microsoft / intune-config-frameworks Goto Github PK

Hello,

On new AzureAD powershell module, there is not anymore the files on C:\Program Files\WindowsPowerShell\Modules\AzureAD\2.0.2.140 :
-Microsoft.IdentityModel.Clients.ActiveDirectory.dll
-Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.dll
-Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.xml
-Microsoft.IdentityModel.Clients.ActiveDirectory.xml

and cause an error.

I add to copy them from older AzureAD version for the connection to AzureAD account works.

Thanks to update it to be working on the last version :)

{
"@odata.type": "#microsoft.graph.iosCompliancePolicy",
"description": "Level 1 is the minimum security configuration for an enterprise mobile device owned by the organization.",
"displayName": "iOS basic security compliance (Level 1)",
"passcodeBlockSimple": false,
"passcodeExpirationDays": null,
"passcodeMinimumLength": 6,
"passcodeMinutesOfInactivityBeforeLock": null,
"passcodeMinutesOfInactivityBeforeScreenTimeout": 5,
"passcodePreviousPasscodeBlockCount": null,
"passcodeMinimumCharacterSetCount": null,
"passcodeRequiredType": "deviceDefault",
"passcodeRequired": true,
"osMinimumVersion": null,
"osMaximumVersion": null,
"osMinimumBuildVersion": null,
"osMaximumBuildVersion": null,
"securityBlockJailbrokenDevices": true,
"deviceThreatProtectionEnabled": true,
"deviceThreatProtectionRequiredSecurityLevel": "secured",
"managedEmailProfileRequired": false,
"restrictedApps": [

                   ]

}

These scripts use the AzureAD module, which is being deprecated: https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/important-azure-ad-graph-retirement-and-powershell-module/ba-p/3848270

They should be updated to use https://www.powershellgallery.com/packages/Microsoft.Graph/

The README is missing instructions on how to execute this for delegated orgs using GDAP, so that partners can use it with managed customers

Hello - I'm getting the following errors when attempting to run either ps1 import script. Have tried on multiple tenants, ensured licensing, powershell version, modules imported.

Response content:
{"error":{"code":"ModelValidationFailure","message":"An entry with type 'microsoft.management.services.api.iosGeneralDeviceConfiguration' was found, but it is not assignable to the expected type 'microsoft.management.services.api.deviceCompliancePolicy'. The type specified in the entry must be equal to either the expected type or a derived type.","innerError":{"message":"An entry with type 'microsoft.management.services.api.iosGeneralDeviceConfiguration' was found, but it is not assignable to the expected type 'microsoft.management.services.api.deviceCompliancePolicy'. The type specified in the entry must be equal to either the expected type or a derived type.","date":"2023-11-09T19:25:50","request-id":"5edac270-14bb-498d-831e-ab45e7487d54","client-request-id":"5edac270-14bb-498d-831e-ab45e7487d54"}}}
Add-DeviceCompliancePolicy : Request to https://graph.microsoft.com/Beta/deviceManagement/deviceCompliancePolicies
failed with HTTP Status BadRequest Bad Request
At C:\Intune\Intune-Config-Frameworks-master\iOS\Supervised\CompliancePolicy_Import_FromJSON.ps1:350 char:1

• Add-DeviceCompliancePolicy -JSON $JSON_Output

•   + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Add-DeviceCompliancePolicy
  

new link
https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune