mirror of
https://github.com/Micke-K/IntuneManagement.git
synced 2026-09-28 10:55:38 +02:00
IntuneManagement 4.0.0-beta1
This commit is contained in:
Mikael Karlsson
@@ -0,0 +1,357 @@
|
||||
#ImportOrder 220
|
||||
|
||||
#########################################################################################
|
||||
#
|
||||
# Windows Update Group
|
||||
#
|
||||
#########################################################################################
|
||||
|
||||
[Diagnostics.CodeAnalysis.SuppressMessageAttribute("TypeNotFound","", Justification = "")]
|
||||
class WindowsUpdateGroup : IntunePolicyGroupBase
|
||||
{
|
||||
WindowsUpdateGroup() : Base()
|
||||
{
|
||||
$this.Init()
|
||||
}
|
||||
|
||||
Init()
|
||||
{
|
||||
$this._ID = "WindowsUpdates"
|
||||
$this._Name = "Windows 10 and later updates"
|
||||
$this._Icon = "UpdatePolicies"
|
||||
}
|
||||
}
|
||||
|
||||
#########################################################################################
|
||||
#
|
||||
# Update Rings
|
||||
#
|
||||
#########################################################################################
|
||||
|
||||
# region Update Rings
|
||||
class WindowsUpdatePolicyType : IntunePolicyTypeBase
|
||||
{
|
||||
WindowsUpdatePolicyType() : Base()
|
||||
{
|
||||
$this.Init()
|
||||
}
|
||||
|
||||
Init()
|
||||
{
|
||||
$this._PolicyGroup = (Get-SingletonObject "WindowsUpdateGroup")
|
||||
$this._PolicyName = "Update rings"
|
||||
$this._ID = "UpdatePolicies"
|
||||
$this._PlatformName = Get-LanguageString "Platform.windows" -IgnoreMissing # every member of the group is Windows
|
||||
$this._API = "deviceManagement/deviceConfigurations"
|
||||
$this._QueryList = "?`$filter=isof(%27microsoft.graph.windowsUpdateForBusinessConfiguration%27)"
|
||||
$this._Permissions = @("DeviceManagementConfiguration.ReadWrite.All")
|
||||
$this._ObjectClass = "WindowsUpdatePolicyObject"
|
||||
$this._PropertiesToRemove = @('version','qualityUpdatesPauseStartDate','featureUpdatesPauseStartDate','qualityUpdatesWillBeRolledBack','featureUpdatesWillBeRolledBack')
|
||||
$this._Icon = "UpdatePolicies"
|
||||
$this._ExpandAssignmentsList = $false
|
||||
|
||||
if($null -ne $this._PolicyGroup) {
|
||||
$this._PolicyGroup.AddPolicyType($this)
|
||||
}
|
||||
|
||||
$this._PolicyTypeOrder = 90
|
||||
}
|
||||
|
||||
[Boolean]CheckPolicy([PSCustomObject]$PolicyObject)
|
||||
{
|
||||
if($PolicyObject.'@odata.type' -ne "#microsoft.graph.windowsUpdateForBusinessConfiguration") { return $false }
|
||||
|
||||
return $true
|
||||
}
|
||||
}
|
||||
|
||||
Class WindowsUpdatePolicyObject : IntunePolicyBase
|
||||
{
|
||||
WindowsUpdatePolicyObject([PSCustomObject]$JsonObj) : Base($JsonObj) { $this.Init() }
|
||||
|
||||
WindowsUpdatePolicyObject() : Base()
|
||||
{
|
||||
$this.Init()
|
||||
}
|
||||
|
||||
Hidden Init()
|
||||
{
|
||||
#$this._PlatformName = Get-LanguageString "Platform.windows"
|
||||
#Add-ObjectProperty $this "ScriptType" { "PowerShell script" }
|
||||
|
||||
$this._PolicyType = (Get-SingletonObject "WindowsUpdatePolicyType")
|
||||
}
|
||||
}
|
||||
|
||||
#########################################################################################
|
||||
#
|
||||
# Feature Updates
|
||||
#
|
||||
#########################################################################################
|
||||
|
||||
# region Feature Updates
|
||||
class FeatureUpdateType : IntunePolicyTypeBase
|
||||
{
|
||||
FeatureUpdateType() : Base()
|
||||
{
|
||||
$this.Init()
|
||||
}
|
||||
|
||||
Init()
|
||||
{
|
||||
$this._PolicyGroup = (Get-SingletonObject "WindowsUpdateGroup")
|
||||
$this._PolicyName = "Feature updates"
|
||||
$this._ID = "FeatureUpdates"
|
||||
# Platform default: the endpoint serves exactly one platform and the
|
||||
# objects carry no platforms/platformType field, so the column would
|
||||
# otherwise be blank (windowsFeatureUpdateProfiles is Windows-only).
|
||||
$this._PlatformName = Get-LanguageString "Platform.windows" -IgnoreMissing
|
||||
# Endpoint rejects a name $filter (verified live 2026-08-27) - searches filter client-side.
|
||||
$this._SupportsNameFilter = $false
|
||||
$this._API = "deviceManagement/windowsFeatureUpdateProfiles"
|
||||
$this._Permissions = @("DeviceManagementConfiguration.ReadWrite.All")
|
||||
$this._ObjectClass = "FeatureUpdateObject"
|
||||
$this._Dependencies = @('Applications')
|
||||
# Read-only/derived properties the update PATCH must not send back.
|
||||
$this._PropertiesToRemoveForUpdate = @('deployableContentDisplayName','endOfSupportDate')
|
||||
$this._TopItems = 0
|
||||
# Graph returns HTTP 400 on `windowsFeatureUpdateProfiles?$expand=assignments`;
|
||||
# assignments are loaded via Add-GraphPolicyAssignments after listing.
|
||||
$this._ExpandAssignmentsList = $false
|
||||
# The endpoint caps `$top` at 200; the bulk-export default of 1000 produces
|
||||
# `400: The limit of '200' for Top query has been exceeded`. Disabling page-
|
||||
# size for this type drops $top entirely — Graph applies its own default.
|
||||
$this._HasPageSizeSupport = $false
|
||||
|
||||
if($null -ne $this._PolicyGroup) {
|
||||
$this._PolicyGroup.AddPolicyType($this)
|
||||
}
|
||||
}
|
||||
|
||||
[Hashtable]PreImportAssignmentsCommand([PSCustomObject]$PolicyObject, [PSCustomObject]$SourceObject)
|
||||
{
|
||||
return (@{ "API" = "$($this.API)/$($PolicyObject.Id)/microsoft.graph.managedDeviceMobileAppConfiguration/assign" })
|
||||
}
|
||||
}
|
||||
|
||||
Class FeatureUpdateObject : IntunePolicyBase
|
||||
{
|
||||
FeatureUpdateObject([PSCustomObject]$JsonObj) : Base($JsonObj) { $this.Init() }
|
||||
|
||||
FeatureUpdateObject() : Base()
|
||||
{
|
||||
$this.Init()
|
||||
}
|
||||
|
||||
Hidden Init()
|
||||
{
|
||||
$this._PolicyType = (Get-SingletonObject "FeatureUpdateType")
|
||||
}
|
||||
}
|
||||
|
||||
#########################################################################################
|
||||
#
|
||||
# Quality Updates
|
||||
#
|
||||
#########################################################################################
|
||||
|
||||
# region Quality Update Profiles
|
||||
class QualityUpdateProfileType : IntunePolicyTypeBase
|
||||
{
|
||||
QualityUpdateProfileType() : Base()
|
||||
{
|
||||
$this.Init()
|
||||
}
|
||||
|
||||
Init()
|
||||
{
|
||||
$this._PolicyGroup = (Get-SingletonObject "WindowsUpdateGroup")
|
||||
$this._PolicyName = "Quality updates (Profile)"
|
||||
$this._ID = "QualityUpdates"
|
||||
# Platform default: the endpoint serves exactly one platform and the
|
||||
# objects carry no platforms/platformType field, so the column would
|
||||
# otherwise be blank (windowsQualityUpdateProfiles is Windows-only).
|
||||
$this._PlatformName = Get-LanguageString "Platform.windows" -IgnoreMissing
|
||||
# Endpoint rejects a name $filter (verified live 2026-08-27) - searches filter client-side.
|
||||
$this._SupportsNameFilter = $false
|
||||
$this._API = "deviceManagement/windowsQualityUpdateProfiles"
|
||||
$this._Permissions = @("DeviceManagementConfiguration.ReadWrite.All")
|
||||
$this._ObjectClass = "QualityUpdateProfileObject"
|
||||
$this._PropertiesToRemoveForUpdate = @('releaseDateDisplayName','deployableContentDisplayName')
|
||||
$this._TopItems = 0
|
||||
$this._Icon = "UpdatePolicies"
|
||||
# Graph returns HTTP 400 on `windowsQualityUpdateProfiles?$expand=assignments`.
|
||||
$this._ExpandAssignmentsList = $false
|
||||
# Endpoint caps `$top` at 200; bulk-export default of 1000 returns 400.
|
||||
$this._HasPageSizeSupport = $false
|
||||
|
||||
if($null -ne $this._PolicyGroup) {
|
||||
$this._PolicyGroup.AddPolicyType($this)
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Class QualityUpdateProfileObject : IntunePolicyBase
|
||||
{
|
||||
QualityUpdateProfileObject([PSCustomObject]$JsonObj) : Base($JsonObj) { $this.Init() }
|
||||
|
||||
QualityUpdateProfileObject() : Base()
|
||||
{
|
||||
$this.Init()
|
||||
}
|
||||
|
||||
Hidden Init()
|
||||
{
|
||||
$this._PolicyType = (Get-SingletonObject "QualityUpdateProfileType")
|
||||
}
|
||||
}
|
||||
|
||||
# region Quality Update Policies
|
||||
class QualityUpdatePolicyType : IntunePolicyTypeBase
|
||||
{
|
||||
QualityUpdatePolicyType() : Base()
|
||||
{
|
||||
$this.Init()
|
||||
}
|
||||
|
||||
Init()
|
||||
{
|
||||
$this._PolicyGroup = (Get-SingletonObject "WindowsUpdateGroup")
|
||||
$this._PolicyName = "Quality updates (Policy)"
|
||||
$this._ID = "QualityUpdatePolicies"
|
||||
# Platform default: the endpoint serves exactly one platform and the
|
||||
# objects carry no platforms/platformType field, so the column would
|
||||
# otherwise be blank (windowsQualityUpdatePolicies is Windows-only).
|
||||
$this._PlatformName = Get-LanguageString "Platform.windows" -IgnoreMissing
|
||||
# Endpoint rejects a name $filter (verified live 2026-08-27) - searches filter client-side.
|
||||
$this._SupportsNameFilter = $false
|
||||
$this._API = "deviceManagement/windowsQualityUpdatePolicies"
|
||||
$this._Permissions = @("DeviceManagementConfiguration.ReadWrite.All")
|
||||
$this._ObjectClass = "QualityUpdatePolicyObject"
|
||||
$this._TopItems = 0
|
||||
$this._Icon = "UpdatePolicies"
|
||||
# Graph returns HTTP 400 on `windowsQualityUpdatePolicies?$expand=assignments`.
|
||||
$this._ExpandAssignmentsList = $false
|
||||
# Endpoint caps `$top` at 200; bulk-export default of 1000 returns 400.
|
||||
$this._HasPageSizeSupport = $false
|
||||
|
||||
if($null -ne $this._PolicyGroup) {
|
||||
$this._PolicyGroup.AddPolicyType($this)
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Class QualityUpdatePolicyObject : IntunePolicyBase
|
||||
{
|
||||
QualityUpdatePolicyObject([PSCustomObject]$JsonObj) : Base($JsonObj) { $this.Init() }
|
||||
|
||||
QualityUpdatePolicyObject() : Base()
|
||||
{
|
||||
$this.Init()
|
||||
}
|
||||
|
||||
Hidden Init()
|
||||
{
|
||||
$this._PolicyType = (Get-SingletonObject "QualityUpdatePolicyType")
|
||||
}
|
||||
}
|
||||
|
||||
#########################################################################################
|
||||
#
|
||||
# Driver Updates
|
||||
#
|
||||
#########################################################################################
|
||||
|
||||
# region Driver Updates
|
||||
class DriverUpdateType : IntunePolicyTypeBase
|
||||
{
|
||||
DriverUpdateType() : Base()
|
||||
{
|
||||
$this.Init()
|
||||
}
|
||||
|
||||
Init()
|
||||
{
|
||||
$this._PolicyGroup = (Get-SingletonObject "WindowsUpdateGroup")
|
||||
$this._PolicyName = "Driver updates"
|
||||
$this._ID = "DriverUpdateProfiles"
|
||||
# Platform default: the endpoint serves exactly one platform and the
|
||||
# objects carry no platforms/platformType field, so the column would
|
||||
# otherwise be blank (windowsDriverUpdateProfiles is Windows-only).
|
||||
$this._PlatformName = Get-LanguageString "Platform.windows" -IgnoreMissing
|
||||
# Endpoint rejects a name $filter (verified live 2026-08-27) - searches filter client-side.
|
||||
$this._SupportsNameFilter = $false
|
||||
$this._API = "deviceManagement/windowsDriverUpdateProfiles"
|
||||
$this._Permissions = @("DeviceManagementConfiguration.ReadWrite.All")
|
||||
$this._ObjectClass = "DriverUpdateObject"
|
||||
$this._PropertiesToRemoveForUpdate = @('releaseDateDisplayName','deployableContentDisplayName')
|
||||
$this._TopItems = 0
|
||||
$this._Icon = "UpdatePolicies"
|
||||
# Graph returns HTTP 400 on `windowsDriverUpdateProfiles?$expand=assignments`.
|
||||
$this._ExpandAssignmentsList = $false
|
||||
# Endpoint caps `$top` at 200; bulk-export default of 1000 returns 400.
|
||||
$this._HasPageSizeSupport = $false
|
||||
|
||||
if($null -ne $this._PolicyGroup) {
|
||||
$this._PolicyGroup.AddPolicyType($this)
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Class DriverUpdateObject : IntunePolicyBase
|
||||
{
|
||||
DriverUpdateObject([PSCustomObject]$JsonObj) : Base($JsonObj) { $this.Init() }
|
||||
|
||||
DriverUpdateObject() : Base()
|
||||
{
|
||||
$this.Init()
|
||||
}
|
||||
|
||||
Hidden Init()
|
||||
{
|
||||
$this._PolicyType = (Get-SingletonObject "DriverUpdateType")
|
||||
}
|
||||
}
|
||||
|
||||
#region Maintenance windows (Settings Catalog)
|
||||
|
||||
# Windows Update maintenance windows are a Settings Catalog template family
|
||||
# (maintenanceWindows, backed by the Update/MaintenanceWindow* CSP, Windows 11
|
||||
# 24H2 + KB5077181). Without this class they fall into SettingsCatalogType's
|
||||
# catch-all and list under Configuration; every other family is routed to its
|
||||
# domain group (enrollmentConfiguration -> Device enrollment, endpointSecurity*
|
||||
# -> Endpoint Security, deviceConfigurationScripts -> Scripts), so this one
|
||||
# belongs here.
|
||||
#
|
||||
# _QueryList is the pre-login default. Invoke-IntuneSettingsCatalogAuthenticated
|
||||
# rebuilds it from the tenant's live template list and fills _FamilyTypes, which
|
||||
# is what CheckPolicy matches on; if the tenant has no such template the default
|
||||
# filter simply returns nothing. SettingsCatalogObject resolves its PolicyType by
|
||||
# family, so no dedicated object class is needed.
|
||||
[Diagnostics.CodeAnalysis.SuppressMessageAttribute("TypeNotFound","", Justification = "")]
|
||||
class WindowsUpdateSettingsCatalogType : SettingsCatalogTypeBase
|
||||
{
|
||||
WindowsUpdateSettingsCatalogType() : Base()
|
||||
{
|
||||
$this.Init()
|
||||
}
|
||||
|
||||
Init()
|
||||
{
|
||||
$this._PolicyGroup = (Get-SingletonObject "WindowsUpdateGroup")
|
||||
$this._PolicyName = "Maintenance window"
|
||||
$this._APITitle = "Maintenance windows"
|
||||
$this._ID = "WindowsUpdateSettingsCatalog"
|
||||
$this._QueryList = "?`$filter=templateReference/templateFamily eq 'maintenanceWindows'"
|
||||
$this._Icon = "UpdatePolicies"
|
||||
$this._PlatformName = Get-LanguageString "Platform.windows" -IgnoreMissing
|
||||
|
||||
if($null -ne $this._PolicyGroup) {
|
||||
$this._PolicyGroup.AddPolicyType($this)
|
||||
}
|
||||
|
||||
$this._PolicyTypeOrder = 60
|
||||
}
|
||||
}
|
||||
|
||||
#endregion
|
||||
Reference in New Issue
Block a user