Merge Development for 3.11.0

The commit for issue #428 re-saved both files with CRLF, so every line showed
as changed against master, which stores them with LF like the rest of the
repository. Content is untouched; only the line endings return to LF.

.github/DISCUSSION_TEMPLATE/ideas.yml

@@ -0,0 +1,39 @@
+title: ""
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Ideas is for shaping something before it becomes a request. Say what you
+        are trying to achieve rather than the control you picture, and it will be
+        clear whether the application should grow a feature or already has one.
+
+  - type: dropdown
+    id: version
+    attributes:
+      label: Which version are you using?
+      options:
+        - 4.0 beta
+        - 3.x
+        - Neither yet, just looking
+    validations:
+      required: true
+
+  - type: textarea
+    id: goal
+    attributes:
+      label: What are you trying to achieve?
+    validations:
+      required: true
+
+  - type: textarea
+    id: idea
+    attributes:
+      label: How do you picture it working?
+
+  - type: textarea
+    id: scale
+    attributes:
+      label: How often, and at what scale?
+      description: >
+        How many tenants, how many policies, how often you do it. Scale changes
+        the answer more than anything else here.

.github/DISCUSSION_TEMPLATE/q-a.yml

@@ -0,0 +1,64 @@
+title: "[Question] "
+labels: ["needs-triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Most questions here turn out to be one of four things: a sign-in method
+        the embedded window cannot complete, a list that looks short because the
+        version you are on stops paging, a permission the app registration does
+        not hold, or an object type that has no public Graph endpoint. The fields
+        below let that be spotted straight away.
+
+  - type: dropdown
+    id: version
+    attributes:
+      label: Version
+      options:
+        - 4.0 beta
+        - 3.x
+    validations:
+      required: true
+
+  - type: dropdown
+    id: signin
+    attributes:
+      label: How do you sign in?
+      options:
+        - Interactive, embedded window (the default in v3)
+        - Interactive, Web Account Manager (WAM)
+        - Interactive, system browser (the default in v4)
+        - Device code
+        - Application and secret
+        - Application and certificate
+        - Managed identity or federated credential
+        - Bring your own token
+    validations:
+      required: true
+
+  - type: dropdown
+    id: cloud
+    attributes:
+      label: Cloud
+      options:
+        - Public (commercial)
+        - US Government (GCC High)
+        - US Government (DoD)
+        - China (21Vianet)
+    validations:
+      required: true
+
+  - type: textarea
+    id: question
+    attributes:
+      label: What are you trying to do?
+    validations:
+      required: true
+
+  - type: textarea
+    id: tried
+    attributes:
+      label: What have you tried, and what happened?
+      description: >
+        Paste any error text here. **Remove tenant identifiers, user names and
+        tokens first.**

.github/FUNDING.yml

@@ -0,0 +1,4 @@
+# GitHub renders this as the "Sponsor" button on the repository page
+# (public repositories, default branch). Buy Me a Coffee takes the
+# username, not the URL: https://buymeacoffee.com/MickeK
+buy_me_a_coffee: MickeK

.github/ISSUE_TEMPLATE/bug-v3.yml

@@ -0,0 +1,116 @@
+name: Bug report (version 3.x)
+description: Something is wrong in the current release. Windows only.
+title: "[3.x] "
+labels: ["bug", "v3", "needs-triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Version 3 stays supported until 4.0 leaves beta.
+
+        Before filing, check whether 4.0 already fixes it. Several long-standing
+        reports here are addressed there: sign-in with passkeys and other
+        phishing-resistant methods, lists that stopped at 20, 100 or a few
+        hundred objects, sovereign cloud sign-in, and running without a user
+        present. The 4.0 beta lives on the `v4` branch.
+
+  - type: checkboxes
+    id: preflight
+    attributes:
+      label: Before reporting
+      options:
+        - label: >
+            If my sign-in involves a passkey, security key, Windows Hello or a
+            phishing-resistant policy: I know the embedded sign-in window cannot
+            complete those, and I have said so below rather than reporting it as
+            a broken login.
+          required: true
+        - label: >
+            I searched existing issues and discussions, including closed ones.
+          required: true
+
+  - type: input
+    id: version
+    attributes:
+      label: Version
+      placeholder: 3.10.3
+    validations:
+      required: true
+
+  - type: dropdown
+    id: signin
+    attributes:
+      label: How did you sign in?
+      options:
+        - Interactive, embedded window (the default)
+        - Interactive, other
+        - Application and secret
+        - Application and certificate
+        - Not signed in / sign-in is the problem
+    validations:
+      required: true
+
+  - type: dropdown
+    id: cloud
+    attributes:
+      label: Cloud
+      options:
+        - Public (commercial)
+        - US Government (GCC High)
+        - US Government (DoD)
+        - China (21Vianet)
+    validations:
+      required: true
+
+  - type: input
+    id: powershell
+    attributes:
+      label: PowerShell version
+      description: Run `$PSVersionTable.PSVersion`.
+      placeholder: "5.1.22621.4391"
+    validations:
+      required: true
+
+  - type: dropdown
+    id: area
+    attributes:
+      label: Which part of the application?
+      options:
+        - Sign-in and authentication
+        - Export
+        - Import
+        - Copy
+        - Compare
+        - Documentation output
+        - Assignments, groups or filters
+        - Bulk or silent operations
+        - ADMX or tools
+        - The user interface itself
+        - Something else
+    validations:
+      required: true
+
+  - type: textarea
+    id: what
+    attributes:
+      label: What happened, and what did you expect instead?
+    validations:
+      required: true
+
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+    validations:
+      required: true
+
+  - type: textarea
+    id: log
+    attributes:
+      label: Log
+      description: >
+        The relevant lines, or the error text. **Remove tenant identifiers, user
+        names, access tokens and secrets before pasting.**
+      render: text
+    validations:
+      required: true

.github/ISSUE_TEMPLATE/bug-v4.yml

@@ -0,0 +1,154 @@
+name: Bug report (version 4.0 beta)
+description: Something is wrong in 4.0. Runs on Windows, macOS and Linux.
+title: "[4.0] "
+labels: ["bug", "v4", "needs-triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for testing the beta. Four fields below do most of the work:
+        **how you signed in**, **which cloud**, **which operating system** and
+        **the log**. Reports without them usually need a round trip before
+        anything can happen.
+
+  - type: checkboxes
+    id: preflight
+    attributes:
+      label: Before reporting
+      description: These three cover the majority of beta reports so far.
+      options:
+        - label: >
+            I read the release notes for this beta, including the breaking changes.
+          required: true
+        - label: >
+            If my sign-in involves a passkey, security key, Windows Hello or any
+            phishing-resistant policy: I enabled **Use Web Account Manager (WAM)
+            for login** or **Use system browser for login** in Settings, and tried
+            again. The embedded window cannot complete those methods.
+          required: true
+        - label: >
+            My problem is not Inventory Policies returning 403. That endpoint is
+            not published on the public Graph API, so the application cannot read
+            it with a normal sign-in. It is a Microsoft limitation, not a bug.
+            A bring-your-own-token sign-in can reach it.
+          required: true
+
+  - type: input
+    id: version
+    attributes:
+      label: Version
+      description: The About dialog, or the ModuleVersion in IntuneManagement.psd1.
+      placeholder: 4.0.0-beta1
+    validations:
+      required: true
+
+  - type: dropdown
+    id: signin
+    attributes:
+      label: How did you sign in?
+      description: >
+        The single most useful field in this form. Roughly a third of all reports
+        on this project have turned out to be sign-in behaviour rather than the
+        feature being reported.
+      options:
+        - Interactive, embedded window
+        - Interactive, Web Account Manager (WAM)
+        - Interactive, system browser (the default)
+        - Device code
+        - Application and secret
+        - Application and certificate
+        - Managed identity or federated credential
+        - Bring your own token
+        - Not signed in / sign-in is the problem
+    validations:
+      required: true
+
+  - type: dropdown
+    id: cloud
+    attributes:
+      label: Cloud
+      options:
+        - Public (commercial)
+        - US Government (GCC High)
+        - US Government (DoD)
+        - China (21Vianet)
+    validations:
+      required: true
+
+  - type: dropdown
+    id: os
+    attributes:
+      label: Operating system
+      description: 4.0 runs the full application outside Windows, so this now matters.
+      options:
+        - Windows
+        - macOS (Apple Silicon)
+        - macOS (Intel)
+        - Linux
+    validations:
+      required: true
+
+  - type: input
+    id: powershell
+    attributes:
+      label: PowerShell edition and version
+      description: Run `$PSVersionTable.PSVersion` and `$PSVersionTable.PSEdition`.
+      placeholder: "7.4.6, Core"
+    validations:
+      required: true
+
+  - type: dropdown
+    id: area
+    attributes:
+      label: Which part of the application?
+      options:
+        - Sign-in and authentication
+        - Export
+        - Import
+        - Copy
+        - Compare
+        - Documentation output
+        - Assignments, groups or filters
+        - Bulk operations
+        - ADMX or tools
+        - The user interface itself
+        - Automation through the PowerShell commands
+        - Something else
+    validations:
+      required: true
+
+  - type: input
+    id: objecttype
+    attributes:
+      label: Which object type, if it is specific to one
+      placeholder: Settings Catalog, Conditional Access, Win32 app, ...
+
+  - type: textarea
+    id: what
+    attributes:
+      label: What happened, and what did you expect instead?
+    validations:
+      required: true
+
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      placeholder: |
+        1. Sign in to ...
+        2. Open ...
+        3. Click ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: log
+    attributes:
+      label: Log
+      description: >
+        The relevant lines from the log file, or the error text. **Remove tenant
+        identifiers, user names, access tokens and secrets before pasting.** If
+        an exported policy file is needed, redact it or use one from a lab tenant.
+      render: text
+    validations:
+      required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,17 @@
+# Turns off the "open a blank issue" escape hatch, so every report arrives
+# through a form with the fields that make it answerable. Questions go to
+# Discussions, which is where most of them already end up.
+blank_issues_enabled: false
+contact_links:
+  - name: Question, or not sure it is a bug
+    url: https://github.com/Micke-K/IntuneManagement/discussions/categories/q-a
+    about: Ask in Q&A. Most "it does not show my policies" reports are answered there in a day.
+  - name: Feature idea worth discussing first
+    url: https://github.com/Micke-K/IntuneManagement/discussions/categories/ideas
+    about: Ideas that are still taking shape belong here. A concrete request can go straight to an issue.
+  - name: Version 4.0 beta feedback
+    url: https://github.com/Micke-K/IntuneManagement/discussions/categories/announcements
+    about: Testing the 4.0 beta? Start at the pinned announcement, which lists what to try first.
+  - name: Security vulnerability
+    url: https://github.com/Micke-K/IntuneManagement/security/advisories/new
+    about: Never report a security problem in a public issue. Use private reporting.

.github/ISSUE_TEMPLATE/feature.yml

@@ -0,0 +1,71 @@
+name: Feature request
+description: Something the application should do and does not.
+title: "[Request] "
+labels: ["enhancement", "needs-triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        If the idea is still taking shape, [Ideas in
+        Discussions](https://github.com/Micke-K/IntuneManagement/discussions/categories/ideas)
+        is the better room. Use this form when you can describe the outcome you
+        want.
+
+  - type: dropdown
+    id: version
+    attributes:
+      label: Which version is this for?
+      description: >
+        This one is read by a human, not by automation, so say what you mean.
+        A request that 4.0 already covers is worth checking against the release
+        notes first.
+      options:
+        - Version 4.0
+        - Version 3.x
+        - Either
+    validations:
+      required: true
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: What are you trying to do?
+      description: >
+        The situation, not the solution. "I move policies between two tenants
+        every month and have to redo the assignments by hand" tells more than
+        "add a button".
+    validations:
+      required: true
+
+  - type: textarea
+    id: proposal
+    attributes:
+      label: What would you like it to do?
+    validations:
+      required: true
+
+  - type: textarea
+    id: workaround
+    attributes:
+      label: How do you handle it today?
+      description: Including "not at all", which is useful to know.
+
+  - type: dropdown
+    id: area
+    attributes:
+      label: Which part of the application?
+      options:
+        - Export
+        - Import
+        - Copy
+        - Compare
+        - Documentation output
+        - Assignments, groups or filters
+        - Bulk operations
+        - ADMX or tools
+        - The user interface
+        - Automation through the PowerShell commands
+        - A policy type that is not supported yet
+        - Something else
+    validations:
+      required: true

.github/pull_request_template.md

@@ -0,0 +1,47 @@
+<!--
+  Target branch
+
+    Fixing version 3?  target  Development
+    Fixing version 4?  target  v4
+
+  A pull request opened against the default branch is retargeted to
+  Development before review. Use the Edit button next to the title.
+-->
+
+<!--
+  How version 4 changes are applied during the beta
+
+  Version 4 is developed elsewhere and the v4 branch is published as one
+  snapshot per release, not as a running history. An accepted change is
+  applied upstream and appears in the next release, so your commit will not
+  show up in this branch. You are credited in the release notes instead.
+  Nothing is lost, and nothing needs doing on your side.
+-->
+
+## What does this change?
+
+<!-- One or two sentences. What was wrong, or what is now possible. -->
+
+## Related issue
+
+<!-- "Fixes #123", or "none" if there isn't one. -->
+
+## How was it tested?
+
+<!--
+  Which version, which cloud, and which operating system, since 4.0 runs on
+  three. If it touches sign-in, say which method you used: embedded window,
+  Web Account Manager, system browser, device code, or an application identity.
+-->
+
+- Version:
+- Cloud:
+- Operating system and PowerShell version:
+- Tests run:
+
+## Anything a reviewer should know
+
+<!--
+  Behaviour that changes for existing users, a setting that moves, a file format
+  that shifts. Say so here rather than leaving it to be discovered.
+-->

.gitignore

@@ -4,4 +4,12 @@
 /*.Log
 /*.Lo_
 /*.csv
-
+/*.zip
+/*.new
+/*.old
+/Extensions/*.zip
+Extensions_dev/
+.gitignore
+CloudAPIPowerShellManagement.log
+AGENTS.md
+CLAUDE.md

ADMXImport.md

@@ -12,7 +12,7 @@ Microsoft links:
 
 ## ADMX Import
 
-The **ADMX Import** tool is used for configuring 3rd party applications e.g. Chrome, Google Update etc., These ADMX files are available from the software vendor. An ADMX can be loaded in the tool and all settings can be configured using a similar UI as GPMC. When the ADMX is loaded, the script will look for an ADML file that is either in the same directory or in the en-US subdirectory. An ADML file can also be loaded manually, if another language should be used in the UI.
+The **ADMX Import** tool is used for configuring 3rd party applications e.g. Chrome, Google Update etc. These ADMX files are available from the software vendor. An ADMX can be loaded in the tool and all settings can be configured using a similar UI as GPMC. When the ADMX is loaded, the script will look for an ADML file that is either in the same directory or in the en-US subdirectory. An ADML file can also be loaded manually, if another language should be used in the UI.
 
 <img src="https://raw.githubusercontent.com/Micke-K/IntuneManagement/master/ADMXExample.png" height="50%" width="50%"/>
 
@@ -24,11 +24,11 @@ A policy setting can either be edited via double-clicking an item or right-click
 
 The *Intune OMA-URI name* property specifies the name of the OMA-URI row in the Custom Profile. This is optional and if it is not specified, the script will use the name of the policy.
 
-A policy must be set to Enabled before any changes can be made. The *Policy* tab will list all possible settings for the policy. This could be a dropdown box, text box, check box, numeric up-down box etc. The script creates the controls based on the presentation settings in the ADML file. An ADML is not mandatory but the controls and the UI could cause unpredictive results. Always use the associated ADML for correctly generated controls.
+A policy must be set to Enabled before any changes can be made. The *Policy* tab will list all possible settings for the policy. This could be a dropdown box, text box, check box, numeric up-down box etc. The script creates the controls based on the presentation settings in the ADML file. An ADML is not mandatory but the controls and the UI could cause unpredictable results. Always use the associated ADML for correctly generated controls.
 
 <img src="https://raw.githubusercontent.com/Micke-K/IntuneManagement/master/ADMXSettingExampleOMAURI.png" height="50%" width="50%"/>
 
-The *OMA-URI Settings* tab contains the configured settings. This is the string that will be added to the enabled policy. This can be manually configure in case there is something that is not supported by the script. Do **NOT** add <enabled /> or <disabled /> to this text box. The script will add that automatically.  If *Manual configuration* is checked, the script will upload the text as it is specified, including additional manual changes. If it is not checked, the script will generate the text when importing the profile. If manual configuration is added and then checkbox is cleared, those changes will be lost during the upload.
+The *OMA-URI Settings* tab contains the configured settings. This is the string that will be added to the enabled policy. This can be manually configured in case there is something that is not supported by the script. Do **NOT** add <enabled /> or <disabled /> to this text box. The script will add that automatically.  If *Manual configuration* is checked, the script will upload the text as it is specified, including additional manual changes. If it is not checked, the script will generate the text when importing the profile. If manual configuration is added and then checkbox is cleared, those changes will be lost during the upload.
 
 The *XML Definition* tab contains the XML node for the ADMX policy. This is used for reference in case manual configuration is required.
 
@@ -211,4 +211,4 @@ The following events can be used for troubleshooting:
 * Values outside Software\Policies will **NOT** be deleted when the policy is removed.
 * The tool supports all ADMX attributes specified in the schema but it looks like some functionalities are not supported by Windows or the Policy CSP e.g. the *soft* attribute should be set to true to avoid overwriting an existing value but all values were overwritten during the tests, even if the soft attribute was set. 
 * QWORD is not supported. The ADMX schema definition includes longDecimal which would create QWORD values but this is not supported in the Policy CSP. It will generate a Catastrophic Failure event in the Event Log. 
-* No support for enabledList/disabledList. This might be added in the future since this could make it very easy to create mapped drives via ADMX ingestion. 
+* No support for enabledList/disabledList. This might be added in the future since this could make it very easy to create mapped drives via ADMX ingestion. 

CS/HttpFactoryWithProxy.cs

@@ -0,0 +1,42 @@
+using System;
+using System.Net;
+using System.Net.Http;
+using Microsoft.Identity.Client;
+
+public class HttpFactoryWithProxy : IMsalHttpClientFactory
+{
+    private static HttpClient _httpClient;
+
+    public HttpFactoryWithProxy(string proxyURI) : this(proxyURI, null, null)
+    {
+
+    }
+
+    public HttpFactoryWithProxy(string proxyURI, string proxyUserName = null, string proxyPassword = null)
+    {
+        if (_httpClient == null) 
+        {
+            var proxy = new WebProxy
+            {
+                Address = new Uri(proxyURI),
+                BypassProxyOnLocal = false,
+                UseDefaultCredentials = false,
+                Credentials = new NetworkCredential(
+                    userName: proxyUserName,
+                    password: proxyPassword)
+            };
+
+            var httpClientHandler = new HttpClientHandler
+            {
+                Proxy = proxy,
+            };
+
+            _httpClient = new HttpClient(handler: httpClientHandler);
+        }
+    }
+
+    public HttpClient GetHttpClient()
+    {
+        return _httpClient;
+    }
+}

CloudAPIPowerShellManagement.psd1

@@ -12,7 +12,7 @@
 RootModule = 'CloudAPIPowerShellManagement.psm1'
 
 # Version number of this module.
-ModuleVersion = '3.7.2'
+ModuleVersion = '3.11.0'
 
 # Supported PSEditions
 # CompatiblePSEditions = @()
@@ -27,7 +27,7 @@ Author = 'Mikael Karlsson'
 # CompanyName = ''
 
 # Copyright statement for this module
-Copyright = '(c) 2022 Mikael Karlsson. Software released under MIT License.'
+Copyright = '(c) 2023 Mikael Karlsson. Software released under MIT License.'
 
 # Description of the functionality provided by this module
 Description = 'Management of Intune and Azure via Cloud APIs like Microsoft Graph API'
@@ -69,7 +69,7 @@ Description = 'Management of Intune and Azure via Cloud APIs like Microsoft Grap
 NestedModules = @()
 
 # Functions to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no functions to export.
-FunctionsToExport = @("Initialize-CloudAPIManagement","Initialize-CloudAPIManagement")
+FunctionsToExport = @("Initialize-CloudAPIManagement")
 
 # Cmdlets to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no cmdlets to export.
 # CmdletsToExport = @()

CloudAPIPowerShellManagement.psm1

@@ -85,19 +85,82 @@ function Initialize-CloudAPIManagement
         [string]
         $secret,
         [string]
-        $certificate
+        $certificate,
+        [string]
+        $GraphEnvironment,
+        [string]
+        $GCCType
+
     )
 
+    $PSModuleAutoloadingPreference = "none"
+
     $global:wpfNS = "xmlns='http://schemas.microsoft.com/winfx/2006/xaml/presentation' xmlns:x='http://schemas.microsoft.com/winfx/2006/xaml'"
 
     [void] [System.Reflection.Assembly]::LoadWithPartialName("System.Windows.Forms") 
     Add-Type -AssemblyName PresentationFramework
 
+    [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+
     $global:hideUI = ($Silent -eq $true)
     $global:SilentBatchFile = $SilentBatchFile
 
+    if($tenantId)
+    {
+        Write-Host "Using Tenant Id: $tenantId"
+        $global:AzureAppId = $appId 
+        $global:ClientSecret = $secret 
+        $global:ClientCert = $certificate
+        $global:UseGraphEnvironment = $GraphEnvironment
+        $global:UseGCCType = $GCCType
+
+        if($global:AzureAppId)
+        {
+            Write-Host "Using Azure App Id: $($global:AzureAppId)"
+        }
+        else
+        {
+            Write-Warning "Azure App Id is missing. Use -AppId <AppID> on the command line"
+        }
+
+        if($global:ClientSecret -or $global:ClientCert)
+        {
+            if($global:ClientSecret)
+            {
+                Write-Host "Using Azure App Secret"
+            }
+            else
+            {
+                Write-Host "Using Azure App Certificate"
+            }            
+        }
+        else
+        {
+            Write-Warning "Azure App Secret or Certificate is missing. Use -Secret <Secret> or -Certificate <Certificate> on the command line"
+        }
+
+        if($global:UseGraphEnvironment)
+        {
+            Write-Host "Using Azure Graph Environment: $($global:UseGraphEnvironment)"
+        }
+
+        if($global:UseGCCType)
+        {
+            Write-Host "Using Graph Environment type: $($global:UseGCCType)"
+        }
+    }
+    elseif($secret)
+    {
+        $global:ClientSecret = $secret 
+    }
+    if($certificate)
+    {
+        $global:ClientCert = $certificate 
+    }
+
+
     if($global:hideUI -ne $true)
-    {        
+    {                
         # Run with UI
         try 
         {
@@ -126,12 +189,11 @@ function Initialize-CloudAPIManagement
             Write-Error "Tenant Id is missing. Use -TenantId <Tenant-guid> on the command line to run silent batch jobs"
             return
         }
-        $global:TenantId = $tenantId 
-        $global:AzureAppId = $appId 
-        $global:ClientSecret = $secret 
-        $global:ClientCert = $certificate        
     }
 
+    $global:TenantId = $tenantId
+
+
     if($ShowConsoleWindow -ne $true)
     {
         Hide-Console

Core.psm1

@@ -11,7 +11,7 @@ This module handles the WPF UI
 
 function Get-ModuleVersion
 {
-    '3.7.1'
+    '3.9.6'
 }
 
 function Initialize-Window
@@ -58,6 +58,7 @@ function Start-CoreApp
 
     $global:useDefaultFolderDialog = $false
     $global:WindowsAPICodePackLoaded = $false
+    $script:proxyURI = $null
 
     $global:loadedModules = @()
     $global:viewObjects = @()
@@ -85,9 +86,13 @@ function Start-CoreApp
     Write-Log "#####################################################################################"
 
     Write-Log "PowerShell version: $($PSVersionTable.PSVersion.ToString())"
-    Write-Log "PowerShell build: $($PSVersionTable.BuildVersion.ToString())"
+    if($PSVersionTable.BuildVersion) {
-    Write-Log "PowerShell CLR: $($PSVersionTable.CLRVersion.ToString())"
+        Write-Log "PowerShell build: $($PSVersionTable.BuildVersion.ToString())"
-    Write-Log "PowerShell edition: $($PSVersionTable.PSEdition)"
+    }
+    if($PSVersionTable.CLRVersion) {
+        Write-Log "PowerShell CLR: $($PSVersionTable.CLRVersion.ToString())"
+    }
+        Write-Log "PowerShell edition: $($PSVersionTable.PSEdition)"
 
     try
     {
@@ -235,6 +240,8 @@ function Write-Log
 
     if(-not $global:logFileMaxSize) { [Int64]$global:logFileMaxSize =  Get-SettingValue "LogFileSize" 1024; $global:logFileMaxSize = $global:logFileMaxSize * 1kb }
 
+    if($null -eq $global:logOutputError) { $global:logOutputError = Get-SettingValue "LogOutputError" }
+
     $fi = [IO.FileInfo]$global:logFile
 
     if($fi.Length -gt $global:logFileMaxSize)
@@ -286,12 +293,19 @@ function Write-Log
     if($type -eq 2)
     {
         Write-Warning $Text
-        $typeStr = "Error"
+        $typeStr = "Warning"
     }
     elseif($type -eq 3)
     {
-        $host.ui.WriteErrorLine($Text)
+        if($global:logOutputError -ne $false)
-        $typeStr = "Warning"
+        {
+            $host.ui.WriteErrorLine($Text)
+        }
+        else
+        {
+            Write-Warning $Text
+        }        
+        $typeStr = "Error"
     }
     else
     {
@@ -334,6 +348,14 @@ function Write-LogError
     }
 
     Write-Log $Text 3
+
+    if((Get-SettingValue "ShowStackTrace") -eq $true)
+    {
+        Write-Log "Stack trace:`n $($Exception.StackTrace)"
+
+        Write-Log "Script stack trace:`n $($Exception.ScriptStackTrace)"
+
+    }
 }
 
 function Write-Status
@@ -415,7 +437,7 @@ function Set-XamlProperty
 
 function Get-XamlProperty
 {
-    param($xamlObj, $controlName, $propertyName, $defaultValue)
+    param($xamlObj, $controlName, $propertyName, $defaultValue = $null)
 
     $obj = $xamlObj.FindName($controlName)
 
@@ -423,7 +445,7 @@ function Get-XamlProperty
     {
         if($obj)
         {
-            return (?? $obj."$propertyName" $null)
+            return (?? $obj."$propertyName" $defaultValue)
         }
         else 
         {
@@ -638,7 +660,7 @@ function Show-AboutDialog
 
     Set-XamlProperty $script:dlgAbout "lstModules" "ItemsSource" $loadedItems
 
-    Add-XamlEvent $script:dlgAbout "linkSource" "Add_RequestNavigate" ({ [System.Diagnostics.Process]::Start($_.Uri.AbsoluteUri); $_.Handled = $true })
+    Add-XamlEvent $script:dlgAbout "linkSource" "Add_RequestNavigate" ({ Start-Process $_.Uri.AbsoluteUri; $_.Handled = $true })
 
     Show-ModalForm "About" $script:dlgAbout 
 }
@@ -652,8 +674,10 @@ function Show-UpdatesDialog
 
     Add-XamlEvent $script:dlgUpdates "btnClose" "add_click" {
         $script:dlgUpdates = $null
-        Show-ModalObject 
+        Show-ModalObject
-    }    
+    }
+
+    Add-XamlEvent $script:dlgUpdates "linkSource" "Add_RequestNavigate" ({ Start-Process $_.Uri.AbsoluteUri; $_.Handled = $true })
 
     $fileContent = Get-Content -Raw -Path ($global:AppRootFolder + "\ReleaseNotes.md")
     try
@@ -667,8 +691,19 @@ function Show-UpdatesDialog
     {
         if($mystream) { $mystream.Dispose() }
     }
+    $params = @{}
+    $proxyURI = Get-ProxyURI
+    if($proxyURI)
+    {
+        $params.Add("proxy", $proxyURI)
+        $params.Add("UseBasicParsing", $true)
+    }
 
-    $content = Invoke-RestMethod "https://api.github.com/repos/Micke-K/IntuneManagement/contents/ReleaseNotes.md"
+    # The notes at the newest 3.x release tag, never at the default branch: that
+    # branch will carry version 4 once the branches are renamed.
+    $latestVer = Get-LatestGitHubVersion $params
+    $notesRef = if($latestVer) { "?ref=$($latestVer.ToString())" } else { "" }
+    $content = Invoke-RestMethod "https://api.github.com/repos/Micke-K/IntuneManagement/contents/ReleaseNotes.md$notesRef" @params
     if($content)
     {
         $txt = [System.Text.Encoding]::UTF8.GetString(([System.Convert]::FromBase64String($content.content)))
@@ -693,6 +728,37 @@ function Show-UpdatesDialog
     Show-ModalForm "Release Notes" $script:dlgUpdates -HideButtons
 }
 
+# Newest published 3.x release on GitHub, or $null.
+#
+# releases/latest answers the newest release of ANY version. The day 4.0.0 is
+# published it would tell every 3.x installation to upgrade to a breaking
+# change, and reading the manifest on the default branch stops working once the
+# branches are renamed for version 4. The releases list filtered to this major
+# is the one source that survives both. Pre-releases and drafts are skipped.
+function Get-LatestGitHubVersion
+{
+    param($Params = @{})
+
+    $latest = $null
+    try
+    {
+        $releases = Invoke-RestMethod "https://api.github.com/repos/Micke-K/IntuneManagement/releases?per_page=100" @Params
+        foreach($release in @($releases))
+        {
+            if($release.draft -or $release.prerelease) { continue }
+            $ver = $null
+            try { $ver = [version](([string]$release.tag_name) -replace '^v','') } catch { continue }
+            if($ver.Major -ne 3) { continue }
+            if($null -eq $latest -or $ver -gt $latest) { $latest = $ver }
+        }
+    }
+    catch
+    {
+        Write-Log "Failed to list GitHub releases: $($_.Exception.Message)" 2
+    }
+    return $latest
+}
+
 function Get-IsLatestVersion
 {
     if($global:MainAppStarted -ne $true)
@@ -703,27 +769,15 @@ function Get-IsLatestVersion
 
     $gitHubVer = $null
 
-    $content = Invoke-RestMethod "https://api.github.com/repos/Micke-K/IntuneManagement/releases/latest"
+    $params = @{}
-    if($content.Name)
+    $proxyURI = Get-ProxyURI
+    if($proxyURI)
     {
-        try
+        $params.Add("proxy", $proxyURI)
-        {
+        $params.Add("UseBasicParsing", $true)
-            $gitHubVer = [version]$content.Name
-        }
-        catch {}
     }
 
-    if($null -eq $gitHubVer)
+    $gitHubVer = Get-LatestGitHubVersion $params
-    {
-        $content = Invoke-RestMethod "https://api.github.com/repos/Micke-K/IntuneManagement/contents/CloudAPIPowerShellManagement.psd1"
-        $gitHubText = [System.Text.Encoding]::UTF8.GetString(([System.Convert]::FromBase64String($content.content)))
-        $gitHubInfo = Get-ModuleDataTable $gitHubText
-        try
-        {
-            $gitHubVer = [version]$gitHubInfo.ModuleVersion
-        }
-        catch {}
-    }
 
     if(-not $gitHubVer)
     {
@@ -1036,7 +1090,7 @@ function Get-Folder
         {
             if($global:WindowsAPICodePackLoaded -eq $false)
             {
-                $apiCodec = Join-Path $global:AppRootFolder "Microsoft.WindowsAPICodePack.Shell.dll"
+                $apiCodec = Join-Path $global:AppRootFolder "Bin\Microsoft.WindowsAPICodePack.Shell.dll"
                 if([IO.File]::Exists($apiCodec))
                 {
                     Add-Type -Path $apiCodec | Out-Null                    
@@ -1067,7 +1121,7 @@ function Get-Folder
         {
             $dlgCOFD.InitialDirectory = $path
         }
-        if($dlgCOFD.ShowDialog($window) = [Microsoft.WindowsAPICodePack.Dialogs.CommonFileDialogResult]::Ok)
+        if($dlgCOFD.ShowDialog($window) -eq [Microsoft.WindowsAPICodePack.Dialogs.CommonFileDialogResult]::Ok)
         {
             $dlgCofd.FileName            
         }
@@ -1150,6 +1204,10 @@ function Expand-FileName
     [Environment]::SetEnvironmentVariable("DateTime",$null,[System.EnvironmentVariableTarget]::Process)
     [Environment]::SetEnvironmentVariable("Organization",$null,[System.EnvironmentVariableTarget]::Process)
     
+    # Remove invalid path characters
+    $re = "[{0}]" -f [RegEx]::Escape(([IO.Path]::GetInvalidPathChars() -join ''))
+    $fileName = $fileName -replace $re
+  
     $fileName
 }
 
@@ -1167,7 +1225,9 @@ function Initialize-Settings
 
     $global:Debug = Get-SettingValue "Debug"
     $global:logFile = $null
-    $global:logFileMaxSize = $null    
+    $global:logFileMaxSize = $null
+    $global:logOutputError = $null
+    $script:proxyURI = $null
     
     if($Updated -eq $true)
     {
@@ -1359,7 +1419,7 @@ function Remove-Setting
         try
         {
             $temp = Get-Item -LiteralPath $regPath -ErrorAction SilentlyContinue
-            if(($temp.Property -contains $Key))
+            if(($temp -and $temp.Property -contains $Key))
             {
                 Remove-ItemProperty -Path $regPath -Name $Key -Force -ErrorAction Stop
             }
@@ -1373,7 +1433,7 @@ function Remove-Setting
 
 function Get-Setting
 {    
-    param($SubPath = "", $Key = "", $defautValue)
+    param($SubPath = "", $Key = "", $defaultValue)
 
     if(-not $key)
     {
@@ -1438,7 +1498,7 @@ function Get-Setting
 
     if(-not $val) 
     {
-        $defautValue
+        $defaultValue
     }
     else
     {
@@ -1496,7 +1556,7 @@ function Add-RegKeyToSettings
 
     try
     {
-        $keyObj = Get-Item -Path $regKey
+        $keyObj = Get-Item -Path $regKey -ErrorAction SilentlyContinue
         foreach($keyValue in ($keyObj.GetValueNames() | Sort))
         {
             try
@@ -1661,7 +1721,11 @@ function Add-SettingsItem
     {
         if($settingValue.Description)
         {
-            $descriptionInfo = "<Rectangle Style=`"{DynamicResource InfoIcon}`" ToolTip=`"$($settingValue.Description)`" Margin=`"5,0,0,0`" />"
+            $descriptionInfo = "<Rectangle Style=`"{DynamicResource InfoIcon}`" Margin=`"5,0,0,0`">" +
+                "<Rectangle.ToolTip><TextBlock>" +
+                $settingValue.Description +
+                "</TextBlock></Rectangle.ToolTip>" +
+                "</Rectangle>"
         }
     
         $xaml = @"
@@ -1943,6 +2007,22 @@ function Add-DefaultSettings
             DefaultValue = 1024
     }) "General"
 
+    Add-SettingsObject (New-Object PSObject -Property @{
+        Title = "Add errors to PowerShell output"
+        Key = "LogOutputError"
+        Type = "Boolean"
+        Description = "Write errors to the Error Output of the PS Host. If disabled, errors will be written as a Warning. Eg. disable this if automation should skip logging PowerShell errors."
+        DefaultValue = $true
+    }) "General"
+    
+    Add-SettingsObject (New-Object PSObject -Property @{
+        Title = "Show stack error"
+        Key = "ShowStackTrace"
+        Type = "Boolean"
+        Description = "Write exception stack trace info to the log."
+        DefaultValue = $false
+    }) "General"    
+
     Add-SettingsObject (New-Object PSObject -Property @{
             Title = "Debug"
             Key = "Debug"
@@ -1998,6 +2078,12 @@ function Add-DefaultSettings
         Description = "Adds the organization name next to the login info on the menu bar"
     }) "General" 
 
+    Add-SettingsObject (New-Object PSObject -Property @{
+        Title = "Proxy URI"
+        Key = "ProxyURI"
+        Description = "Specify the URI for the proxy eg http://&lt;server&gt;:&lt;port&gt;"
+    }) "General"
+
 }
 
 function Add-SettingsObject
@@ -2016,7 +2102,7 @@ function Add-SettingsObject
         $section.Values += $obj
     }
     catch { }
-}
+} 
 
 function Save-AllSettings
 {
@@ -2408,8 +2494,9 @@ function Get-MainWindow
         {
             $script:welcomeForm = Get-XamlObject ($global:AppRootFolder + "\Xaml\Welcome.xaml") -AddVariables
             
-            Add-XamlEvent $script:welcomeForm "gitHubLink" "Add_RequestNavigate" ({ [System.Diagnostics.Process]::Start($_.Uri.AbsoluteUri); $_.Handled = $true })
+            Add-XamlEvent $script:welcomeForm "gitHubLink" "Add_RequestNavigate" ({ Start-Process $_.Uri.AbsoluteUri; $_.Handled = $true })
-            Add-XamlEvent $script:welcomeForm "licenseLink" "Add_RequestNavigate" ({ [System.Diagnostics.Process]::Start($_.Uri.AbsoluteUri); $_.Handled = $true })
+            Add-XamlEvent $script:welcomeForm "licenseLink" "Add_RequestNavigate" ({ Start-Process $_.Uri.AbsoluteUri; $_.Handled = $true })
+            Add-XamlEvent $script:welcomeForm "addCustomApp" "Add_RequestNavigate" ({ Start-Process $_.Uri.AbsoluteUri; $_.Handled = $true })
             
             Add-XamlEvent $script:welcomeForm "chkAcceptConditions" "add_click" {
                 $global:btnAcceptConditions.IsEnabled = ($this.IsChecked -eq $true)
@@ -2418,6 +2505,7 @@ function Get-MainWindow
             Add-XamlEvent $script:welcomeForm "btnAcceptConditions" "add_click" {
                 Save-Setting "" "LicenseAccepted" "True"
                 Save-Setting "" "FirstTimeRunning" "False"
+                Save-Setting "" "AppChangeInformed" "true"
                 Show-ModalObject
                 
                 if($global:currentViewObject.ViewInfo.Authentication.ShowErrors)
@@ -2431,9 +2519,47 @@ function Get-MainWindow
                 {
                     $window.Close()                    
                 }
-            }            
+            }
 
-            Show-ModalForm $window.Title $script:welcomeForm -HideButtons            
+            Show-ModalForm $window.Title $script:welcomeForm -HideButtons
+        }
+        else
+        {
+            if($global:informOldAzureApp -eq $true) 
+            {
+                $appIdChangeInformed = Get-Setting "" "AppChangeInformed" "false"
+                if($appIdChangeInformed -ne "true") {
+                    $script:oldAzureAppForm = Get-XamlObject ($global:AppRootFolder + "\Xaml\OldAzureApp.xaml")
+
+                    Add-XamlEvent $script:oldAzureAppForm "addCustomApp" "Add_RequestNavigate" ({ Start-Process $_.Uri.AbsoluteUri; $_.Handled = $true })
+
+                    Add-XamlEvent $script:oldAzureAppForm "btnOK" "add_click" {
+                        if((Get-XamlProperty $script:oldAzureAppForm "chkChangeApp" "IsChecked") -eq $true) {
+                            Write-Log "Set default app ID to $($global:DefaultAzureApp)"
+                            Save-Setting "EndpointManager" "EMAzureApp" $global:DefaultAzureApp
+                            $script:azureAppChanged = $true
+                        }
+
+                        if((Get-XamlProperty $script:oldAzureAppForm "chkSkippMessage" "IsChecked") -eq $true) {
+                            Save-Setting "" "AppChangeInformed" "true"
+                        }
+                        Show-ModalObject
+                        if($script:azureAppChanged -eq $true -and $global:currentViewObject) {
+                            [System.Windows.Forms.Application]::DoEvents()
+                            & $global:currentViewObject.ViewInfo.Authenticate
+                        }
+                    }
+
+                    Show-ModalForm $window.Title $script:oldAzureAppForm -HideButtons
+                }
+            }
+
+            ###!!! Force login here
+            if($global:currentViewObject.ViewInfo.Authenticate)
+            {
+                # Skip for now...need additional code to skip previous login and force this based on setting.
+                #!!!& $global:currentViewObject.ViewInfo.Authenticate -Params (@{"Interactve"=$true})
+            }
         }            
     })
 
@@ -2644,6 +2770,27 @@ function Format-XML
     $StringWriter.ToString()
 }
 
+function Update-XmlFormatting {
+    [CmdletBinding()]
+    param(
+        [Parameter(Mandatory, ValueFromPipeline)]
+        [string]$Xml
+    )
+    process {
+
+        $Xml = $Xml -replace '<([^\s/>]+)([^>]*)\s/>' , '<$1$2/>'
+
+        $Xml = ($Xml -split "`r?`n") |
+            Where-Object { $_.Trim().Length -gt 0 } |
+            ForEach-Object { $_ } |
+            Out-String
+
+        $Xml = $Xml -replace "`r`n", "`n"
+
+        return $Xml.Trim()
+    }
+}
+
 function Show-LogView
 {
     if($script:LogViewObject -and -not $script:LogViewObject.ViewPanel)
@@ -2666,6 +2813,151 @@ function Show-LogView
     }
 }
 
+function Get-Base64ScriptContent
+{
+    param($encodeContent, [switch]$RemoveSignature)
+
+    if(-not $encodeContent) { return }
+
+    try
+    {
+        $scriptContent = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($encodeContent))
+
+        if($RemoveSignature -eq $true)
+        {
+            $x = $scriptContent.IndexOf("# SIG # Begin signature block")
+            if($x -gt 0)
+            {
+                $scriptContent = $scriptContent.SubString(0,$x)
+                $scriptContent = $scriptContent + "# SIG # Begin signature block`nSignature data excluded..."
+            }
+        }
+
+        $scriptContent
+    }
+    catch
+    {
+
+    }
+}
+
+function Get-ProxyURI
+{
+    if($null -eq $script:proxyURI)
+    {
+        $script:proxyUri = Get-SettingValue "ProxyURI"
+    }
+
+    if($null -eq $script:proxyURI)  
+    {
+        $script:proxyUri = ""
+    }
+    return $script:proxyURI
+}
+
+function Start-DownloadFile
+{
+    param($sourceURL, $targetFile)
+
+    Write-Log "Download file from $sourceURL"
+    if(-not $sourceURL)
+    {
+        return
+    }
+
+    if(-not $targetFile)
+    {
+        Write-Log "Target file is missing"
+        return
+    }    
+    
+    [void][System.Reflection.Assembly]::LoadWithPartialName("System.Web.Extensions")
+    $wc = New-Object System.Net.WebClient
+    $wc.Encoding = [System.Text.Encoding]::UTF8
+    $proxyURI = Get-ProxyURI
+    if($proxyURI)
+    {
+        $wc.Proxy = [System.Net.WebProxy]::new($proxyURI)
+    }
+
+    try 
+    {
+        $title = $sourceURL.Split("/")[-1]
+        $title = $title.Split("/")[0]        
+    }
+    catch 
+    {
+        $title = $sourceURL
+    }
+
+    try 
+    {
+        Write-Status "Download file: `n$title"
+        $wc.DownloadFile($sourceURL, $targetFile)
+        Write-Log "File downloaded to $targetFile"
+    }
+    catch
+    {
+        Write-LogError "Failed to download file" $_.Exception
+    }
+    finally
+    {
+        $wc.Dispose()
+    }
+}
+
+function Get-ASCIIBytes
+{
+    param($String)
+    
+    $bytes = [System.Text.Encoding]::ASCII.GetBytes($String)
+ 
+    if ($bytes[0] -eq 0x2b -and $bytes[1] -eq 0x2f -and $bytes[2] -eq 0x76) 
+    { [Text.Encoding]::UTF7.GetBytes($String) }
+    elseif ($bytes[0] -eq 0xff -and $bytes[1] -eq 0xfe) 
+    { [Text.Encoding]::Unicode.GetBytes($String) }
+    elseif ($bytes[0] -eq 0xfe -and $bytes[1] -eq 0xff) 
+    { [Text.Encoding]::BigEndianUnicode.GetBytes($String) }
+    elseif ($bytes[0] -eq 0x00 -and $bytes[1] -eq 0x00 -and $bytes[2] -eq 0xfe -and $bytes[3] -eq 0xff) 
+    { [Text.Encoding]::UTF32.GetBytes($String) }
+    elseif ($bytes[0] -eq 0xef -and $bytes[1] -eq 0xbb -and $bytes[2] -eq 0xbf) 
+    { [Text.Encoding]::UTF8.GetBytes($String) }
+
+    $bytes
+}
+
+function Get-DataGridValues
+{
+    param($dataGrid)
+    
+    $dgColumns = $dataGrid.Columns
+
+    $properties = @()
+
+    foreach($tmpCol in $dgColumns)
+    {
+        if(-not $tmpCol.Binding.Path.Path) { continue }
+        $propName = $tmpCol.Binding.Path.Path
+        $properties += @{n=$tmpCol.Header;e=([Scriptblock]::Create("`$_.$propName"))}
+    }
+
+    ($dataGrid.ItemsSource | Select -Property $properties)
+}
+
+function Get-GUIDs
+{
+    param($text)
+
+    $regExpGuid = "[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}"
+    
+    $uniqueGuids = New-Object System.Collections.Generic.HashSet[String]
+    
+    # Use regular expressions to extract the GUIDs
+    [regex]::Matches($text, $regExpGuid) | ForEach-Object { $uniqueGuids.Add($_.Value) | Out-Null }
+        
+    $uniqueGuids
+}
+
 New-Alias -Name ?? -value Invoke-Coalesce
 New-Alias -Name ?: -value Invoke-IfTrue
 Export-ModuleMember -alias * -function *

Documentation.md

@@ -2,7 +2,7 @@
 
 The script can document most of the profiles and policies in Intune. The output can either be CSV or Word. Documenting to Word can either be to an existing Word template or empty document. There are many options for the documentation e.g. Language, Header styles, Table styles, managing not configured items etc.  
 
-The idea behind the documentation method in the script is to output the information as close to the Endpoint Manager portal as possible. Some of the objects has a different property name or value in the Summary text vs Edit mode in the portal. The documentation will then use the Edit mode information when possible. Some policies and profiles might have a slightly different order that the portal.
+The idea behind the documentation method in the script is to output the information as close to the Endpoint Manager portal as possible. Some of the objects has a different property name or value in the Summary text vs Edit mode in the portal. The documentation will then use the Edit mode information when possible. Some policies and profiles might have a slightly different order than the portal.
 
 The objects can be documented in three ways:
 
@@ -28,7 +28,7 @@ Please read the [Deep Dive](#deep-dive) section below for a detailed description
 
 The script can document the objects in any language supported by Intune. 
 
-Note that some profiles and properties does not have language support. These will be documented in English.
+Note that some profiles and properties do not have language support. These will be documented in English.
 
 **Known Issues**
 
@@ -36,7 +36,7 @@ This is the first version of the documentation support.
 
 * There are over 100 different object types. Not all are supported and not all supported object types are tested and verified. 
 
-* Property based profiles might be missing some properties. Some properties in the translation files are generated at runtime. Support for these properties are added in the custom documentation provider
+* Property based profiles might be missing some properties. Some properties in the translation files are generated at runtime. Support for these properties are added in the custom documentation provider.
 
 * Some complex type properties are not translated in this version e.g. the screen layout of apps on the iPhone. 
 
@@ -52,7 +52,7 @@ This is the first version of the documentation support.
 
 * Some Endpoint Security polices are NOT deviceManagementIntent objects. They are actually Settings Catalog objects and they will be listed with the Settings Catalog items e.g. *Antivirus - Windows 10 and Windows Server (ConfigMgr)* policies
 
-* Some Endpoint Security/Settings Catalog items is not translated based on Graph API in the portal e.g. *Antivirus - Windows 10 and Windows Server (ConfigMgr)* policies.  These will be documented based on Graph API information which might be different compared to the portal
+* Some Endpoint Security/Settings Catalog items are not translated based on Graph API in the portal e.g. *Antivirus - Windows 10 and Windows Server (ConfigMgr)* policies.  These will be documented based on Graph API information which might be different compared to the portal
 
 * Markdown is currently in experimental state. The script can document to an MD file created in the Documents folder but this can be to large in environments with many objects. The script will create HTML tables to support code blocks and column span. The MD View must support HTML tables to display the document. The *Markdown Viewer* extension in Chrome was used during testing.
 
@@ -93,7 +93,7 @@ Property based objects are very complex to document. These objects can be docume
 * PowerShell function
 * Or a combination of PowerShell and manually created json files 
 
-Json files for translating property objects to documentation is located in the Documentation\ObjectInfo folder. All files that start with a # is manually created. These can either be based on the object type (@OData.Type) or the Object Type Id (specified in the EndpointManager.psm1 file). Files that does not start with a # are automatically generated and the `ObjectCategories.json` file contains the mapping between the Intune object and associated json files. One object type can be associated with multiple files. Each file represents one category of the object.
+Json files for translating property objects to documentation is located in the Documentation\ObjectInfo folder. All files that start with a # are manually created. These can either be based on the object type (@OData.Type) or the Object Type Id (specified in the EndpointManager.psm1 file). Files that does not start with a # are automatically generated and the `ObjectCategories.json` file contains the mapping between the Intune object and associated json files. One object type can be associated with multiple files. Each file represents one category of the object.
 
 The generated files sometimes requires additional manually created properties. These could be properties in the UI that has a Yes/No, Enabled/Not Configured etc. trigger associated with a specific value. These properties must be manually added to the object before the documentation. The `DocumentationCustom.psm1` file takes care of this. This file is also used for overriding the documentation of specific values and other custom required processing.    
 
@@ -101,9 +101,78 @@ The json files contains a definition of each property to document. This includes
 
 The `DocumentationCustom.psm1` file also takes care of custom documentation for some object types e.g. Conditional Access. App Configuration policies etc. These objects are documented via a PowerShell function in the script.
 
+**dataTypes Reference**
+
+The following `dataType` values are supported in property-based ObjectInfo json files:
+
+| Value | Name | Description |
+|---|---|---|
+| `0` | Boolean | Translated via the `booleanActions` field |
+| `1` | Base64 | Certificate or binary data decoded to a UTF-8 string; filename used if `filenameEntityKey` is set |
+| `2` | Multiline String | Multiline text or XML decoded from Base64 if needed; stored to a payload file if `filenameEntityKey` is set |
+| `3` | Image | Binary image; outputs "Image file" when a value is present |
+| `4` | Linked Certificate | Certificate resolved via OData navigation link |
+| `5` | Complex Options | Iterates child `complexOptions` as a sub-section |
+| `6` | Complex Option (sub-property) | Iterates `complexOptions` resolved via `entityKey` sub-property |
+| `7` | OMA DateTime | Raw OMA DateTime string |
+| `8` | Sub-category | Sets the current sub-category label from `nameResourceKey` |
+| `9` | Label / OData Type | Skipped — UI label or `@odata.type` property |
+| `10` | Information Box | Skipped — UI-only information box |
+| `11` | App Picker | Application picker |
+| `12` | Multiline String Array | Array of strings joined with the object separator |
+| `13` | Multi Option | Multiple selection; translated via `Invoke-TranslateMultiOption` |
+| `14` | Int32 | 32-bit integer |
+| `15` | Int64 | 64-bit integer |
+| `16` | Option | Single-select option; translated via `Invoke-TranslateOption` |
+| `19` | Option (variant) | Single-select option; translated via `Invoke-TranslateOption` |
+| `20` | String | Plain string |
+| `21` | Table | Sub-table; translated via `Invoke-TranslateTable` |
+| `22` | Scale Value | Numeric value combined with a unit from `scaleOptions` (e.g. "4 Years") |
+| `99` | Reserved | No-op placeholder |
+| `100` | Duration | Custom `Edm.Duration` formatting via `Invoke-TranslateDuration` |
+| `101` | Static Label | Language string taken from the `value` field |
+| `102` | Culture Name | Language/culture name string |
+| `103` | Boolean (hide on false) | Boolean via `booleanActions`; hides child properties when `false` |
+| `104` | Multi Option Boolean | Multi-option via boolean; hides children when `false` |
+| `105` | Multi Option Boolean (inverted) | Like `104` but treats `false` as the selected state |
+| `106` | Language Array | Array of culture/language names joined with the object separator |
+| `107` | Static Value | Literal string taken directly from the `value` field |
+| `108` | String with Format | String formatted using the `formatStringKey` language template |
+| `200` | Multi Option (language key) | Translated string looked up via `entityKey` as a language string ID |
+
+**booleanActions Reference**
+
+The `booleanActions` field controls the text shown for `true`/`false` values when `dataType` is `0`, `103`, `104`, or `105`.
+
+Values `0`–`9` and `107`–`108` only display a custom label when `true`; a `false` value falls through to *Not Configured*.
+
+| Value | `true` → | `false` → |
+|---|---|---|
+| `0` | Allow | *(Not Configured)* |
+| `1` | Require | *(Not Configured)* |
+| `2` | Enable | *(Not Configured)* |
+| `3` | Block | *(Not Configured)* |
+| `4` | Configured | *(Not Configured)* |
+| `5` | Disable | *(Not Configured)* |
+| `6` | Limit | *(Not Configured)* |
+| `7` | Show | *(Not Configured)* |
+| `8` | Hide | *(Not Configured)* |
+| `9` | Yes | *(Not Configured)* |
+| `100` | Block | Allow |
+| `101` | Require | Not Required |
+| `102` | Enable | Disable |
+| `107` | Show | *(Not Configured)* |
+| `108` | Hide | *(Not Configured)* |
+| `109` | Yes | No |
+| `110` | No | Yes |
+| `120` | On | Off |
+| `200` | Allow | Block |
+| `201` | Not Required | Require |
+| `220` | Off | On |
+
 **Language Support**
 
-The Settings based objects get their language strings from Graph APIs with a few exemptions.
+The Settings based objects get their language strings from Graph APIs with a few exceptions.
 
 The property based objects uses static language files. Each language file is generated based on multiple language files. Not all the language information is included in these files to reduce the output size. This could reduce the possibility to create custom documentation with multi language support.
 
@@ -111,7 +180,7 @@ These files will have to be re-generated when new functionality is released in I
 
 **Scripts for Generated Files**
 
-The scripts that automatically generates language files, translation files, object info etc. are not included in the release. These scripts are currently not in a state that they can be released. The best would be if Microsoft released all the required information in Graph. A deep dive into graph suggests that it might be possible in the future since some information about the generated files are there but with some properties missing or language text missing. The information can't be accessed unless an API is called that gets the definition for all the profiles at the same time (the file is over 100MB). 
+The scripts that automatically generate language files, translation files, object info etc. are not included in the release. These scripts are currently not in a state that they can be released. The best would be if Microsoft released all the required information in Graph. A deep dive into graph suggests that it might be possible in the future since some information about the generated files are there but with some properties missing or language text missing. The information can't be accessed unless an API is called that gets the definition for all the profiles at the same time (the file is over 100MB). 
 
 ## Extending The Documentation
 
@@ -132,9 +201,9 @@ The priority order for object documentation is:
 
 **Documentation Provider**
 
-The documentation provider takes care of collecting all the information about the object. The `DocumentationCustom.psm1` file is an example of this. This file has examples of custom translation of properties for json files and examples of custom translation of objects via a PowerShell functions.
+The documentation provider takes care of collecting all the information about the object. The `DocumentationCustom.psm1` file is an example of this. This file has examples of custom translation of properties for json files and examples of custom translation of objects via PowerShell functions.
 
-Documentation providers has a Priority property. This defines in what order the providers will be triggered. The provider with the lowest priority number will be executed first. The included custom documentation provider has a priority number of 1000. The information gathering of the provider can be overridden by creating a custom documentation provider with a lower priority number.
+Documentation providers have a Priority property. This defines in what order the providers will be triggered. The provider with the lowest priority number will be executed first. The included custom documentation provider has a priority number of 1000. The information gathering of the provider can be overridden by creating a custom documentation provider with a lower priority number.
 
 **Documentation Output Provider**
 

Documentation/CategoryId.json

@@ -1,4 +1,4 @@
-{
+{
     "0":  "AirPlay",
     "1":  "AirPrint",
     "2":  "AndroidDeviceOwnerApplications",
@@ -151,5 +151,7 @@
     "149":  "WiredNetwork",
     "150":  "DefenderAntivirus",
     "151":  "CustomCompliance",
-    "152":  "IosDefenderAtp"
+    "152":  "IosDefenderAtp",
+    "153":  "WSLCompliance",
+    "154":  "WindowsZtdns"
 }

Documentation/DefaultHTMLStyle.css

@@ -0,0 +1,184 @@
+<style type="text/css">
+    
+html { }
+
+html,body {
+    margin:0;
+    padding:5px;
+    position:relative;
+}
+
+.header-level1 {
+    font-family:"Arial",sans-serif;
+    font-size: 18px;
+    margin-top: 0px;
+    margin-bottom: 0px;
+}
+
+.header-level2 {
+    font-family:"Arial",sans-serif;
+    font-size: 16px;
+    margin-top: 3px;
+    margin-bottom: 0px;
+}
+
+.header-level3 {
+    font-family:"Arial",sans-serif;
+    font-size: 14px;
+    margin-top: 3px;
+    margin-bottom: 0px;
+}
+
+.header-level4 {
+    font-family:"Arial",sans-serif;
+    font-size: 12px;
+    margin-top: 3px;
+    margin-bottom: 0px;
+}
+
+.header-level6 {
+    font-family:"Arial",sans-serif;
+    font-size: 10px;
+    margin-top: 3px;
+}
+
+.table-settings {
+    border: 1px solid #999999;
+    padding-right: 5px;
+    font-family:"Arial",sans-serif;
+    font-size: 11px;
+}
+
+.table-settings TR:nth-child(even) {
+    background-color: #FAFAFA
+}
+
+.table-settings th {
+    background-color: #D0D0D0;
+    padding: 0px;
+    text-align:left;
+    font-size: 12px;
+    padding-right: 10px;
+    padding-top: 3px;
+    font-weight: bold;
+    border-width: 5px;
+    padding: 5px;
+    border-style: none;
+    border-color: #F2F2F2;
+}
+
+.table-settings td {
+    text-align:left;
+    padding-right: 5px;
+    border-width: 5px;
+    padding: 5px;
+    border-style: none;
+    border-color: #F2F2F2;
+    border-bottom: 1px solid #ddd;
+}
+
+.code {
+    background: #f4f4f4;
+    border: 1px solid #ddd;
+    border-left: 3px solid #333333;
+    color: #666;
+    page-break-inside: avoid;
+    font-family: monospace;
+    font-size: 12px;
+    line-height: 1.6;
+    margin-bottom: 2px;
+    max-width: 100%;
+    overflow: auto;
+    padding: 1em 1.5em;
+    display: block;
+    word-wrap: break-word;
+}
+
+.description summary {
+    list-style: none;
+    cursor: pointer;
+}
+
+details.description[open] summary::after {
+  content: attr(data-open);
+}
+
+details.description:not([open]) summary::after {
+  content: attr(data-close);
+}
+
+.row-even {
+    
+}
+
+.row-odd {
+    
+}
+
+.category-level1 {
+    background-color: #E0E0E0;
+    font-size: 11px;
+    font-weight: bold;
+}
+
+.category-level2 {
+    background-color: #E0E0E0;
+    font-size: 11px;
+}
+
+.anchor-style {
+    font-family:"Arial",sans-serif;
+    font-size: 11px;
+}
+
+.anchor-level2 {
+
+}
+
+.anchor-level3 {
+    padding-left: 5px;
+}
+
+.anchor-level4 {
+    padding-left: 10px;
+}
+
+.anchor-level5 {
+    padding-left: 15px;
+}
+
+.table-value {
+    border: 0px;
+    width: 100%;
+    padding: 0px;
+    font-family:"Arial",sans-serif;
+    font-size: 11px;
+}
+
+.table-value th {
+    background-color: #F9F9F9;
+    padding: 0px;
+    text-align:left;
+    font-size: 11px;
+    padding-right: 0px;
+    padding-top: 3px;
+    padding-bottom: 3px;
+    font-weight: normal;
+    border-width: 0px;
+    border-style: none;
+}
+
+.table-value tr {
+    background-color: #FFFFFF;
+}
+
+.table-value td {
+    border-bottom: 0;
+    padding: 1px;
+}
+
+.row-new-property {
+    background-color: #E7E7E7 !important;
+}
+
+</style>

Documentation/DefaultMDStyle.css

@@ -0,0 +1,117 @@
+<style type="text/css">
+    
+html { }
+
+html,body {
+    margin:0;
+    padding:0 px;
+    position:relative;
+}
+
+h6 {
+    margin-top: 2px !important;
+}
+
+.table-settings {
+    padding-right: 5px;
+    font-family:"Arial",sans-serif;
+    font-size: 11px;
+    margin-bottom: 0px !important;
+}
+
+.table-settings p {
+    margin-bottom: 0px !important;
+}
+
+.table-settings TR:nth-child(even) {
+    background-color: #FAFAFA
+}
+
+.table-settings td {
+    text-align:left;
+    border-width: 5px;
+    padding: 5px !important;
+    border-style: none;
+    border-color: #F2F2F2;
+    border-bottom: 1px solid #ddd;
+}
+
+.table-header1 td {
+    background-color: #D0D0D0;
+    text-align: left;
+    font-size: 12px;
+    font-weight: bold;
+    border-width: 5px;
+    padding: 5px;
+    border-style: none;
+    border-color: #F2F2F2;
+}
+
+.category-level1 {
+    background-color: #E0E0E0;
+    font-size: 11px;
+    font-weight: bold;
+}
+
+.category-level2 {
+    background-color: #E0E0E0;
+    font-size: 11px;
+}
+
+.anchor-style {
+    font-family:"Arial",sans-serif;
+    font-size: 11px;
+}
+
+.anchor-level2 {
+
+}
+
+.table-value {
+    border: 0px;
+    width: 100%;
+    padding: 0px;
+    font-family:"Arial",sans-serif;
+    font-size: 11px;
+}
+
+.table-value th {
+    background-color: #F9F9F9;
+    padding: 0px;
+    text-align:left;
+    font-size: 11px;
+    padding-right: 0px;
+    padding-top: 3px;
+    padding-bottom: 3px;
+    font-weight: normal;
+    border-width: 0px;
+    border-style: none;
+}
+
+.table-value tr {
+    background-color: #FFFFFF;
+}
+
+.table-value td {
+    border-bottom: 0;
+    padding: 1px;
+}
+
+.row-new-property {
+    background-color: #E7E7E7 !important;
+}
+
+.description summary {
+    list-style: none;
+    cursor: pointer;
+}
+
+details.description[open] summary::after {
+  content: attr(data-open);
+}
+
+details.description:not([open]) summary::after {
+  content: attr(data-close);
+}
+
+</style>

Documentation/ObjectCategories.json

@@ -1,4 +1,4 @@
-[
+[
     {
         "ObjectType":  "#microsoft.graph.androidCustomConfiguration",
         "PolicyType":  "AndroidCustom",
@@ -314,6 +314,15 @@
 
                        ]
     },
+    {
+        "ObjectType":  "#microsoft.graph.androidWorkProfileMigrationConfiguration",
+        "PolicyType":  "AndroidForWorkMigrationPolicy",
+        "PolicyTypeLanguageId":  "androidForWorkMigrationPolicy",
+        "PlatformLanguageId":  "AndroidForWork",
+        "Categories":  [
+
+                       ]
+    },
     {
         "ObjectType":  "#microsoft.graph.androidForWorkVpnConfiguration",
         "PolicyType":  "AndroidForWorkVpn",
@@ -470,7 +479,7 @@
                        ]
     },
     {
-        "ObjectType":  "#microsoft.graph.hardwareConfiguration",
+        "ObjectType":  "#microsoft.graph.hardwareConfigurations",
         "PolicyType":  "HardwareConfigurations",
         "PolicyTypeLanguageId":  "hardwareConfigurations",
         "PlatformLanguageId":  "Windows10",
@@ -625,6 +634,15 @@
 
                        ]
     },
+    {
+        "ObjectType":  "#microsoft.graph.iosWiredNetworkConfiguration",
+        "PolicyType":  "IosWiredNetwork",
+        "PolicyTypeLanguageId":  "wiredNetwork",
+        "PlatformLanguageId":  "Ios",
+        "Categories":  [
+
+                       ]
+    },
     {
         "ObjectType":  "#microsoft.graph.iosEnterpriseWiFiConfiguration",
         "PolicyType":  "IosWiFi",
@@ -1014,13 +1032,7 @@
         "PolicyTypeLanguageId":  "vpn",
         "PlatformLanguageId":  "Windows10",
         "Categories":  [
-                           "vpn",
+                           "vpn"
-                           "vpnappsandtrafficrules",
-                           "vpnconditionalaccess",
-                           "vpndnstriggers",
-                           "vpnproxy",
-                           "vpnsplittunneling",
-                           "vpntrustednetwork"
                        ]
     },
     {
@@ -1203,6 +1215,15 @@
                            "HealthMonitoring"
                        ]
     },
+    {
+        "ObjectType":  "#microsoft.graph.windowsZtdnsConfiguration",
+        "PolicyType":  "Windows10Ztdns",
+        "PolicyTypeLanguageId":  "windowsZeroTrustDns",
+        "PlatformLanguageId":  "Windows10",
+        "Categories":  [
+
+                       ]
+    },
     {
         "ObjectType":  "#microsoft.graph.windows10XWifiConfiguration",
         "PolicyType":  "Windows10XWifi",
@@ -1400,5 +1421,14 @@
         "Categories":  [
 
                        ]
+    },
+    {
+        "ObjectType":  "#microsoft.graph.inventoryCatalog",
+        "PolicyType":  "InventoryCatalog",
+        "PolicyTypeLanguageId":  null,
+        "PlatformLanguageId":  null,
+        "Categories":  [
+
+                       ]
     }
 ]

Documentation/ObjectInfo/#AppConfigOutlookDevice.json

@@ -11,7 +11,7 @@
         "entityKey":  "configureEmail",
         "dataType":  0,
         "booleanActions":  109,
-        "category": 103
+        "category": "SettingDetails.configurationSettingsTitle"
     },
     {
         "nameResourceKey":  "Inputs.authenticationType",
@@ -19,7 +19,7 @@
         "entityKey":  "com.microsoft.outlook.EmailProfile.AccountType",
         "dataType":  16,
         "booleanActions":  0,
-        "category": 103,
+        "category": "SettingDetails.configurationSettingsTitle",
         "options":  [                                
             {
                 "nameResourceKey":  "Inputs.basicAuth",
@@ -37,7 +37,7 @@
         "entityKey":  "com.microsoft.outlook.EmailProfile.EmailUPN",
         "dataType":  16,
         "booleanActions":  0,
-        "category": 103,
+        "category": "SettingDetails.configurationSettingsTitle",
         "options":  [                                
             {
                 "nameResourceKey":  "userPrincipalNameOption",
@@ -58,7 +58,7 @@
         "entityKey":  "com.microsoft.outlook.EmailProfile.AccountDomain",
         "dataType":  20,
         "booleanActions":  0,
-        "category": 103,
+        "category": "SettingDetails.configurationSettingsTitle",
         "Condition": {
             "Expressions": [
                 {
@@ -74,7 +74,7 @@
         "entityKey":  "com.microsoft.outlook.EmailProfile.EmailAddress",
         "dataType":  16,
         "booleanActions":  0,
-        "category": 103,
+        "category": "SettingDetails.configurationSettingsTitle",
         "options":  [                                
             {
                 "nameResourceKey":  "userPrincipalNameOption",
@@ -92,7 +92,7 @@
         "entityKey":  "com.microsoft.outlook.EmailProfile.ServerHostName",
         "dataType":  20,
         "booleanActions":  0,
-        "category": 103,
+        "category": "SettingDetails.configurationSettingsTitle",
         "Condition": {
             "Expressions": [
                 {
@@ -108,7 +108,7 @@
         "entityKey":  "com.microsoft.outlook.EmailProfile.EmailAccountName",
         "dataType":  20,
         "booleanActions":  0,
-        "category": 103,
+        "category": "SettingDetails.configurationSettingsTitle",
         "Condition": {
             "Expressions": [
                 {
@@ -124,7 +124,7 @@
         "entityKey":  "IntuneMAMAllowedAccountsOnly",
         "dataType":  16,
         "booleanActions":  0,
-        "category": 103,
+        "category": "SettingDetails.configurationSettingsTitle",
         "Condition": {
             "Expressions": [
                 {
@@ -143,7 +143,7 @@
                 "value":  "Disabled"
             }
         ]
-    },    
+    },
 
 
     {
@@ -158,7 +158,7 @@
         "entityKey":  "com.microsoft.outlook.Mail.FocusedInbox",
         "dataType":  0,
         "booleanActions":  120,
-        "category": 103
+        "category": "SettingDetails.configurationSettingsTitle"
     },
     {
         "nameResourceKey":  "OutlookAppConfig.allowBiometricsTitle",
@@ -166,25 +166,28 @@
         "entityKey":  "com.microsoft.outlook.Auth.Biometric",
         "dataType":  0,
         "booleanActions":  120,
-        "category": 103
+        "category": "SettingDetails.configurationSettingsTitle",
-    },
+        "ChildSettings": [
-    {
+            {
-        "nameResourceKey":  "OutlookAppConfig.allowUserChangeTitle",
+                "nameResourceKey":  "OutlookAppConfig.allowUserChangeTitle",
-        "descriptionResourceKey":  "",
+                "descriptionResourceKey":  "",
-        "entityKey":  "com.microsoft.outlook.Auth.Biometric.UserChangeAllowed",
+                "entityKey":  "com.microsoft.outlook.Auth.Biometric.UserChangeAllowed",
-        "dataType":  0,
+                "dataType":  0,
-        "booleanActions":  109,
+                "booleanActions":  109,
-        "unconfiguredValue": true,
+                "allowMissing": true,
-        "allowMissing": true,
+                "unconfiguredValue": true,
-        "category": 103,
+                "alwaysAddValue": true,
-        "Condition": {
+                "category": "SettingDetails.configurationSettingsTitle",
-            "Expressions": [
+                "Condition": {
-                {
+                    "Expressions": [
-                    "property": "com.microsoft.outlook.Auth.Biometric",
+                        {
-                    "value": "true"
+                            "property": "com.microsoft.outlook.Auth.Biometric",
+                            "value": "true"
+                        }
+                    ]
                 }
-            ]
+            }
-        }        
+        ]
     },
     {
         "nameResourceKey":  "OutlookAppConfig.allowSaveContactsTitle",
@@ -192,25 +195,28 @@
         "entityKey":  "com.microsoft.outlook.Contacts.LocalSyncEnabled",
         "dataType":  0,
         "booleanActions":  120,
-        "category": 103
+        "category": "SettingDetails.configurationSettingsTitle",
-    },
+        "ChildSettings": [
-    {
+            {
-        "nameResourceKey":  "OutlookAppConfig.allowUserChangeTitle",
+                "nameResourceKey":  "OutlookAppConfig.allowUserChangeTitle",
-        "descriptionResourceKey":  "",
+                "descriptionResourceKey":  "",
-        "entityKey":  "com.microsoft.outlook.Contacts.LocalSyncEnabled.UserChangeAllowed",
+                "entityKey":  "com.microsoft.outlook.Contacts.LocalSyncEnabled.UserChangeAllowed",
-        "dataType":  0,
+                "dataType":  0,
-        "booleanActions":  109,
+                "booleanActions":  109,
-        "unconfiguredValue": true,
+                "allowMissing": true,
-        "allowMissing": true,
+                "unconfiguredValue": true,
-        "category": 103,
+                "alwaysAddValue": true,
-        "Condition": {
+                "category": "SettingDetails.configurationSettingsTitle",
-            "Expressions": [
+                "Condition": {
-                {
+                    "Expressions": [
-                    "property": "com.microsoft.outlook.Contacts.LocalSyncEnabled",
+                        {
-                    "value": "true"
+                            "property": "com.microsoft.outlook.Contacts.LocalSyncEnabled",
+                            "value": "true"
+                        }
+                    ]
                 }
-            ]
+            }
-        }        
+        ]
     },
     {
         "nameResourceKey":  "OutlookAppConfig.discoverFeedTitle",
@@ -218,7 +224,7 @@
         "entityKey":  "com.microsoft.outlook.Mail.officeFeedEnabled",
         "dataType":  0,
         "booleanActions":  120,
-        "category": 103        
+        "category": "SettingDetails.configurationSettingsTitle"        
     },
     {
         "nameResourceKey":  "OutlookAppConfig.allowSmartReplyTitle",
@@ -226,25 +232,28 @@
         "entityKey":  "com.microsoft.outlook.Mail.SuggestedRepliesEnabled",
         "dataType":  0,
         "booleanActions":  120,
-        "category": 103
+        "category": "SettingDetails.configurationSettingsTitle",
-    },
+        "ChildSettings": [
-    {
+            {
-        "nameResourceKey":  "OutlookAppConfig.allowUserChangeTitle",
+                "nameResourceKey":  "OutlookAppConfig.allowUserChangeTitle",
-        "descriptionResourceKey":  "",
+                "descriptionResourceKey":  "",
-        "entityKey":  "com.microsoft.outlook.Mail.SuggestedRepliesEnabled.UserChangeAllowed",
+                "entityKey":  "com.microsoft.outlook.Mail.SuggestedRepliesEnabled.UserChangeAllowed",
-        "dataType":  0,
+                "dataType":  0,
-        "booleanActions":  109,
+                "booleanActions":  109,                
-        "category": 103,
+                "allowMissing": true,
-        "unconfiguredValue": true,
+                "unconfiguredValue": true,
-        "allowMissing": true,
+                "alwaysAddValue": true,
-        "Condition": {
+                "category": "SettingDetails.configurationSettingsTitle",
-            "Expressions": [
+                "Condition": {
-                {
+                    "Expressions": [
-                    "property": "com.microsoft.outlook.Mail.SuggestedRepliesEnabled",
+                        {
-                    "value": "true"
+                            "property": "com.microsoft.outlook.Mail.SuggestedRepliesEnabled",
+                            "value": "true"
+                        }
+                    ]
                 }
-            ]
+            }
-        }        
+        ]
     },
     {
         "nameResourceKey":  "OutlookAppConfig.allowExternalRecipientsMailTipTitle",
@@ -252,7 +261,7 @@
         "entityKey":  "com.microsoft.outlook.Mail.ExternalRecipientsToolTipEnabled",
         "dataType":  0,
         "booleanActions":  120,
-        "category": 103
+        "category": "SettingDetails.configurationSettingsTitle"
     },
     {
         "nameResourceKey":  "OutlookAppConfig.allowDefaultAppSignatureTitle",
@@ -260,7 +269,7 @@
         "entityKey":  "com.microsoft.outlook.Mail.DefaultSignatureEnabled",
         "dataType":  0,
         "booleanActions":  120,
-        "category": 103
+        "category": "SettingDetails.configurationSettingsTitle"
     },
     {
         "nameResourceKey":  "OutlookAppConfig.blockExternalImagesTitle",
@@ -268,25 +277,28 @@
         "entityKey":  "com.microsoft.outlook.Mail.BlockExternalImagesEnabled",
         "dataType":  0,
         "booleanActions":  120,
-        "category": 103
+        "category": "SettingDetails.configurationSettingsTitle",
-    },
+        "ChildSettings": [
-    {
+            {
-        "nameResourceKey":  "OutlookAppConfig.allowUserChangeTitle",
+                "nameResourceKey":  "OutlookAppConfig.allowUserChangeTitle",
-        "descriptionResourceKey":  "",
+                "descriptionResourceKey":  "",
-        "entityKey":  "com.microsoft.outlook.Mail.BlockExternalImagesEnabled.UserChangeAllowed",
+                "entityKey":  "com.microsoft.outlook.Mail.BlockExternalImagesEnabled.UserChangeAllowed",
-        "dataType":  0,
+                "dataType":  0,
-        "booleanActions":  109,
+                "booleanActions":  109,
-        "unconfiguredValue": true,
+                "allowMissing": true,
-        "allowMissing": true,
+                "unconfiguredValue": true,
-        "category": 103,
+                "alwaysAddValue": true,
-        "Condition": {
+                "category": "SettingDetails.configurationSettingsTitle",
-            "Expressions": [
+                "Condition": {
-                {
+                    "Expressions": [
-                    "property": "com.microsoft.outlook.Mail.BlockExternalImagesEnabled",
+                        {
-                    "value": "true"
+                            "property": "com.microsoft.outlook.Mail.BlockExternalImagesEnabled",
+                            "value": "true"
+                        }
+                    ]
                 }
-            ]
+            }
-        }        
+        ]
     },
     {
         "nameResourceKey":  "OutlookAppConfig.OrganizeMailByThread.title",
@@ -294,7 +306,7 @@
         "entityKey":  "com.microsoft.outlook.Mail.OrganizeByThreadEnabled",
         "dataType":  0,
         "booleanActions":  120,
-        "category": 103
+        "category": "SettingDetails.configurationSettingsTitle"
     },
     {
         "nameResourceKey":  "OutlookAppConfig.playMyEmailsTitle",
@@ -302,7 +314,7 @@
         "entityKey":  "com.microsoft.outlook.Mail.PlayMyEmailsEnabled",
         "dataType":  0,
         "booleanActions":  120,
-        "category": 103
+        "category": "SettingDetails.configurationSettingsTitle"
     },
     {
         "nameResourceKey":  "OutlookAppConfig.themesEnabledTitle",
@@ -310,7 +322,7 @@
         "entityKey":  "com.microsoft.outlook.Settings.ThemesEnabled",
         "dataType":  0,
         "booleanActions":  120,
-        "category": 103
+        "category": "SettingDetails.configurationSettingsTitle"
     },
     {
         "nameResourceKey":  "OutlookAppConfig.textPredictionsTitle",
@@ -318,24 +330,114 @@
         "entityKey":  "com.microsoft.outlook.Mail.TextPredictionsEnabled",
         "dataType":  0,
         "booleanActions":  120,
-        "category": 103
+        "category": "SettingDetails.configurationSettingsTitle",
+        "ChildSettings": [
+            {
+                "nameResourceKey":  "OutlookAppConfig.allowUserChangeTitle",
+                "descriptionResourceKey":  "",
+                "entityKey":  "com.microsoft.outlook.Mail.TextPredictionsEnabled.UserChangeAllowed",
+                "dataType":  0,
+                "booleanActions":  109,
+                "allowMissing": true,
+                "unconfiguredValue": true,
+                "alwaysAddValue": true,
+                "category": "SettingDetails.configurationSettingsTitle",
+                "Condition": {
+                    "Expressions": [
+                        {
+                            "property": "com.microsoft.outlook.Mail.TextPredictionsEnabled",
+                            "value": "true"
+                        }
+                    ]
+                }            
+            }
+        ]
+    },
+
+
+    {
+        "nameResourceKey":  "Inputs.outlookSMimeSettings",
+        "descriptionResourceKey":  "",
+        "dataType":  8,
+        "booleanActions":  0
     },
     {
-        "nameResourceKey":  "OutlookAppConfig.allowUserChangeTitle",
+        "nameResourceKey":  "OutlookAppConfig.enableSMIMETitle",
         "descriptionResourceKey":  "",
-        "entityKey":  "com.microsoft.outlook.Mail.TextPredictionsEnabled.UserChangeAllowed",
+        "entityKey":  "com.microsoft.outlook.Mail.SMIMEEnabled",
         "dataType":  0,
         "booleanActions":  109,
-        "unconfiguredValue": true,
+        "category": "SettingDetails.requireSMIME",
-        "allowMissing": true,
+        "ChildSettings": [
-        "category": 103,
+            {
-        "Condition": {
+                "nameResourceKey":  "OutlookAppConfig.allowUserChangeTitle",
-            "Expressions": [
+                "descriptionResourceKey":  "",
-                {
+                "entityKey":  "com.microsoft.outlook.Mail.SMIMEEnabled.UserChangeAllowed",
-                    "property": "com.microsoft.outlook.Mail.TextPredictionsEnabled",
+                "dataType":  0,
-                    "value": "true"
+                "booleanActions":  109,
-                }
+                "allowMissing": true,
-            ]
+                "unconfiguredValue": true,
-        }        
+                "alwaysAddValue": true,
-    }    
+                "category": "SettingDetails.requireSMIME"
+            }
+        ]
+    },
+    {
+        "nameResourceKey":  "OutlookAppConfig.encryptAllEmails",
+        "descriptionResourceKey":  "",
+        "entityKey":  "com.microsoft.outlook.Mail.SMIMEEnabled.EncryptAllMail",
+        "dataType":  0,
+        "booleanActions":  109,
+        "category": "SettingDetails.requireSMIME",
+        "ChildSettings": [
+            {
+                "nameResourceKey":  "OutlookAppConfig.allowUserChangeTitle",
+                "descriptionResourceKey":  "",
+                "entityKey":  "com.microsoft.outlook.Mail.SMIMEEnabled.EncryptAllMail.UserChangeAllowed",
+                "dataType":  0,
+                "booleanActions":  109,
+                "allowMissing": true,
+                "unconfiguredValue": true,
+                "alwaysAddValue": true,
+                "category": "SettingDetails.requireSMIME"
+            }
+        ]
+    },
+    {
+        "nameResourceKey":  "OutlookAppConfig.signAllEmails",
+        "descriptionResourceKey":  "",
+        "entityKey":  "com.microsoft.outlook.Mail.SMIMEEnabled.SignAllMail",
+        "dataType":  0,
+        "booleanActions":  109,
+        "category": "SettingDetails.requireSMIME",
+        "ChildSettings": [
+            {
+                "nameResourceKey":  "OutlookAppConfig.allowUserChangeTitle",
+                "descriptionResourceKey":  "",
+                "entityKey":  "com.microsoft.outlook.Mail.SMIMEEnabled.SignAllMail.UserChangeAllowed",
+                "dataType":  0,
+                "booleanActions":  109,
+                "allowMissing": true,
+                "unconfiguredValue": true,
+                "alwaysAddValue": true,
+                "category": "SettingDetails.requireSMIME"
+            }
+        ]
+    },
+    {
+        "nameResourceKey":  "Inputs.ldapUrl",
+        "descriptionResourceKey":  "",
+        "entityKey":  "com.microsoft.outlook.Mail.SMIMEEnabled.LDAPHostName",
+        "dataType":  20,
+        "booleanActions":  0,
+        "category": "SettingDetails.requireSMIME"
+    },
+    {
+        "nameResourceKey":  "Inputs.deploySMimeCertsFromIntune",
+        "descriptionResourceKey":  "",
+        "entityKey":  "com.microsoft.outlook.Mail.SMIMEEnabled.CertsFromIntune",
+        "dataType":  0,
+        "booleanActions":  109,
+        "category": "SettingDetails.requireSMIME"
+    }
 ]

Documentation/ObjectInfo/#Applications.json

@@ -7,6 +7,96 @@
         "booleanActions":  0,
         "category": "AppInformationTab.name"
     },
+    {
+        "nameResourceKey":  "Inputs.packageIdLabel",
+        "descriptionResourceKey":  "",
+        "entityKey":  "packageIdentifier",
+        "dataType":  20,
+        "booleanActions":  0,
+        "category": "AppInformationTab.name",
+        "Condition": {                            
+            "Expressions": [
+                {
+                    "property": "@OData.Type",
+                    "value": "#microsoft.graph.winGetApp"
+                }                        
+            ]
+        } 
+    },
+    {
+        "nameResourceKey":  "Inputs.packageIdLabel",
+        "descriptionResourceKey":  "",
+        "entityKey":  "packageIdentifier",
+        "dataType":  107,
+        "booleanActions":  0,
+        "category": "AppInformationTab.name",
+        "value": "UWP",
+        "Condition": {
+            "type": "and",
+            "Expressions": [
+                {
+                    "property": "packageIdentifier",
+                    "value": "9*",
+                    "operator": "like"
+                },
+                {
+                    "property": "@OData.Type",
+                    "value": "#microsoft.graph.winGetApp"
+                }
+            ]
+        }
+    },
+    {
+        "nameResourceKey":  "Inputs.packageIdLabel",
+        "descriptionResourceKey":  "",
+        "entityKey":  "packageIdentifier",
+        "dataType":  107,
+        "booleanActions":  0,
+        "category": "AppInformationTab.name",
+        "value": "Win32",
+        "Condition": {
+            "type": "and",
+            "Expressions": [
+                {
+                    "property": "packageIdentifier",
+                    "value": "X*",
+                    "operator": "like"
+                },
+                {
+                    "property": "@OData.Type",
+                    "value": "#microsoft.graph.winGetApp"
+                }
+            ]
+        }
+    },
+    {
+        "nameResourceKey":  "Inputs.packageIdLabel",
+        "descriptionResourceKey":  "",
+        "entityKey":  "packageIdentifier",
+        "dataType":  107,
+        "booleanActions":  0,
+        "category": "AppInformationTab.name",
+        "value": "Unsupported Store Type",
+        "Condition": {
+            "type": "and",
+            "Expressions": [
+                {
+                    "property": "packageIdentifier",
+                    "value": "9*",
+                    "operator": "notlike"
+                },
+                {
+                    "property": "packageIdentifier",
+                    "value": "X*",
+                    "operator": "notlike"
+                },
+                {
+                    "property": "@OData.Type",
+                    "value": "#microsoft.graph.winGetApp"
+                }
+            ]
+        }
+    },    
     {
         "nameResourceKey":  "Inputs.displayVersionLabel",
         "descriptionResourceKey":  "",
@@ -766,20 +856,122 @@
         },
         "complexOptions": [
             {
-                "nameResourceKey":  "Win32Program.installCommand",
+                "nameResourceKey":  "Win32Program.installerTypeText",
                 "descriptionResourceKey":  "",
-                "entityKey":  "installCommandLine",
+                "entityKey":  "installerType",
                 "dataType":  20,
                 "booleanActions":  0,
-                "category": "Win32Program.selectorLabel"
+                "category": "Win32Program.selectorLabel",
-            },
+                "Children": [
+                    {
+                        "nameResourceKey":  "Win32Program.installCommand",
+                        "descriptionResourceKey":  "",
+                        "entityKey":  "installCommandLine",
+                        "dataType":  20,
+                        "booleanActions":  0,
+                        "category": "Win32Program.selectorLabel",
+                        "Condition": {
+                            "Expressions": [
+                                {
+                                    "property": "installCommandLine"
+                                }
+                            ]
+                        }
+                    },
+                    {
+                        "nameResourceKey":  "Win32Program.installScript",
+                        "descriptionResourceKey":  "",
+                        "entityKey":  "activeInstallScript",
+                        "dataType":  6,
+                        "booleanActions":  0,
+                        "category": "Win32Program.selectorLabel",
+                        "complexOptions": [
+                            {
+                                "nameResourceKey":  "TableHeaders.scriptName",
+                                "descriptionResourceKey":  "",
+                                "entityKey":  "scriptName",
+                                "dataType":  20,
+                                "booleanActions":  0,
+                                "category": "Win32Program.selectorLabel"
+                            },
+                            {
+                                "nameResourceKey":  "Win32Requirements.AdditionalRequirements.Script.enforceSignatureCheck",
+                                "descriptionResourceKey":  "Win32Requirements.AdditionalRequirements.Script.enforceSignatureCheckTooltip",
+                                "entityKey":  "enforceSignatureCheck",
+                                "dataType":  0,
+                                "booleanActions":  109,
+                                "category": "Win32Program.selectorLabel"
+                            },
+                            {
+                                "nameResourceKey": "DetectionRules.CustomScript.runAs32Bit",
+                                "descriptionResourceKey": "DetectionRules.CustomScript.runAs32BitTooltip",
+                                "entityKey":  "runAs32Bit",
+                                "dataType":  0,
+                                "booleanActions":  109,
+                                "category": "Win32Program.selectorLabel"
+                            }
+                        ]
+                    }
+                ]
+            },            
             {
-                "nameResourceKey":  "Win32Program.uninstallCommand",
+                "nameResourceKey":  "Win32Program.uninstallerTypeText",
                 "descriptionResourceKey":  "",
-                "entityKey":  "uninstallCommandLine",
+                "entityKey":  "uninstallerType",
                 "dataType":  20,
                 "booleanActions":  0,
-                "category": "Win32Program.selectorLabel"
+                "category": "Win32Program.selectorLabel",
+                "Children": [
+                    {
+                        "nameResourceKey":  "Win32Program.uninstallCommand",
+                        "descriptionResourceKey":  "",
+                        "entityKey":  "uninstallCommandLine",
+                        "dataType":  20,
+                        "booleanActions":  0,
+                        "category": "Win32Program.selectorLabel",
+                        "Condition": {
+                            "Expressions": [
+                                {
+                                    "property": "uninstallCommandLine"
+                                }
+                            ]
+                        }
+                    },
+                    {
+                        "nameResourceKey":  "Win32Program.uninstallScript",
+                        "descriptionResourceKey":  "",
+                        "entityKey":  "activeUninstallScript",
+                        "dataType":  6,
+                        "booleanActions":  0,
+                        "category": "Win32Program.selectorLabel",
+                        "complexOptions": [
+                            {
+                                "nameResourceKey":  "TableHeaders.scriptName",
+                                "descriptionResourceKey":  "",
+                                "entityKey":  "scriptName",
+                                "dataType":  20,
+                                "booleanActions":  0,
+                                "category": "Win32Program.selectorLabel"
+                            },
+                            {
+                                "nameResourceKey":  "Win32Requirements.AdditionalRequirements.Script.enforceSignatureCheck",
+                                "descriptionResourceKey":  "Win32Requirements.AdditionalRequirements.Script.enforceSignatureCheckTooltip",
+                                "entityKey":  "enforceSignatureCheck",
+                                "dataType":  0,
+                                "booleanActions":  109,
+                                "category": "Win32Program.selectorLabel"
+                            },
+                            {
+                                "nameResourceKey":  "DetectionRules.CustomScript.runAs32Bit",
+                                "descriptionResourceKey":  "DetectionRules.CustomScript.runAs32BitTooltip",
+                                "entityKey":  "runAs32Bit",
+                                "dataType":  0,
+                                "booleanActions":  109,
+                                "category": "Win32Program.selectorLabel"
+                            }
+                        ]
+                    }
+                ]
             },
             {
                 "nameResourceKey":  "",
@@ -787,7 +979,7 @@
                 "entityKey":  "installExperience",
                 "dataType":  6,
                 "booleanActions":  0,
-                "category": "",                
+                "category": "",
                 "complexOptions": [
                     {
                         "nameResourceKey":  "Win32Program.runAsAccount",
@@ -836,10 +1028,24 @@
                 ]
             },
             {
+                "Columns": [
+                    {
+                        "metadata": {
+                            "entityKey": "returnCode",
+                            "nameResourceKey": "Win32ReturnCodes.Columns.returnCode"
+                        }
+                    },
+                    {
+                        "metadata": {
+                            "entityKey": "type",
+                            "nameResourceKey": "Win32ReturnCodes.Columns.codeType"
+                        }
+                    }
+                ],
                 "nameResourceKey":  "Win32ReturnCodes.selectorLabel",
                 "descriptionResourceKey":  "",
                 "entityKey":  "returnCodes",
-                "dataType":  20,
+                "dataType":  21,
                 "booleanActions":  0,
                 "category": "Win32Program.selectorLabel"
             },
@@ -892,10 +1098,24 @@
                 "category": "Win32Requirements.selectorLabel"
             },
             {
+                "Columns": [
+                    {
+                        "metadata": {
+                            "entityKey": "property",
+                            "nameResourceKey": "ApplicabilityRules.GridLabel.property"
+                        }
+                    },
+                    {
+                        "metadata": {
+                            "entityKey": "value",
+                            "nameResourceKey": "ApplicabilityRules.GridLabel.value"
+                        }
+                    }
+                ],
                 "nameResourceKey":  "Win32Requirements.AdditionalRequirements.label",
                 "descriptionResourceKey":  "",
-                "entityKey":  "requirementRulesSummary",
+                "entityKey":  "requirementRulesTranslated",
-                "dataType":  20,
+                "dataType":  21,
                 "booleanActions":  0,
                 "category": "Win32Requirements.selectorLabel"
             },
@@ -908,10 +1128,24 @@
                 "category": "DetectionRules.selectorLabel"
             },
             {
+                "Columns": [
+                    {
+                        "metadata": {
+                            "entityKey": "property",
+                            "nameResourceKey": "ApplicabilityRules.GridLabel.property"
+                        }
+                    },
+                    {
+                        "metadata": {
+                            "entityKey": "value",
+                            "nameResourceKey": "ApplicabilityRules.GridLabel.value"
+                        }
+                    }
+                ],
                 "nameResourceKey":  "DetectionRules.selectorLabel",
                 "descriptionResourceKey":  "",
-                "entityKey":  "detectionRulesSummary",
+                "entityKey":  "detectionRulesTranslated",
-                "dataType":  20,
+                "dataType":  21,
                 "booleanActions":  0,
                 "category": "DetectionRules.selectorLabel",
                 "Condition": {                            
@@ -923,7 +1157,7 @@
                         }                        
                     ]
                 }
-            },
+            },            
             {
                 "nameResourceKey":  "",
                 "descriptionResourceKey":  "",
@@ -967,12 +1201,12 @@
                 "category": "SettingDetails.dependencyCategory"
             },
             {
-                "nameResourceKey":  "supersedenceCategory",
+                "nameResourceKey":  "AppRelationshipStatus.Tabs.supersedence",
                 "descriptionResourceKey":  "",
                 "entityKey":  "supersededApps",
                 "dataType":  20,
                 "booleanActions":  0,
-                "category": "SettingDetails.supersedenceCategory"
+                "category": "AppRelationshipStatus.Tabs.supersedence"
             }
         ]
     }    

Documentation/ObjectInfo/#AutoPilot.json

@@ -80,7 +80,7 @@
                                     "value":  "azureAD"
                                 }
                 ]
-            }            
+            }
         ]
     },    
     {
@@ -99,40 +99,62 @@
                 }
             ]
         }
-    },    
+    },
     {
         "nameResourceKey":  "Autopilot.OOBE.language",
         "descriptionResourceKey":  "",
         "dataType":  102,
         "category":  "Autopilot.OOBE.title",
         "entityKey":  "language",
-        "booleanActions":  0
+        "booleanActions":  0,
-    },    
+        "ChildSettings": [
+            {
+                "nameResourceKey":  "Autopilot.OOBE.title",
+                "descriptionResourceKey":  "",
+                "entityKey":  "outOfBoxExperienceSettings",
+                "dataType":  6,
+                "booleanActions":  0,
+                "category": "Autopilot.OOBE.title",
+                "Condition": {
+                    "Expressions": [
+                        {
+                            "property": "language",
+                            "operator": "ne",
+                            "value": "user-select"
+                        }
+                    ]
+                },
+                "complexOptions":  [
+                    {
+                        "nameResourceKey":  "Autopilot.OOBE.skipKeyboardSelection",
+                        "descriptionResourceKey":  "Autopilot.OOBE.skipKeyboardSelectionInfo",
+                        "entityKey":  "skipKeyboardSelectionPage",
+                        "dataType":  0,
+                        "booleanActions":  109,
+                        "category": "Autopilot.OOBE.title",
+                        "Condition": {
+                            "type": "or",
+                            "Expressions": [
+                                {
+                                    "property": "isLanguageSet",
+                                    "value": true
+                                }
+                            ]
+                        }
+                    }
+                ]
+            }
+        ]        
+    },      
     {
         "nameResourceKey":  "Autopilot.OOBE.title",
         "descriptionResourceKey":  "",
         "entityKey":  "outOfBoxExperienceSettings",
         "dataType":  6,
+        "skipAddLevel": true,
         "booleanActions":  0,
         "category": "Autopilot.OOBE.title",
-        "complexOptions":  [
+        "complexOptions":  [            
-            {
-                "nameResourceKey":  "Autopilot.OOBE.skipKeyboardSelection",
-                "descriptionResourceKey":  "Autopilot.OOBE.skipKeyboardSelectionInfo",
-                "entityKey":  "skipKeyboardSelectionPage",
-                "dataType":  0,
-                "booleanActions":  109,
-                "category": "Autopilot.OOBE.title",
-                "Condition": {
-                    "type": "or",
-                    "Expressions": [
-                        {
-                            "property": "isLanguageSet",
-                            "value": true
-                        }
-                    ]
-                }
-            },
             {
                 "nameResourceKey":  "Autopilot.OOBE.licenseAgreement",
                 "descriptionResourceKey":  "Autopilot.OOBE.licenseAgreementInfo",
@@ -148,7 +170,7 @@
                 "dataType":  0,
                 "booleanActions":  108,
                 "category": "Autopilot.OOBE.title"
-            },
+            },    
             {
                 "nameResourceKey":  "Autopilot.OOBE.hideEscapeLink",
                 "descriptionResourceKey":  "Autopilot.OOBE.hideEscapeLinkInfo",
@@ -174,7 +196,7 @@
                                     "value":  "administrator"
                                 }
                 ]
-            }
+            }            
         ]
     },
     {
@@ -184,12 +206,12 @@
         "dataType":  0,
         "booleanActions":  109,
         "category": "Autopilot.OOBE.title"
-    },
+    },    
     {
         "nameResourceKey":  "Autopilot.OOBE.ApplyComputerNameTemplate.label",
         "descriptionResourceKey":  "Autopilot.OOBE.ApplyComputerNameTemplate.infoBalloon",
         "entityKey":  "applyDeviceNameTemplate",
-        "dataType":  103,
+        "dataType":  0,        
         "booleanActions":  109,
         "category": "Autopilot.OOBE.title",
         "ChildSettings": [

Documentation/ObjectInfo/#microsoft.graph.androidManagedAppProtection.json

@@ -393,7 +393,7 @@
                 "value":  "notConfigured"
             },
             {
-                "nameResourceKey":  "microsoftEdge",
+                "nameResourceKey":  "microsoftEdgeOptionText",
                 "descriptionResourceKey":  "",
                 "value":  "microsoftEdge"
             },
@@ -543,7 +543,7 @@
     {
         "nameResourceKey":  "TAPSettings.Tap.numberOfDays",
         "descriptionResourceKey":  "",
-        "entityKey":  "pinRequiredInsteadOfBiometricTimeout",
+        "entityKey":  "periodBeforePinReset",
         "dataType":  100,
         "booleanActions":  0,
         "category": "SettingDetails.accessRequirements"

Documentation/ObjectInfo/#microsoft.graph.deviceCustomAttributeShellScript.json

@@ -0,0 +1,43 @@
+[
+    {
+        "nameResourceKey":  "TableHeaders.configurationType",
+        "descriptionResourceKey":  "",
+        "entityKey":  "WindowsManagement.customAttributeObjectName",
+        "dataType":  200,
+        "booleanActions":  0,
+        "category": 1000
+    },
+    {
+        "nameResourceKey":  "WindowsManagement.CustomAttributes.customAttributeTypeLabel",
+        "descriptionResourceKey":  "",
+        "entityKey":  "customAttributeType",
+        "dataType":  16,
+        "booleanActions":  0,
+        "category": "WindowsManagement.scriptsettingsTabHeader",
+        "options":  [
+            {
+                "nameResourceKey":  "WindowsManagement.CustomAttributes.dateTypeOption",
+                "descriptionResourceKey":  "",
+                "value":  "date"
+            },
+            {
+                "nameResourceKey":  "WindowsManagement.CustomAttributes.stringTypeOption",
+                "descriptionResourceKey":  "",
+                "value":  "string"
+            },
+            {
+                "nameResourceKey":  "WindowsManagement.CustomAttributes.integerTypeOption",
+                "descriptionResourceKey":  "",
+                "value":  "integer"
+            }
+        ]        
+    },    
+    {
+        "nameResourceKey":  "WindowsManagement.customAttributeObjectName",
+        "descriptionResourceKey":  "",
+        "entityKey":  "fileName",
+        "dataType":  20,
+        "booleanActions":  0,
+        "category": "WindowsManagement.scriptsettingsTabHeader"
+    }
+]    

Documentation/ObjectInfo/#microsoft.graph.hardwareConfiguration.json

@@ -0,0 +1,34 @@
+[
+    {
+        "nameResourceKey":  "TableHeaders.configurationType",
+        "descriptionResourceKey":  "",
+        "entityKey":  "PolicyType.hardwareConfigurations",
+        "dataType":  200,
+        "booleanActions":  0,
+        "category": 1000
+    },
+    {
+        "nameResourceKey":  "HardwareConfig.Settings.Tab.Configurations.hardware",
+        "descriptionResourceKey":  "",
+        "entityKey":  "vendor",
+        "dataType":  20,
+        "booleanActions":  0,
+        "category": "SettingDetails.configurations"
+    },
+    {
+        "nameResourceKey":  "HardwareConfig.Settings.Tab.Configurations.perDevicePassword",
+        "descriptionResourceKey":  "",
+        "entityKey":  "perDevicePasswordDisabled",
+        "dataType":  109,
+        "booleanActions":  9,
+        "category": "SettingDetails.configurations"
+    },
+    {
+        "nameResourceKey":  "HardwareConfig.Settings.Tab.Configurations.file",
+        "descriptionResourceKey":  "",
+        "entityKey":  "fileName",
+        "dataType":  20,
+        "booleanActions":  0,
+        "category": "SettingDetails.configurations"
+    }
+]

Documentation/ObjectInfo/#microsoft.graph.iosManagedAppProtection.json

@@ -306,7 +306,7 @@
     {
         "nameResourceKey":  "TAPSettings.EncryptData.label",
         "descriptionResourceKey":  "TAPSettings.EncryptData.tooltip",
-        "entityKey":  "appDataEncryptionType",
+        "entityKey":  "encryptOrgData",
         "dataType":  0,
         "booleanActions":  101,
         "category": "SettingDetails.dataProtection",
@@ -354,7 +354,7 @@
                 "value":  "notConfigured"
             },
             {
-                "nameResourceKey":  "microsoftEdge",
+                "nameResourceKey":  "microsoftEdgeOptionText",
                 "descriptionResourceKey":  "",
                 "value":  "microsoftEdge"
             },
@@ -398,14 +398,12 @@
             }
         ]
     },
+
+
     {
         "dataType":  8,
         "nameResourceKey":  "empty"
     }, 
-
-
-
-    
     {
         "nameResourceKey":  "TAPSettings.PinAccess.label",
         "descriptionResourceKey":  "TAPSettings.PinAccess.tooltip",
@@ -496,17 +494,17 @@
     {
         "nameResourceKey":  "TAPSettings.Tap.numberOfDays",
         "descriptionResourceKey":  "",
-        "entityKey":  "pinRequiredInsteadOfBiometricTimeout",
+        "entityKey":  "periodBeforePinReset",
         "dataType":  100,
         "booleanActions":  0,
         "category": "SettingDetails.accessRequirements"
     },
     {
-        "nameResourceKey":  "TAPSettings.Tap.previousPinBlockCount",
+        "nameResourceKey":  "TAPSettings.AppPIN.label",
-        "descriptionResourceKey":  "",
+        "descriptionResourceKey":  "TAPSettings.AppPIN.tooltip",
-        "entityKey":  "previousPinBlockCount",
+        "entityKey":  "disableAppPinIfDevicePinIsSet",
-        "dataType":  14,
+        "dataType":  0,
-        "booleanActions":  0,
+        "booleanActions":  201,
         "category": "SettingDetails.accessRequirements"
     },
     {

Documentation/ObjectInfo/#microsoft.graph.iosUpdateConfiguration.json

@@ -5,7 +5,7 @@
         "entityKey":  "versionInfo",
         "dataType":  20,
         "booleanActions":  0,
-        "category":  103
+        "category":  "TableHeaders.settings"
     },
     {
         "nameResourceKey":  "SoftwareUpdates.IosUpdatePolicy.Settings.Schedule.label",
@@ -13,7 +13,7 @@
         "entityKey":  "updateScheduleType",
         "dataType":  16,
         "booleanActions":  0,
-        "category":  103,
+        "category":  "TableHeaders.settings",
         "options":  [
             {
                 "nameResourceKey":  "SoftwareUpdates.IosUpdatePolicy.Settings.Schedule.outsideActiveHours",
@@ -39,7 +39,7 @@
     },
     {
         "dataType":  16,
-        "category":  103,
+        "category":  "TableHeaders.settings",
         "nameResourceKey":  "timeZoneName",
         "descriptionResourceKey":  "timeZoneDescription",
         "childSettings":  [
@@ -249,6 +249,6 @@
         "entityKey":  "timeWidows",
         "dataType":  20,
         "booleanActions":  0,
-        "category":  103
+        "category":  "TableHeaders.settings"
     }
 ]

Documentation/ObjectInfo/#microsoft.graph.windows10EnrollmentCompletionPageConfiguration.json

@@ -11,92 +11,126 @@
         "nameResourceKey":  "EnrollmentStatusScreen.progressToggle",
         "descriptionResourceKey":  "",
         "entityKey":  "showInstallationProgress",
-        "dataType":  0,
-        "booleanActions":  109,
-        "category":  103
-    },
-    {
-        "nameResourceKey":  "EnrollmentStatusScreen.timeout",
-        "descriptionResourceKey":  "",
-        "entityKey":  "installProgressTimeoutInMinutes",
-        "dataType":  14,
-        "booleanActions":  0,
-        "category":  103
-    },
-    {
-        "nameResourceKey":  "EnrollmentStatusScreen.customMessageToggle",
-        "descriptionResourceKey":  "",
-        "entityKey":  "showCustomErrorMessage",
-        "dataType":  0,
-        "booleanActions":  109,
-        "category":  103
-    },
-    {
-        "nameResourceKey":  "EnrollmentStatusScreen.customMessageTextBox",
-        "descriptionResourceKey":  "",
-        "entityKey":  "customErrorMessage",
-        "dataType":  20,
-        "booleanActions":  0,
-        "category":  103
-    },
-    {
-        "nameResourceKey":  "EnrollmentStatusScreen.collectLogToggle",
-        "descriptionResourceKey":  "",
-        "entityKey":  "allowLogCollectionOnInstallFailure",
-        "dataType":  0,
-        "booleanActions":  109,
-        "category":  103
-    },
-    {
-        "nameResourceKey":  "EnrollmentStatusScreen.enableForAutopilotOnlyToggle",
-        "descriptionResourceKey":  "",
-        "entityKey":  "trackInstallProgressForAutopilotOnly",
-        "dataType":  0,
-        "booleanActions":  109,
-        "category":  103
-    },
-    {
-        "nameResourceKey":  "EnrollmentStatusScreen.blockToggle",
-        "descriptionResourceKey":  "",
-        "entityKey":  "blockDeviceSetupRetryByUser",
         "dataType":  16,
-        "booleanActions":  0,
+        "booleanActions":  109,
-        "category":  103,
+        "category":  "TableHeaders.settings",
         "options":  [                                
             {
                 "nameResourceKey":  "SettingDetails.no",
-                "value":  "true"
+                "value":  "false"
             },
             {
                 "nameResourceKey":  "BooleanActions.yes",
-                "value":  "false",
+                "value":  "true",
                 "Children": [
                     {
-                        "nameResourceKey":  "EnrollmentStatusScreen.resetToggle",
+                        "nameResourceKey":  "EnrollmentStatusScreen.timeout",
                         "descriptionResourceKey":  "",
-                        "entityKey":  "allowDeviceResetOnInstallFailure",
+                        "entityKey":  "InstallProgressTimeout",
-                        "dataType":  0,
-                        "booleanActions":  109,
-                        "category":  103
-                    },
-                    {
-                        "nameResourceKey":  "EnrollmentStatusScreen.allowToUseToggle",
-                        "descriptionResourceKey":  "",
-                        "entityKey":  "allowDeviceUseOnInstallFailure",
-                        "dataType":  0,
-                        "booleanActions":  109,
-                        "category":  103
-                    },
-                    {
-                        "nameResourceKey":  "EnrollmentStatusScreen.Apps.useSelectedAppsToggleLabel",
-                        "descriptionResourceKey":  "",
-                        "entityKey":  "waitForApps",
                         "dataType":  14,
                         "booleanActions":  0,
-                        "category":  103
+                        "category":  "TableHeaders.settings"
+                    },
+                    {
+                        "nameResourceKey":  "EnrollmentStatusScreen.customMessageToggle",
+                        "descriptionResourceKey":  "",
+                        "entityKey":  "showCustomErrorMessage",
+                        "dataType":  16,
+                        "booleanActions":  109,
+                        "category":  "TableHeaders.settings",
+                        "options":  [                                
+                            {
+                                "nameResourceKey":  "SettingDetails.no",
+                                "value":  "false"
+                            },
+                            {
+                                "nameResourceKey":  "BooleanActions.yes",
+                                "value":  "true",
+                                "Children": [
+                                    {
+                                        "nameResourceKey":  "EnrollmentStatusScreen.customMessageTextBox",
+                                        "descriptionResourceKey":  "",
+                                        "entityKey":  "customErrorMessage",
+                                        "dataType":  20,
+                                        "booleanActions":  0,
+                                        "category":  "TableHeaders.settings"
+                                    }
+                                ]
+                            }
+                        ]
+                    },
+                    {
+                        "nameResourceKey":  "EnrollmentStatusScreen.collectLogToggle",
+                        "descriptionResourceKey":  "",
+                        "entityKey":  "allowLogCollectionOnInstallFailure",
+                        "dataType":  0,
+                        "booleanActions":  109,
+                        "category":  "TableHeaders.settings"
+                    },
+                    {
+                        "nameResourceKey":  "EnrollmentStatusScreen.enableForAutopilotOnlyToggle",
+                        "descriptionResourceKey":  "",
+                        "entityKey":  "trackInstallProgressForAutopilotOnly",
+                        "dataType":  0,
+                        "booleanActions":  109,
+                        "category":  "TableHeaders.settings"
+                    },
+                    {
+                        "nameResourceKey":  "EnrollmentStatusScreen.blockToggle",
+                        "descriptionResourceKey":  "",
+                        "entityKey":  "blockDeviceSetupRetryByUser",
+                        "dataType":  16,
+                        "booleanActions":  0,
+                        "category":  "TableHeaders.settings",
+                        "options":  [                                
+                            {
+                                "nameResourceKey":  "SettingDetails.no",
+                                "value":  "true"
+                            },
+                            {
+                                "nameResourceKey":  "BooleanActions.yes",
+                                "value":  "false",
+                                "Children": [
+                                    {
+                                        "nameResourceKey":  "EnrollmentStatusScreen.resetToggle",
+                                        "descriptionResourceKey":  "",
+                                        "entityKey":  "allowDeviceResetOnInstallFailure",
+                                        "dataType":  0,
+                                        "booleanActions":  109,
+                                        "category":  "TableHeaders.settings"
+                                    },
+                                    {
+                                        "nameResourceKey":  "EnrollmentStatusScreen.allowToUseToggle",
+                                        "descriptionResourceKey":  "",
+                                        "entityKey":  "allowDeviceUseOnInstallFailure",
+                                        "dataType":  0,
+                                        "booleanActions":  109,
+                                        "category":  "TableHeaders.settings"
+                                    },
+                                    {
+                                        "nameResourceKey":  "EnrollmentStatusScreen.Apps.useSelectedAppsToggleLabel",
+                                        "descriptionResourceKey":  "",
+                                        "entityKey":  "waitForApps",
+                                        "dataType":  14,
+                                        "booleanActions":  0,
+                                        "category":  "TableHeaders.settings",
+                                        "Children": [
+                                            {
+                                                "nameResourceKey":  "EnrollmentStatusScreen.Apps.allowNonBlockingAppInstallation",
+                                                "descriptionResourceKey":  "",
+                                                "entityKey":  "allowNonBlockingAppInstallation",
+                                                "dataType":  0,
+                                                "booleanActions":  109,
+                                                "category":  "TableHeaders.settings"
+                                            }
+                                        ] 
+                                    }
+                                ]
+                            }
+                        ]        
                     }
                 ]
             }
-        ]        
+        ]
     }
 ]

Documentation/ObjectInfo/#microsoft.graph.windowsDriverUpdateProfile.json

@@ -0,0 +1,69 @@
+[
+    {
+        "nameResourceKey":  "TableHeaders.policyType",
+        "descriptionResourceKey":  "",
+        "entityKey":  "WindowsDriverUpdateProfile.Subtitle.automatic",
+        "dataType":  200,
+        "booleanActions":  0,
+        "category": 1000,
+        "Condition": {
+            "Expressions": [
+                {
+                    "property": "approvalType",
+                    "value": "automatic"
+                }
+            ]
+        }
+    },
+    {
+        "nameResourceKey":  "TableHeaders.policyType",
+        "descriptionResourceKey":  "",
+        "entityKey":  "WindowsDriverUpdateProfile.Subtitle.manual",
+        "dataType":  200,
+        "booleanActions":  0,
+        "category": 1000,
+        "Condition": {
+            "Expressions": [
+                {
+                    "property": "approvalType",
+                    "value": "manual"
+                }
+            ]
+        }        
+    },
+    {
+        "nameResourceKey":  "WindowsDriverUpdateProfile.Details.ApprovalMethod.label",
+        "descriptionResourceKey":  "",
+        "entityKey":  "approvalType",
+        "dataType":  16,
+        "booleanActions":  0,
+        "category":  "TableHeaders.settings",
+        "options":  [                                
+            {
+                "nameResourceKey":  "WindowsDriverUpdateProfile.ApprovalMethod.automatic",
+                "value":  "automatic"
+            },
+            {
+                "nameResourceKey":  "WindowsDriverUpdateProfile.ApprovalMethod.manual",
+                "value":  "manual"
+            }
+        ]
+    },
+    {
+        "nameResourceKey":  "WindowsDriverUpdateProfile.Details.DeploymentDeferralInDays.label",
+        "descriptionResourceKey":  "",
+        "entityKey":  "deploymentDeferralInDays",
+        "formatStringKey": "WindowsDriverUpdateProfile.Details.DeploymentDeferralInDays.value",
+        "dataType":  108,
+        "booleanActions":  0,
+        "category":  "TableHeaders.settings",
+        "Condition": {
+            "Expressions": [
+                {
+                    "property": "approvalType",
+                    "value": "automatic"
+                }
+            ]
+        }
+    }
+]

Documentation/ObjectInfo/#microsoft.graph.windowsFeatureUpdateProfile.json

@@ -15,6 +15,34 @@
         "booleanActions":  0,
         "category":  "WindowsFeatureUpdateProfile.Details.deploymentSettingsTitle"
     },
+    {
+        "nameResourceKey":  "WindowsFeatureUpdateProfile.Details.OptionalUpdate.label",
+        "descriptionResourceKey":  "",
+        "entityKey":  "installFeatureUpdatesOptional",
+        "dataType":  16,
+        "booleanActions":  0,
+        "category": "WindowsFeatureUpdateProfile.Details.deploymentSettingsTitle",
+        "options":  [
+            {
+                "nameResourceKey":  "OptionalFeatureUpdateOptions.required",
+                "descriptionResourceKey":  "",
+                "value":  false
+            },
+            {
+                "nameResourceKey":  "OptionalFeatureUpdateOptions.optional",
+                "descriptionResourceKey":  "",
+                "value":  true
+            }
+        ]
+    },
+    {
+        "nameResourceKey":  "WindowsFeatureUpdateProfile.Details.Windows11SideBySideInstall.label",
+        "descriptionResourceKey":  "",
+        "entityKey":  "installLatestWindows10OnWindows11IneligibleDevice",
+        "dataType":  0,
+        "booleanActions":  109,
+        "category": "WindowsFeatureUpdateProfile.Details.deploymentSettingsTitle"
+    },
     {
         "nameResourceKey":  "WindowsFeatureUpdateProfile.Details.RolloutOptions.label",
         "descriptionResourceKey":  "",

Documentation/ObjectInfo/#microsoft.graph.windowsQualityUpdateProfile.json

@@ -13,7 +13,7 @@
         "entityKey":  "deployableContentDisplayName",
         "dataType":  20,
         "booleanActions":  0,
-        "category":  103
+        "category":  "TableHeaders.settings"
     },
     {
         "nameResourceKey":  "WindowsQualityUpdateProfile.Details.DaysUntilForcedReboot.label",
@@ -21,13 +21,13 @@
         "entityKey":  "expeditedUpdateSettings",
         "dataType":  6,
         "booleanActions":  0,
-        "category":  103,
+        "category":  "TableHeaders.settings",
         "complexOptions":  [
             {
                 "nameResourceKey":  "WindowsQualityUpdateProfile.Details.DaysUntilForcedReboot.label",
                 "descriptionResourceKey":  "",
                 "dataType":  16,
-                "category":  103,
+                "category":  "TableHeaders.settings",
                 "entityKey":  "daysUntilForcedReboot",
                 "booleanActions":  0,
                 "options":  [                                

Documentation/ObjectInfo/airprint_iosdevicefeatures.json

@@ -1,4 +1,4 @@
-{
+{
     "airprint_iosdevicefeatures":  [
                                        {
                                            "isSettingDescription":  false,

Documentation/ObjectInfo/airprint_macdevicefeatures.json

@@ -1,4 +1,4 @@
-{
+{
     "airprint_macdevicefeatures":  [
                                        {
                                            "isSettingDescription":  false,

Documentation/ObjectInfo/androiddefenderatp_complianceandroid.json

@@ -1,4 +1,4 @@
-{
+{
     "androiddefenderatp_complianceandroid":  {
                                                  "isSettingDescription":  false,
                                                  "showAsSectionHeader":  false,

Documentation/ObjectInfo/androiddefenderatp_complianceandroiddeviceowner.json

@@ -1,4 +1,4 @@
-{
+{
     "androiddefenderatp_complianceandroiddeviceowner":  {
                                                             "isSettingDescription":  false,
                                                             "showAsSectionHeader":  false,

Documentation/ObjectInfo/androiddefenderatp_complianceandroidforwork.json

@@ -1,4 +1,4 @@
-{
+{
     "androiddefenderatp_complianceandroidforwork":  {
                                                         "isSettingDescription":  false,
                                                         "showAsSectionHeader":  false,

Documentation/ObjectInfo/androiddeviceownerapplications_androiddeviceownergeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "androiddeviceownerapplications_androiddeviceownergeneral":  [
                                                                      {
                                                                          "isSettingDescription":  false,
@@ -85,34 +85,208 @@
                                                                                                    "enabled":  true
                                                                                                },
                                                                                                {
-                                                                                                   "dataType":  0,
+                                                                                                   "dataType":  16,
                                                                                                    "category":  2,
                                                                                                    "nameResourceKey":  "publicPlayStoreEnabledName",
                                                                                                    "descriptionResourceKey":  "publicPlayStoreEnabledDescription",
                                                                                                    "childSettings":  [
-                                                                                                                         {
-                                                                                                                             "dataType":  10,
-                                                                                                                             "category":  2,
-                                                                                                                             "nameResourceKey":  "publicPlayStoreEnabledWarning",
-                                                                                                                             "childSettings":  [
 
-                                                                                                                                               ],
+                                                                                                                     ],
-                                                                                                                             "options":  [
+                                                                                                   "options":  [
+                                                                                                                   {
+                                                                                                                       "nameResourceKey":  "publicPlayStoreSelectionNotConfigured",
+                                                                                                                       "value":  "notConfigured",
+                                                                                                                       "enabled":  true
+                                                                                                                   },
+                                                                                                                   {
+                                                                                                                       "nameResourceKey":  "publicPlayStoreSelectionAllowList",
+                                                                                                                       "value":  "allowList",
+                                                                                                                       "enabled":  true
+                                                                                                                   },
+                                                                                                                   {
+                                                                                                                       "nameResourceKey":  "publicPlayStoreSelectionBlockList",
+                                                                                                                       "value":  "blockList",
+                                                                                                                       "enabled":  true
+                                                                                                                   }
+                                                                                                               ],
+                                                                                                   "entityKey":  "playStoreMode",
+                                                                                                   "booleanActions":  0,
+                                                                                                   "defaultValue":  "notConfigured",
+                                                                                                   "unconfiguredValue":  "notConfigured",
+                                                                                                   "policyType":  2,
+                                                                                                   "enabled":  true
+                                                                                               },
+                                                                                               {
+                                                                                                   "dataType":  10,
+                                                                                                   "category":  2,
+                                                                                                   "nameResourceKey":  "publicPlayStoreEnabledWarning",
+                                                                                                   "childSettings":  [
 
-                                                                                                                                         ],
-                                                                                                                             "booleanActions":  0,
-                                                                                                                             "policyType":  2,
-                                                                                                                             "enabled":  true
-                                                                                                                         }
                                                                                                                      ],
                                                                                                    "options":  [
 
                                                                                                                ],
-                                                                                                   "entityKey":  "publicPlayStoreEnabled",
                                                                                                    "booleanActions":  0,
-                                                                                                   "defaultValue":  false,
                                                                                                    "policyType":  2,
                                                                                                    "enabled":  true
+                                                                                               },
+                                                                                               {
+                                                                                                   "columns":  [
+                                                                                                                   {
+                                                                                                                       "metadata":  {
+                                                                                                                                        "dataType":  20,
+                                                                                                                                        "category":  2,
+                                                                                                                                        "nameResourceKey":  "appNameName",
+                                                                                                                                        "descriptionResourceKey":  "Empty",
+                                                                                                                                        "childSettings":  [
+
+                                                                                                                                                          ],
+                                                                                                                                        "options":  [
+
+                                                                                                                                                    ],
+                                                                                                                                        "entityKey":  "name",
+                                                                                                                                        "booleanActions":  0,
+                                                                                                                                        "policyType":  2,
+                                                                                                                                        "enabled":  false
+                                                                                                                                    }
+                                                                                                                   },
+                                                                                                                   {
+                                                                                                                       "metadata":  {
+                                                                                                                                        "dataType":  20,
+                                                                                                                                        "category":  2,
+                                                                                                                                        "nameResourceKey":  "packageName",
+                                                                                                                                        "descriptionResourceKey":  "Empty",
+                                                                                                                                        "childSettings":  [
+
+                                                                                                                                                          ],
+                                                                                                                                        "options":  [
+
+                                                                                                                                                    ],
+                                                                                                                                        "entityKey":  "appId",
+                                                                                                                                        "booleanActions":  0,
+                                                                                                                                        "policyType":  2,
+                                                                                                                                        "enabled":  false
+                                                                                                                                    }
+                                                                                                                   },
+                                                                                                                   {
+                                                                                                                       "metadata":  {
+                                                                                                                                        "dataType":  20,
+                                                                                                                                        "category":  2,
+                                                                                                                                        "nameResourceKey":  "appUrlName",
+                                                                                                                                        "descriptionResourceKey":  "Empty",
+                                                                                                                                        "childSettings":  [
+
+                                                                                                                                                          ],
+                                                                                                                                        "options":  [
+
+                                                                                                                                                    ],
+                                                                                                                                        "entityKey":  "appStoreUrl",
+                                                                                                                                        "booleanActions":  0,
+                                                                                                                                        "policyType":  2,
+                                                                                                                                        "enabled":  false
+                                                                                                                                    }
+                                                                                                                   },
+                                                                                                                   {
+                                                                                                                       "metadata":  {
+                                                                                                                                        "dataType":  20,
+                                                                                                                                        "category":  2,
+                                                                                                                                        "nameResourceKey":  "appPublisherName",
+                                                                                                                                        "descriptionResourceKey":  "Empty",
+                                                                                                                                        "childSettings":  [
+
+                                                                                                                                                          ],
+                                                                                                                                        "options":  [
+
+                                                                                                                                                    ],
+                                                                                                                                        "entityKey":  "publisher",
+                                                                                                                                        "booleanActions":  0,
+                                                                                                                                        "policyType":  2,
+                                                                                                                                        "enabled":  false
+                                                                                                                                    }
+                                                                                                                   }
+                                                                                                               ],
+                                                                                                   "dataType":  21,
+                                                                                                   "category":  2,
+                                                                                                   "nameResourceKey":  "certificateInstallTitle",
+                                                                                                   "descriptionResourceKey":  "certificateInstallDescription",
+                                                                                                   "childSettings":  [
+
+                                                                                                                     ],
+                                                                                                   "options":  [
+
+                                                                                                               ],
+                                                                                                   "entityKey":  "certInstallApps",
+                                                                                                   "booleanActions":  0,
+                                                                                                   "policyType":  2,
+                                                                                                   "enabled":  false
+                                                                                               },
+                                                                                               {
+                                                                                                   "complexOptions":  [
+                                                                                                                          {
+                                                                                                                              "dataType":  11,
+                                                                                                                              "category":  2,
+                                                                                                                              "nameResourceKey":  "selectSecurityApp",
+                                                                                                                              "descriptionResourceKey":  "empty",
+                                                                                                                              "childSettings":  [
+
+                                                                                                                                                ],
+                                                                                                                              "options":  [
+
+                                                                                                                                          ],
+                                                                                                                              "entityKey":  "securityLogAppId",
+                                                                                                                              "booleanActions":  0,
+                                                                                                                              "policyType":  2,
+                                                                                                                              "enabled":  true
+                                                                                                                          }
+                                                                                                                      ],
+                                                                                                   "dataType":  5,
+                                                                                                   "category":  2,
+                                                                                                   "nameResourceKey":  "securityLogsTitle",
+                                                                                                   "emptyValueResourceKey":  "selectSecurityApp",
+                                                                                                   "childSettings":  [
+
+                                                                                                                     ],
+                                                                                                   "options":  [
+
+                                                                                                               ],
+                                                                                                   "entityKey":  "securityLogApp",
+                                                                                                   "booleanActions":  0,
+                                                                                                   "policyType":  2,
+                                                                                                   "enabled":  false
+                                                                                               },
+                                                                                               {
+                                                                                                   "complexOptions":  [
+                                                                                                                          {
+                                                                                                                              "dataType":  11,
+                                                                                                                              "category":  2,
+                                                                                                                              "nameResourceKey":  "selectNetworkApp",
+                                                                                                                              "descriptionResourceKey":  "empty",
+                                                                                                                              "childSettings":  [
+
+                                                                                                                                                ],
+                                                                                                                              "options":  [
+
+                                                                                                                                          ],
+                                                                                                                              "entityKey":  "networkLogAppId",
+                                                                                                                              "booleanActions":  0,
+                                                                                                                              "policyType":  2,
+                                                                                                                              "enabled":  true
+                                                                                                                          }
+                                                                                                                      ],
+                                                                                                   "dataType":  5,
+                                                                                                   "category":  2,
+                                                                                                   "nameResourceKey":  "networkLogsTitle",
+                                                                                                   "emptyValueResourceKey":  "selectNetworkApp",
+                                                                                                   "childSettings":  [
+
+                                                                                                                     ],
+                                                                                                   "options":  [
+
+                                                                                                               ],
+                                                                                                   "entityKey":  "networkLogApp",
+                                                                                                   "booleanActions":  0,
+                                                                                                   "policyType":  2,
+                                                                                                   "enabled":  false
                                                                                                }
                                                                                            ],
                                                                          "options":  [

Documentation/ObjectInfo/androiddeviceownerpolicymessages_androiddeviceownergeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "androiddeviceownerpolicymessages_androiddeviceownergeneral":  {
                                                                        "isSettingDescription":  false,
                                                                        "showAsSectionHeader":  true,

Documentation/ObjectInfo/applicationguard_windows10endpointprotection.json

@@ -1,4 +1,4 @@
-{
+{
     "applicationguard_windows10endpointprotection":  [
                                                          {
                                                              "dataType":  10,

Documentation/ObjectInfo/applicationrestrictions_androidgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "applicationrestrictions_androidgeneral":  {
                                                    "dataType":  16,
                                                    "category":  5,

Documentation/ObjectInfo/applicationrestrictions_iosgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "applicationrestrictions_iosgeneral":  [
                                                {
                                                    "isSettingDescription":  false,

Documentation/ObjectInfo/applicationrestrictions_macgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "applicationrestrictions_macgeneral":  {
                                                "isSettingDescription":  false,
                                                "showAsSectionHeader":  true,

Documentation/ObjectInfo/applicationrestrictions_windowsphonegeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "applicationrestrictions_windowsphonegeneral":  {
                                                         "dataType":  16,
                                                         "category":  5,

Documentation/ObjectInfo/applications_windows10general.json

@@ -1,4 +1,4 @@
-{
+{
     "applications_windows10general":  [
                                           {
                                               "dataType":  0,

Documentation/ObjectInfo/applications_windowsphonegeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "applications_windowsphonegeneral":  {
                                              "dataType":  0,
                                              "category":  7,

Documentation/ObjectInfo/applicationsandgames_iosgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "applicationsandgames_iosgeneral":  [
                                             {
                                                 "isSettingDescription":  false,

Documentation/ObjectInfo/applicationsandgames_macgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "applicationsandgames_macgeneral":  {
                                             "isSettingDescription":  false,
                                             "showAsSectionHeader":  true,

Documentation/ObjectInfo/applicationsandgoogle_androidgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "applicationsandgoogle_androidgeneral":  {
                                                  "dataType":  0,
                                                  "category":  9,

Documentation/ObjectInfo/applicationvisibility_iosgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "applicationvisibility_iosgeneral":  [
                                              {
                                                  "isSettingDescription":  false,

Documentation/ObjectInfo/appmanagement_androidgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "appmanagement_androidgeneral":  [
                                          {
                                              "isSettingDescription":  false,

Documentation/ObjectInfo/appsandexperience_windows10teamgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "appsandexperience_windows10teamgeneral":  [
                                                    {
                                                        "dataType":  0,

Documentation/ObjectInfo/associateddomains_macdevicefeatures.json

@@ -1,4 +1,4 @@
-{
+{
     "associateddomains_macdevicefeatures":  [
                                                 {
                                                     "isSettingDescription":  false,

Documentation/ObjectInfo/autonomoussingleappmode_iosgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "autonomoussingleappmode_iosgeneral":  [
                                                {
                                                    "isSettingDescription":  false,

Documentation/ObjectInfo/azureoperationalinsights_windows10teamgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "azureoperationalinsights_windows10teamgeneral":  {
                                                           "dataType":  0,
                                                           "category":  14,

Documentation/ObjectInfo/bitlocker_windows10endpointprotection.json

@@ -1,4 +1,4 @@
-{
+{
     "bitlocker_windows10endpointprotection":  [
                                                   {
                                                       "isSettingDescription":  false,

Documentation/ObjectInfo/bootoptions_windows10devicefirmwareconfigurationinterface.json

@@ -1,4 +1,4 @@
-{
+{
     "bootoptions_windows10devicefirmwareconfigurationinterface":  [
                                                                       {
                                                                           "dataType":  16,

Documentation/ObjectInfo/browser_androidgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "browser_androidgeneral":  {
                                    "dataType":  0,
                                    "category":  17,

Documentation/ObjectInfo/browser_windows8general.json

@@ -1,4 +1,4 @@
-{
+{
     "browser_windows8general":  [
                                     {
                                         "dataType":  0,

Documentation/ObjectInfo/browser_windowsphonegeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "browser_windowsphonegeneral":  {
                                         "dataType":  0,
                                         "category":  17,

Documentation/ObjectInfo/builtinapps_iosgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "builtinapps_iosgeneral":  [
                                    {
                                        "isSettingDescription":  false,

Documentation/ObjectInfo/builtinapps_macgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "builtinapps_macgeneral":  {
                                    "isSettingDescription":  false,
                                    "showAsSectionHeader":  true,

Documentation/ObjectInfo/cameras_windows10devicefirmwareconfigurationinterface.json

@@ -1,4 +1,4 @@
-{
+{
     "cameras_windows10devicefirmwareconfigurationinterface":  [
                                                                   {
                                                                       "dataType":  16,
@@ -44,7 +44,7 @@
                                                                                   ],
                                                                       "booleanActions":  0,
                                                                       "policyType":  108,
-                                                                      "enabled":  false
+                                                                      "enabled":  true
                                                                   },
                                                                   {
                                                                       "dataType":  16,

Documentation/ObjectInfo/cellular_windows8general.json

@@ -1,4 +1,4 @@
-{
+{
     "cellular_windows8general":  {
                                      "dataType":  0,
                                      "category":  20,

Documentation/ObjectInfo/cloudandstorage_androidgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "cloudandstorage_androidgeneral":  [
                                            {
                                                "dataType":  0,

Documentation/ObjectInfo/cloudandstorage_iosgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "cloudandstorage_iosgeneral":  [
                                        {
                                            "isSettingDescription":  false,

Documentation/ObjectInfo/cloudandstorage_macgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "cloudandstorage_macgeneral":  [
                                        {
                                            "isSettingDescription":  false,

Documentation/ObjectInfo/cloudandstorage_windows10general.json

@@ -1,4 +1,4 @@
-{
+{
     "cloudandstorage_windows10general":  [
                                              {
                                                  "dataType":  0,

Documentation/ObjectInfo/cloudandstorage_windows8general.json

@@ -1,4 +1,4 @@
-{
+{
     "cloudandstorage_windows8general":  [
                                             {
                                                 "dataType":  20,

Documentation/ObjectInfo/cloudprint_windows10general.json

@@ -1,4 +1,4 @@
-{
+{
     "cloudprint_windows10general":  [
                                         {
                                             "dataType":  20,

Documentation/ObjectInfo/complianceemailprofile_complianceios.json

@@ -1,4 +1,4 @@
-{
+{
     "complianceemailprofile_complianceios":  {
                                                  "isSettingDescription":  false,
                                                  "showAsSectionHeader":  false,

Documentation/ObjectInfo/connecteddevices_iosgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "connecteddevices_iosgeneral":  [
                                         {
                                             "isSettingDescription":  false,

Documentation/ObjectInfo/connecteddevices_macgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "connecteddevices_macgeneral":  {
                                         "isSettingDescription":  false,
                                         "showAsSectionHeader":  true,

Documentation/ObjectInfo/connectivity_androidgeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "connectivity_androidgeneral":  [
                                         {
                                             "dataType":  0,

Documentation/ObjectInfo/connectivity_windows10general.json

@@ -1,4 +1,4 @@
-{
+{
     "connectivity_windows10general":  [
                                           {
                                               "dataType":  16,

Documentation/ObjectInfo/connectivity_windowsphonegeneral.json

@@ -1,4 +1,4 @@
-{
+{
     "connectivity_windowsphonegeneral":  [
                                              {
                                                  "dataType":  0,

Documentation/ObjectInfo/contentcaching_macdevicefeatures.json

@@ -1,4 +1,4 @@
-{
+{
     "contentcaching_macdevicefeatures":  {
                                              "isSettingDescription":  false,
                                              "showAsSectionHeader":  true,

Documentation/ObjectInfo/controlpanelandsettings_windows10general.json

@@ -1,4 +1,4 @@
-{
+{
     "controlpanelandsettings_windows10general":  {
                                                      "dataType":  0,
                                                      "category":  26,

Documentation/ObjectInfo/credentialguard_windows10endpointprotection.json

@@ -1,4 +1,4 @@
-{
+{
     "credentialguard_windows10endpointprotection":  {
                                                         "dataType":  16,
                                                         "category":  27,

Documentation/ObjectInfo/customcompliance_compliancewindows10.json

@@ -1,14 +1,31 @@
-{
+{
     "customcompliance_compliancewindows10":  {
-                                                 "dataType":  25,
+                                                 "dataType":  0,
                                                  "category":  151,
+                                                 "nameResourceKey":  "AdminConfiguredComplianceSettingName",
+                                                 "descriptionResourceKey":  "CustomComplianceToolTip",
                                                  "childSettings":  [
+                                                                       {
+                                                                           "dataType":  25,
+                                                                           "category":  151,
+                                                                           "childSettings":  [
 
+                                                                                             ],
+                                                                           "options":  [
+
+                                                                                       ],
+                                                                           "entityKey":  "customCompliance",
+                                                                           "booleanActions":  0,
+                                                                           "policyType":  35,
+                                                                           "enabled":  true
+                                                                       }
                                                                    ],
                                                  "options":  [
 
                                                              ],
-                                                 "booleanActions":  0,
+                                                 "entityKey":  "customComplianceRequired",
+                                                 "booleanActions":  1,
+                                                 "defaultValue":  false,
                                                  "policyType":  35,
                                                  "enabled":  true
                                              }

Documentation/ObjectInfo/customconfiguration_ioscustom.json

@@ -1,4 +1,4 @@
-{
+{
     "customconfiguration_ioscustom":  [
                                           {
                                               "dataType":  20,

Documentation/ObjectInfo/customconfiguration_maccustom.json

@@ -1,4 +1,4 @@
-{
+{
     "customconfiguration_maccustom":  [
                                           {
                                               "dataType":  20,

Documentation/ObjectInfo/customomasettings_androidcustom.json

@@ -1,4 +1,4 @@
-{
+{
     "customomasettings_androidcustom":  {
                                             "columns":  [
                                                             {

Documentation/ObjectInfo/customomasettings_androidforworkcustom.json

@@ -1,4 +1,4 @@
-{
+{
     "customomasettings_androidforworkcustom":  {
                                                    "columns":  [
                                                                    {

Documentation/ObjectInfo/customomasettings_windows10custom.json

@@ -1,4 +1,4 @@
-{
+{
     "customomasettings_windows10custom":  {
                                               "columns":  [
                                                               {

Documentation/ObjectInfo/customomasettings_windowsphonecustom.json

@@ -1,4 +1,4 @@
-{
+{
     "customomasettings_windowsphonecustom":  {
                                                  "columns":  [
                                                                  {

Documentation/ObjectInfo/custompreferences_maccustompreferences.json

@@ -1,4 +1,4 @@
-{
+{
     "custompreferences_maccustompreferences":  [
                                                    {
                                                        "dataType":  20,