Teams chats and other user data need a separate data migration tool.
Can it change the source tenant?
No. The source tenant only ever gets read-only clients: its Microsoft Graph client has no write methods, and its PowerShell sessions refuse anything but Get- cmdlets.
How do I migrate Conditional Access policies to another tenant?
Sign in to both tenants, choose the policies on Discover, match the groups, users, apps, named locations and authentication strengths they use on the Map screen, check the pre-flight dry run, and deploy. Every Conditional Access policy is created in report-only mode. More on Conditional Access migration.
Can I undo a migration?
Yes. Every deployment is a run that can be rolled back. Rollback deletes only the objects the run created and puts back the earlier values of settings it changed. Nothing that was in the destination before is deleted.
What happens if a policy with the same name already exists?
Pre-flight lists name conflicts. For each one you choose to skip it, create it with a suffix, or update the existing policy in place, in which case only the settings that differ are changed, and rollback puts the policy back.
What permissions does it need?
Admin accounts in both tenants. When you first sign in to the destination, Movewise sets up its app registration there. You can use your own registration instead. The full list of permissions is in the app registration guide.
Can I try it without a tenant?
Yes. Try the demo on the Connect screen connects two built-in sample tenants, Contoso and Fabrikam, that live only on your PC. Every step works, including deploy and rollback.
What does it need to run?
64-bit Windows 10 or 11. .NET and the Exchange Online and Teams PowerShell modules are included in the installer, which installs for the current user with no admin rights needed.
Is the installer signed?
Not yet. Current releases are unsigned test builds, so Windows SmartScreen warns when the installer runs. Try it against test tenants first.
Where is my data kept?
On your PC, under %LOCALAPPDATA%\MovewiseData: saved exports, deployment runs, snapshots, baselines and support logs. Support logs have tokens, email addresses, tenant domains and IP addresses removed.
Can it compare tenants or detect drift?
Yes. Compare shows differences between two tenants, or between a tenant and a snapshot of it. The drift monitor checks each tenant against its latest snapshot, and changes can be restored. More on compare and drift.