Compare commits

..
4 Commits
Author SHA1 Message Date
Mikael Karlsson ab7b062946 3.9.2 2023-10-17 20:34:44 +11:00
Mikael Karlsson ea3af64316 3.9.1 2023-08-30 20:07:18 +10:00
Mikael Karlsson e6ec048df0 3.9.0 Module
Added version in the module file
2023-05-04 23:42:37 +10:00
Mikael Karlsson 0fd868ff70 3.9.0 2023-05-04 22:00:12 +10:00
64 changed files with 62272 additions and 39978 deletions
+42
View File
@@ -0,0 +1,42 @@
using System;
using System.Net;
using System.Net.Http;
using Microsoft.Identity.Client;
public class HttpFactoryWithProxy : IMsalHttpClientFactory
{
private static HttpClient _httpClient;
public HttpFactoryWithProxy(string proxyURI) : this(proxyURI, null, null)
{
}
public HttpFactoryWithProxy(string proxyURI, string proxyUserName = null, string proxyPassword = null)
{
if (_httpClient == null)
{
var proxy = new WebProxy
{
Address = new Uri(proxyURI),
BypassProxyOnLocal = false,
UseDefaultCredentials = false,
Credentials = new NetworkCredential(
userName: proxyUserName,
password: proxyPassword)
};
var httpClientHandler = new HttpClientHandler
{
Proxy = proxy,
};
_httpClient = new HttpClient(handler: httpClientHandler);
}
}
public HttpClient GetHttpClient()
{
return _httpClient;
}
}
File diff suppressed because it is too large Load Diff
+2 -2
View File
@@ -12,7 +12,7 @@
RootModule = 'CloudAPIPowerShellManagement.psm1' RootModule = 'CloudAPIPowerShellManagement.psm1'
# Version number of this module. # Version number of this module.
ModuleVersion = '3.8.1' ModuleVersion = '3.9.2'
# Supported PSEditions # Supported PSEditions
# CompatiblePSEditions = @() # CompatiblePSEditions = @()
@@ -27,7 +27,7 @@ Author = 'Mikael Karlsson'
# CompanyName = '' # CompanyName = ''
# Copyright statement for this module # Copyright statement for this module
Copyright = '(c) 2022 Mikael Karlsson. Software released under MIT License.' Copyright = '(c) 2023 Mikael Karlsson. Software released under MIT License.'
# Description of the functionality provided by this module # Description of the functionality provided by this module
Description = 'Management of Intune and Azure via Cloud APIs like Microsoft Graph API' Description = 'Management of Intune and Azure via Cloud APIs like Microsoft Graph API'
+12 -4
View File
@@ -93,9 +93,18 @@ function Initialize-CloudAPIManagement
[void] [System.Reflection.Assembly]::LoadWithPartialName("System.Windows.Forms") [void] [System.Reflection.Assembly]::LoadWithPartialName("System.Windows.Forms")
Add-Type -AssemblyName PresentationFramework Add-Type -AssemblyName PresentationFramework
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
$global:hideUI = ($Silent -eq $true) $global:hideUI = ($Silent -eq $true)
$global:SilentBatchFile = $SilentBatchFile $global:SilentBatchFile = $SilentBatchFile
if($tenantId)
{
$global:AzureAppId = $appId
$global:ClientSecret = $secret
$global:ClientCert = $certificate
}
if($global:hideUI -ne $true) if($global:hideUI -ne $true)
{ {
# Run with UI # Run with UI
@@ -126,12 +135,11 @@ function Initialize-CloudAPIManagement
Write-Error "Tenant Id is missing. Use -TenantId <Tenant-guid> on the command line to run silent batch jobs" Write-Error "Tenant Id is missing. Use -TenantId <Tenant-guid> on the command line to run silent batch jobs"
return return
} }
$global:TenantId = $tenantId
$global:AzureAppId = $appId
$global:ClientSecret = $secret
$global:ClientCert = $certificate
} }
$global:TenantId = $tenantId
if($ShowConsoleWindow -ne $true) if($ShowConsoleWindow -ne $true)
{ {
Hide-Console Hide-Console
+144 -7
View File
@@ -11,7 +11,7 @@ This module handles the WPF UI
function Get-ModuleVersion function Get-ModuleVersion
{ {
'3.8.1' '3.9.2'
} }
function Initialize-Window function Initialize-Window
@@ -58,6 +58,7 @@ function Start-CoreApp
$global:useDefaultFolderDialog = $false $global:useDefaultFolderDialog = $false
$global:WindowsAPICodePackLoaded = $false $global:WindowsAPICodePackLoaded = $false
$script:proxyURI = $null
$global:loadedModules = @() $global:loadedModules = @()
$global:viewObjects = @() $global:viewObjects = @()
@@ -235,6 +236,8 @@ function Write-Log
if(-not $global:logFileMaxSize) { [Int64]$global:logFileMaxSize = Get-SettingValue "LogFileSize" 1024; $global:logFileMaxSize = $global:logFileMaxSize * 1kb } if(-not $global:logFileMaxSize) { [Int64]$global:logFileMaxSize = Get-SettingValue "LogFileSize" 1024; $global:logFileMaxSize = $global:logFileMaxSize * 1kb }
if($null -eq $global:logOutputError) { $global:logOutputError = Get-SettingValue "LogOutputError" }
$fi = [IO.FileInfo]$global:logFile $fi = [IO.FileInfo]$global:logFile
if($fi.Length -gt $global:logFileMaxSize) if($fi.Length -gt $global:logFileMaxSize)
@@ -286,12 +289,19 @@ function Write-Log
if($type -eq 2) if($type -eq 2)
{ {
Write-Warning $Text Write-Warning $Text
$typeStr = "Error" $typeStr = "Warning"
} }
elseif($type -eq 3) elseif($type -eq 3)
{ {
$host.ui.WriteErrorLine($Text) if($global:logOutputError -ne $false)
$typeStr = "Warning" {
$host.ui.WriteErrorLine($Text)
}
else
{
Write-Warning $Text
}
$typeStr = "Error"
} }
else else
{ {
@@ -667,8 +677,15 @@ function Show-UpdatesDialog
{ {
if($mystream) { $mystream.Dispose() } if($mystream) { $mystream.Dispose() }
} }
$params = @{}
$proxyURI = Get-ProxyURI
if($proxyURI)
{
$params.Add("proxy", $proxyURI)
$params.Add("UseBasicParsing", $true)
}
$content = Invoke-RestMethod "https://api.github.com/repos/Micke-K/IntuneManagement/contents/ReleaseNotes.md" $content = Invoke-RestMethod "https://api.github.com/repos/Micke-K/IntuneManagement/contents/ReleaseNotes.md" @params
if($content) if($content)
{ {
$txt = [System.Text.Encoding]::UTF8.GetString(([System.Convert]::FromBase64String($content.content))) $txt = [System.Text.Encoding]::UTF8.GetString(([System.Convert]::FromBase64String($content.content)))
@@ -703,7 +720,15 @@ function Get-IsLatestVersion
$gitHubVer = $null $gitHubVer = $null
$content = Invoke-RestMethod "https://api.github.com/repos/Micke-K/IntuneManagement/releases/latest" $params = @{}
$proxyURI = Get-ProxyURI
if($proxyURI)
{
$params.Add("proxy", $proxyURI)
$params.Add("UseBasicParsing", $true)
}
$content = Invoke-RestMethod "https://api.github.com/repos/Micke-K/IntuneManagement/releases/latest" @params
if($content.Name) if($content.Name)
{ {
try try
@@ -715,7 +740,15 @@ function Get-IsLatestVersion
if($null -eq $gitHubVer) if($null -eq $gitHubVer)
{ {
$content = Invoke-RestMethod "https://api.github.com/repos/Micke-K/IntuneManagement/contents/CloudAPIPowerShellManagement.psd1" $params = @{}
$proxyURI = Get-ProxyURI
if($proxyURI)
{
$params.Add("proxy", $proxyURI)
$params.Add("UseBasicParsing", $true)
}
$content = Invoke-RestMethod "https://api.github.com/repos/Micke-K/IntuneManagement/contents/CloudAPIPowerShellManagement.psd1" @params
$gitHubText = [System.Text.Encoding]::UTF8.GetString(([System.Convert]::FromBase64String($content.content))) $gitHubText = [System.Text.Encoding]::UTF8.GetString(([System.Convert]::FromBase64String($content.content)))
$gitHubInfo = Get-ModuleDataTable $gitHubText $gitHubInfo = Get-ModuleDataTable $gitHubText
try try
@@ -1150,6 +1183,10 @@ function Expand-FileName
[Environment]::SetEnvironmentVariable("DateTime",$null,[System.EnvironmentVariableTarget]::Process) [Environment]::SetEnvironmentVariable("DateTime",$null,[System.EnvironmentVariableTarget]::Process)
[Environment]::SetEnvironmentVariable("Organization",$null,[System.EnvironmentVariableTarget]::Process) [Environment]::SetEnvironmentVariable("Organization",$null,[System.EnvironmentVariableTarget]::Process)
# Remove invalid path characters
$re = "[{0}]" -f [RegEx]::Escape(([IO.Path]::GetInvalidPathChars() -join ''))
$fileName = $fileName -replace $re
$fileName $fileName
} }
@@ -1168,6 +1205,8 @@ function Initialize-Settings
$global:Debug = Get-SettingValue "Debug" $global:Debug = Get-SettingValue "Debug"
$global:logFile = $null $global:logFile = $null
$global:logFileMaxSize = $null $global:logFileMaxSize = $null
$global:logOutputError = $null
$script:proxyURI = $null
if($Updated -eq $true) if($Updated -eq $true)
{ {
@@ -1943,6 +1982,14 @@ function Add-DefaultSettings
DefaultValue = 1024 DefaultValue = 1024
}) "General" }) "General"
Add-SettingsObject (New-Object PSObject -Property @{
Title = "Add errors to PowerShell output"
Key = "LogOutputError"
Type = "Boolean"
Description = "Write errors to the Error Output of the PS Host. If disabled, errors will be written as a Warning. Eg. disable this if automation should skip logging PowerShell errors."
DefaultValue = $true
}) "General"
Add-SettingsObject (New-Object PSObject -Property @{ Add-SettingsObject (New-Object PSObject -Property @{
Title = "Debug" Title = "Debug"
Key = "Debug" Key = "Debug"
@@ -1998,6 +2045,12 @@ function Add-DefaultSettings
Description = "Adds the organization name next to the login info on the menu bar" Description = "Adds the organization name next to the login info on the menu bar"
}) "General" }) "General"
Add-SettingsObject (New-Object PSObject -Property @{
Title = "Proxy URI"
Key = "ProxyURI"
Description = "Specify the URI for the proxy eg http://&lt;server&gt;:&lt;port&gt;"
}) "General"
} }
function Add-SettingsObject function Add-SettingsObject
@@ -2435,6 +2488,15 @@ function Get-MainWindow
Show-ModalForm $window.Title $script:welcomeForm -HideButtons Show-ModalForm $window.Title $script:welcomeForm -HideButtons
} }
else
{
###!!! Force login here
if($global:currentViewObject.ViewInfo.Authenticate)
{
# Skip for now...need additional code to skip previous login and force this based on setting.
#!!!& $global:currentViewObject.ViewInfo.Authenticate -Params (@{"Interactve"=$true})
}
}
}) })
foreach($view in $global:viewObjects) foreach($view in $global:viewObjects)
@@ -2694,6 +2756,81 @@ function Get-Base64ScriptContent
} }
} }
function Get-ProxyURI
{
if($null -eq $script:proxyURI)
{
$script:proxyUri = Get-SettingValue "ProxyURI"
}
if($null -eq $script:proxyURI)
{
$script:proxyUri = ""
}
return $script:proxyURI
}
function Start-DownloadFile
{
param($sourceURL, $targetFile)
Write-Log "Download file from $sourceURL"
if(-not $sourceURL)
{
return
}
if(-not $targetFile)
{
Write-Log "Target file is missing"
return
}
[void][System.Reflection.Assembly]::LoadWithPartialName("System.Web.Extensions")
$wc = New-Object System.Net.WebClient
$wc.Encoding = [System.Text.Encoding]::UTF8
$proxyURI = Get-ProxyURI
if($proxyURI)
{
$wc.Proxy = $proxyURI
}
try
{
Write-Status "Download file: `n$sourceURL"
$wc.DownloadFile($sourceURL, $targetFile)
Write-Log "File downloaded to $targetFile"
}
catch
{
Write-LogError "Failed to download file" $_.Exception
}
finally
{
$wc.Dispose()
}
}
function Get-ASCIIBytes
{
param($String)
$bytes = [System.Text.Encoding]::ASCII.GetBytes($String)
if ($bytes[0] -eq 0x2b -and $bytes[1] -eq 0x2f -and $bytes[2] -eq 0x76)
{ [Text.Encoding]::UTF7.GetBytes($String) }
elseif ($bytes[0] -eq 0xff -and $bytes[1] -eq 0xfe)
{ [Text.Encoding]::Unicode.GetBytes($String) }
elseif ($bytes[0] -eq 0xfe -and $bytes[1] -eq 0xff)
{ [Text.Encoding]::BigEndianUnicode.GetBytes($String) }
elseif ($bytes[0] -eq 0x00 -and $bytes[1] -eq 0x00 -and $bytes[2] -eq 0xfe -and $bytes[3] -eq 0xff)
{ [Text.Encoding]::UTF32.GetBytes($String) }
elseif ($bytes[0] -eq 0xef -and $bytes[1] -eq 0xbb -and $bytes[2] -eq 0xbf)
{ [Text.Encoding]::UTF8.GetBytes($String) }
$bytes
}
New-Alias -Name ?? -value Invoke-Coalesce New-Alias -Name ?? -value Invoke-Coalesce
New-Alias -Name ?: -value Invoke-IfTrue New-Alias -Name ?: -value Invoke-IfTrue
Export-ModuleMember -alias * -function * Export-ModuleMember -alias * -function *
+34 -6
View File
@@ -996,10 +996,24 @@
"category": "Win32Requirements.selectorLabel" "category": "Win32Requirements.selectorLabel"
}, },
{ {
"Columns": [
{
"metadata": {
"entityKey": "property",
"nameResourceKey": "ApplicabilityRules.GridLabel.property"
}
},
{
"metadata": {
"entityKey": "value",
"nameResourceKey": "ApplicabilityRules.GridLabel.value"
}
}
],
"nameResourceKey": "Win32Requirements.AdditionalRequirements.label", "nameResourceKey": "Win32Requirements.AdditionalRequirements.label",
"descriptionResourceKey": "", "descriptionResourceKey": "",
"entityKey": "requirementRulesSummary", "entityKey": "requirementRulesTranslated",
"dataType": 20, "dataType": 21,
"booleanActions": 0, "booleanActions": 0,
"category": "Win32Requirements.selectorLabel" "category": "Win32Requirements.selectorLabel"
}, },
@@ -1012,10 +1026,24 @@
"category": "DetectionRules.selectorLabel" "category": "DetectionRules.selectorLabel"
}, },
{ {
"Columns": [
{
"metadata": {
"entityKey": "property",
"nameResourceKey": "ApplicabilityRules.GridLabel.property"
}
},
{
"metadata": {
"entityKey": "value",
"nameResourceKey": "ApplicabilityRules.GridLabel.value"
}
}
],
"nameResourceKey": "DetectionRules.selectorLabel", "nameResourceKey": "DetectionRules.selectorLabel",
"descriptionResourceKey": "", "descriptionResourceKey": "",
"entityKey": "detectionRulesSummary", "entityKey": "detectionRulesTranslated",
"dataType": 20, "dataType": 21,
"booleanActions": 0, "booleanActions": 0,
"category": "DetectionRules.selectorLabel", "category": "DetectionRules.selectorLabel",
"Condition": { "Condition": {
@@ -1071,12 +1099,12 @@
"category": "SettingDetails.dependencyCategory" "category": "SettingDetails.dependencyCategory"
}, },
{ {
"nameResourceKey": "supersedenceCategory", "nameResourceKey": "AppRelationshipStatus.Tabs.supersedence",
"descriptionResourceKey": "", "descriptionResourceKey": "",
"entityKey": "supersededApps", "entityKey": "supersededApps",
"dataType": 20, "dataType": 20,
"booleanActions": 0, "booleanActions": 0,
"category": "SettingDetails.supersedenceCategory" "category": "AppRelationshipStatus.Tabs.supersedence"
} }
] ]
} }
@@ -0,0 +1,69 @@
[
{
"nameResourceKey": "TableHeaders.policyType",
"descriptionResourceKey": "",
"entityKey": "WindowsDriverUpdateProfile.Subtitle.automatic",
"dataType": 200,
"booleanActions": 0,
"category": 1000,
"Condition": {
"Expressions": [
{
"property": "approvalType",
"value": "automatic"
}
]
}
},
{
"nameResourceKey": "TableHeaders.policyType",
"descriptionResourceKey": "",
"entityKey": "WindowsDriverUpdateProfile.Subtitle.manual",
"dataType": 200,
"booleanActions": 0,
"category": 1000,
"Condition": {
"Expressions": [
{
"property": "approvalType",
"value": "manual"
}
]
}
},
{
"nameResourceKey": "WindowsDriverUpdateProfile.Details.ApprovalMethod.label",
"descriptionResourceKey": "",
"entityKey": "approvalType",
"dataType": 16,
"booleanActions": 0,
"category": "TableHeaders.settings",
"options": [
{
"nameResourceKey": "WindowsDriverUpdateProfile.ApprovalMethod.automatic",
"value": "automatic"
},
{
"nameResourceKey": "WindowsDriverUpdateProfile.ApprovalMethod.manual",
"value": "manual"
}
]
},
{
"nameResourceKey": "WindowsDriverUpdateProfile.Details.DeploymentDeferralInDays.label",
"descriptionResourceKey": "",
"entityKey": "deploymentDeferralInDays",
"formatStringKey": "WindowsDriverUpdateProfile.Details.DeploymentDeferralInDays.value",
"dataType": 108,
"booleanActions": 0,
"category": "TableHeaders.settings",
"Condition": {
"Expressions": [
{
"property": "approvalType",
"value": "automatic"
}
]
}
}
]
@@ -113,6 +113,164 @@
"defaultValue": false, "defaultValue": false,
"policyType": 2, "policyType": 2,
"enabled": true "enabled": true
},
{
"columns": [
{
"metadata": {
"dataType": 20,
"category": 2,
"nameResourceKey": "appNameName",
"descriptionResourceKey": "Empty",
"childSettings": [
],
"options": [
],
"entityKey": "name",
"booleanActions": 0,
"policyType": 2,
"enabled": false
}
},
{
"metadata": {
"dataType": 20,
"category": 2,
"nameResourceKey": "packageName",
"descriptionResourceKey": "Empty",
"childSettings": [
],
"options": [
],
"entityKey": "appId",
"booleanActions": 0,
"policyType": 2,
"enabled": false
}
},
{
"metadata": {
"dataType": 20,
"category": 2,
"nameResourceKey": "appUrlName",
"descriptionResourceKey": "Empty",
"childSettings": [
],
"options": [
],
"entityKey": "appStoreUrl",
"booleanActions": 0,
"policyType": 2,
"enabled": false
}
},
{
"metadata": {
"dataType": 20,
"category": 2,
"nameResourceKey": "appPublisherName",
"descriptionResourceKey": "Empty",
"childSettings": [
],
"options": [
],
"entityKey": "publisher",
"booleanActions": 0,
"policyType": 2,
"enabled": false
}
}
],
"dataType": 21,
"category": 2,
"nameResourceKey": "certificateInstallTitle",
"descriptionResourceKey": "certificateInstallDescription",
"childSettings": [
],
"options": [
],
"entityKey": "certInstallApps",
"booleanActions": 0,
"policyType": 2,
"enabled": false
},
{
"complexOptions": [
{
"dataType": 11,
"category": 2,
"nameResourceKey": "selectSecurityApp",
"descriptionResourceKey": "empty",
"childSettings": [
],
"options": [
],
"entityKey": "securityLogAppId",
"booleanActions": 0,
"policyType": 2,
"enabled": true
}
],
"dataType": 5,
"category": 2,
"nameResourceKey": "securityLogsTitle",
"emptyValueResourceKey": "selectSecurityApp",
"childSettings": [
],
"options": [
],
"entityKey": "securityLogApp",
"booleanActions": 0,
"policyType": 2,
"enabled": false
},
{
"complexOptions": [
{
"dataType": 11,
"category": 2,
"nameResourceKey": "selectNetworkApp",
"descriptionResourceKey": "empty",
"childSettings": [
],
"options": [
],
"entityKey": "networkLogAppId",
"booleanActions": 0,
"policyType": 2,
"enabled": true
}
],
"dataType": 5,
"category": 2,
"nameResourceKey": "networkLogsTitle",
"emptyValueResourceKey": "selectNetworkApp",
"childSettings": [
],
"options": [
],
"entityKey": "networkLogApp",
"booleanActions": 0,
"policyType": 2,
"enabled": false
} }
], ],
"options": [ "options": [
@@ -44,7 +44,7 @@
], ],
"booleanActions": 0, "booleanActions": 0,
"policyType": 108, "policyType": 108,
"enabled": false "enabled": true
}, },
{ {
"dataType": 16, "dataType": 16,
@@ -154,8 +154,8 @@
{ {
"dataType": 16, "dataType": 16,
"category": 39, "category": 39,
"nameResourceKey": "safetyNetAttestationOptionsName", "nameResourceKey": "playIntegrityVerdictOptionsName",
"descriptionResourceKey": "safetyNetAttestationOptionsDescription", "descriptionResourceKey": "playIntegrityVerdictOptionsDescription",
"childSettings": [ "childSettings": [
], ],
@@ -166,17 +166,17 @@
"enabled": true "enabled": true
}, },
{ {
"nameResourceKey": "androidSafetyNetbasicIntegrity", "nameResourceKey": "androidPlayIntegrityVerdictBasicIntegrity",
"value": "basicIntegrity", "value": "basicIntegrity",
"enabled": true "enabled": true
}, },
{ {
"nameResourceKey": "androidSafetyNetBasicIntegrityAndCertified", "nameResourceKey": "androidPlayIntegrityVerdictBasicAndDeviceIntegrity",
"value": "basicIntegrityAndCertified", "value": "basicIntegrityAndCertified",
"enabled": true "enabled": true
} }
], ],
"entityKey": "androidSafetyNetAttestationOptions", "entityKey": "androidPlayIntegrityVerdictOptions",
"booleanActions": 0, "booleanActions": 0,
"defaultValue": "notConfigured", "defaultValue": "notConfigured",
"unconfiguredValue": "notConfigured", "unconfiguredValue": "notConfigured",
@@ -52,8 +52,8 @@
{ {
"dataType": 16, "dataType": 16,
"category": 39, "category": 39,
"nameResourceKey": "safetyNetAttestationOptionsName", "nameResourceKey": "playIntegrityVerdictOptionsName",
"descriptionResourceKey": "safetyNetAttestationOptionsDescription", "descriptionResourceKey": "playIntegrityVerdictOptionsDescription",
"childSettings": [ "childSettings": [
], ],
@@ -64,17 +64,17 @@
"enabled": true "enabled": true
}, },
{ {
"nameResourceKey": "androidSafetyNetbasicIntegrity", "nameResourceKey": "androidPlayIntegrityVerdictBasicIntegrity",
"value": "basicIntegrity", "value": "basicIntegrity",
"enabled": true "enabled": true
}, },
{ {
"nameResourceKey": "androidSafetyNetBasicIntegrityAndCertified", "nameResourceKey": "androidPlayIntegrityVerdictBasicAndDeviceIntegrity",
"value": "basicIntegrityAndCertified", "value": "basicIntegrityAndCertified",
"enabled": true "enabled": true
} }
], ],
"entityKey": "androidSafetyNetAttestationOptions", "entityKey": "androidPlayIntegrityVerdictOptions",
"booleanActions": 0, "booleanActions": 0,
"defaultValue": "notConfigured", "defaultValue": "notConfigured",
"unconfiguredValue": "notConfigured", "unconfiguredValue": "notConfigured",
@@ -103,8 +103,8 @@
{ {
"dataType": 16, "dataType": 16,
"category": 39, "category": 39,
"nameResourceKey": "safetyNetAttestationOptionsName", "nameResourceKey": "playIntegrityVerdictOptionsName",
"descriptionResourceKey": "safetyNetAttestationOptionsDescription", "descriptionResourceKey": "playIntegrityVerdictOptionsDescription",
"childSettings": [ "childSettings": [
], ],
@@ -115,25 +115,25 @@
"enabled": true "enabled": true
}, },
{ {
"nameResourceKey": "androidSafetyNetbasicIntegrity", "nameResourceKey": "androidPlayIntegrityVerdictBasicIntegrity",
"value": "basicIntegrity", "value": "basicIntegrity",
"children": [ "children": [
{ {
"dataType": 16, "dataType": 16,
"category": 39, "category": 39,
"nameResourceKey": "requiredAndroidSafetyNetEvaluationTypeName", "nameResourceKey": "requiredAndroidPlayIntegrityVerdictEvaluationTypeName",
"descriptionResourceKey": "requiredAndroidSafetyNetEvaluationTypeDescription", "descriptionResourceKey": "requiredAndroidPlayIntegrityVerdictEvaluationTypeDescription",
"childSettings": [ "childSettings": [
], ],
"options": [ "options": [
{ {
"nameResourceKey": "requiredAndroidSafetyNetEvaluationTypeBasic", "nameResourceKey": "requiredAndroidPlayIntegrityVerdictEvaluationTypeBasic",
"value": "basic", "value": "basic",
"enabled": true "enabled": true
}, },
{ {
"nameResourceKey": "requiredAndroidSafetyNetEvaluationTypeHardwareBacked", "nameResourceKey": "requiredAndroidPlayIntegrityVerdictEvaluationTypeHardwareBacked",
"value": "hardwareBacked", "value": "hardwareBacked",
"enabled": true "enabled": true
} }
@@ -149,25 +149,25 @@
"enabled": true "enabled": true
}, },
{ {
"nameResourceKey": "androidSafetyNetBasicIntegrityAndCertified", "nameResourceKey": "androidPlayIntegrityVerdictBasicAndDeviceIntegrity",
"value": "basicIntegrityAndCertified", "value": "basicIntegrityAndCertified",
"children": [ "children": [
{ {
"dataType": 16, "dataType": 16,
"category": 39, "category": 39,
"nameResourceKey": "requiredAndroidSafetyNetEvaluationTypeName", "nameResourceKey": "requiredAndroidPlayIntegrityVerdictEvaluationTypeName",
"descriptionResourceKey": "requiredAndroidSafetyNetEvaluationTypeDescription", "descriptionResourceKey": "requiredAndroidPlayIntegrityVerdictEvaluationTypeDescription",
"childSettings": [ "childSettings": [
], ],
"options": [ "options": [
{ {
"nameResourceKey": "requiredAndroidSafetyNetEvaluationTypeBasic", "nameResourceKey": "requiredAndroidPlayIntegrityVerdictEvaluationTypeBasic",
"value": "basic", "value": "basic",
"enabled": true "enabled": true
}, },
{ {
"nameResourceKey": "requiredAndroidSafetyNetEvaluationTypeHardwareBacked", "nameResourceKey": "requiredAndroidPlayIntegrityVerdictEvaluationTypeHardwareBacked",
"value": "hardwareBacked", "value": "hardwareBacked",
"enabled": true "enabled": true
} }
@@ -183,7 +183,7 @@
"enabled": true "enabled": true
} }
], ],
"entityKey": "androidSafetyNetAttestationOptions", "entityKey": "androidPlayIntegrityVerdictOptions",
"booleanActions": 0, "booleanActions": 0,
"defaultValue": "notConfigured", "defaultValue": "notConfigured",
"unconfiguredValue": "notConfigured", "unconfiguredValue": "notConfigured",
@@ -1,68 +1,178 @@
{ {
"devicehealth_compliancewindows10": { "devicehealth_compliancewindows10": [
"isSettingDescription": false, {
"showAsSectionHeader": false, "isSettingDescription": false,
"dataType": 8, "showAsSectionHeader": false,
"category": 39, "dataType": 8,
"nameResourceKey": "complianceWindowsDeviceHealthAttestationHeader", "category": 39,
"childSettings": [ "nameResourceKey": "complianceWindowsDeviceHealthAttestationHeader",
{ "childSettings": [
"dataType": 0,
"category": 39,
"nameResourceKey": "bitLockerEnabledName",
"descriptionResourceKey": "bitLockerEnabledDescription",
"childSettings": [
], ],
"options": [ "options": [
], ],
"entityKey": "bitLockerEnabled", "booleanActions": 0,
"booleanActions": 1, "policyType": 35,
"defaultValue": false, "enabled": true
"policyType": 35, },
"enabled": true {
}, "isSettingDescription": false,
{ "showAsSectionHeader": false,
"dataType": 0, "dataType": 8,
"category": 39, "category": 39,
"nameResourceKey": "secureBootEnabledName", "nameResourceKey": "complianceWindows10DeviceHealthAttestationHeader",
"descriptionResourceKey": "secureBootEnabledDescription", "childSettings": [
"childSettings": [ {
"dataType": 0,
"category": 39,
"nameResourceKey": "bitLockerEnabledName",
"childSettings": [
], ],
"options": [ "options": [
], ],
"entityKey": "secureBootEnabled", "entityKey": "bitLockerEnabled",
"booleanActions": 1, "booleanActions": 1,
"defaultValue": false, "defaultValue": false,
"policyType": 35, "policyType": 35,
"enabled": true "enabled": true
}, },
{ {
"dataType": 0, "dataType": 0,
"category": 39, "category": 39,
"nameResourceKey": "codeIntegrityEnabledName", "nameResourceKey": "secureBootEnabledName",
"descriptionResourceKey": "codeIntegrityEnabledDescription", "childSettings": [
"childSettings": [
], ],
"options": [ "options": [
], ],
"entityKey": "codeIntegrityEnabled", "entityKey": "secureBootEnabled",
"booleanActions": 1, "booleanActions": 1,
"defaultValue": false, "defaultValue": false,
"policyType": 35, "policyType": 35,
"enabled": true "enabled": true
} },
], {
"options": [ "dataType": 0,
"category": 39,
"nameResourceKey": "codeIntegrityEnabledName",
"childSettings": [
], ],
"booleanActions": 0, "options": [
"policyType": 35,
"enabled": true ],
} "entityKey": "codeIntegrityEnabled",
"booleanActions": 1,
"defaultValue": false,
"policyType": 35,
"enabled": true
}
],
"options": [
],
"booleanActions": 0,
"policyType": 35,
"enabled": true
},
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 39,
"nameResourceKey": "complianceWindows11DeviceHealthAttestationHeader",
"childSettings": [
{
"dataType": 0,
"category": 39,
"nameResourceKey": "earlyLaunchAntiMalwareDriverEnabledName",
"childSettings": [
],
"options": [
],
"entityKey": "earlyLaunchAntiMalwareDriverEnabled",
"booleanActions": 1,
"defaultValue": false,
"policyType": 35,
"enabled": false
},
{
"dataType": 0,
"category": 39,
"nameResourceKey": "firmwareProtectionEnabledName",
"childSettings": [
],
"options": [
],
"entityKey": "firmwareProtectionEnabled",
"booleanActions": 1,
"defaultValue": false,
"policyType": 35,
"enabled": false
},
{
"dataType": 0,
"category": 39,
"nameResourceKey": "hvciEnabledName",
"childSettings": [
],
"options": [
],
"entityKey": "memoryIntegrityEnabled",
"booleanActions": 1,
"defaultValue": false,
"policyType": 35,
"enabled": false
},
{
"dataType": 0,
"category": 39,
"nameResourceKey": "memoryAccessProtectionEnabledName",
"childSettings": [
],
"options": [
],
"entityKey": "kernelDmaProtectionEnabled",
"booleanActions": 1,
"defaultValue": false,
"policyType": 35,
"enabled": false
},
{
"dataType": 0,
"category": 39,
"nameResourceKey": "virtualizationBasedSecurityEnabledName",
"childSettings": [
],
"options": [
],
"entityKey": "virtualizationBasedSecurityEnabled",
"booleanActions": 1,
"defaultValue": false,
"policyType": 35,
"enabled": false
}
],
"options": [
],
"booleanActions": 0,
"policyType": 35,
"enabled": false
}
]
} }
@@ -1078,6 +1078,40 @@
"policyType": 2, "policyType": 2,
"enabled": true "enabled": true
}, },
{
"isSettingDescription": false,
"showAsSectionHeader": true,
"dataType": 8,
"category": 44,
"nameResourceKey": "fullyManagedAndCorporateOwnedWorkProfileAndroidEnrollmentTypesHeaderName",
"descriptionResourceKey": "fullyManagedAndCorporateOwnedWorkProfileAndroidEnrollmentTypesHeaderDescription",
"childSettings": [
{
"dataType": 0,
"category": 44,
"nameResourceKey": "androidDeviceOwnerLocateDeviceName",
"descriptionResourceKey": "androidDeviceOwnerLocateDeviceLostModeEnabledDescription",
"childSettings": [
],
"options": [
],
"entityKey": "locateDeviceLostModeEnabled",
"booleanActions": 0,
"defaultValue": false,
"unconfiguredValue": false,
"policyType": 2,
"enabled": false
}
],
"options": [
],
"booleanActions": 0,
"policyType": 2,
"enabled": true
},
{ {
"isSettingDescription": false, "isSettingDescription": false,
"showAsSectionHeader": true, "showAsSectionHeader": true,
@@ -1200,6 +1234,24 @@
"defaultValue": false, "defaultValue": false,
"policyType": 2, "policyType": 2,
"enabled": false "enabled": false
},
{
"dataType": 0,
"category": 44,
"nameResourceKey": "androidDeviceOwnerLocateDeviceName",
"descriptionResourceKey": "androidDeviceOwnerLocateDeviceUserlessDisabledDescription",
"childSettings": [
],
"options": [
],
"entityKey": "locateDeviceUserlessDisabled",
"booleanActions": 3,
"defaultValue": false,
"unconfiguredValue": false,
"policyType": 2,
"enabled": false
} }
], ],
"options": [ "options": [
@@ -617,6 +617,23 @@
"defaultValue": false, "defaultValue": false,
"policyType": 61, "policyType": 61,
"enabled": true "enabled": true
},
{
"dataType": 0,
"category": 44,
"nameResourceKey": "allowActivationLockWhenSupervisedName",
"descriptionResourceKey": "allowActivationLockWhenSupervisedDescription",
"childSettings": [
],
"options": [
],
"entityKey": "activationLockWhenSupervisedAllowed",
"booleanActions": 9,
"defaultValue": false,
"policyType": 61,
"enabled": true
} }
], ],
"options": [ "options": [
@@ -33,20 +33,47 @@
"enabled": true "enabled": true
}, },
{ {
"dataType": 14, "dataType": 10,
"category": 90, "category": 90,
"nameResourceKey": "minimumPasswordLengthName", "nameResourceKey": "androidTwelveDeprecationInfoBox",
"descriptionResourceKey": "minimumPasswordLengthDescription",
"emptyValueResourceKey": "minimumPasswordLengthEmptyValueKeyFourToSixteen",
"childSettings": [ "childSettings": [
], ],
"options": [ "options": [
], ],
"entityKey": "passwordMinimumLength",
"booleanActions": 0, "booleanActions": 0,
"defaultValue": 4, "policyType": 13,
"enabled": true
},
{
"isSettingDescription": false,
"showAsSectionHeader": true,
"dataType": 8,
"category": 90,
"nameResourceKey": "allAndroidVersionsPasswordHeader",
"childSettings": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 90,
"nameResourceKey": "allAndroidVersionsPasswordHeaderDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 13,
"enabled": true
}
],
"options": [
],
"booleanActions": 0,
"policyType": 13, "policyType": 13,
"enabled": true "enabled": true
}, },
@@ -153,64 +180,6 @@
"policyType": 13, "policyType": 13,
"enabled": true "enabled": true
}, },
{
"dataType": 16,
"category": 90,
"nameResourceKey": "requiredPasswordTypeName",
"descriptionResourceKey": "requiredPasswordTypeDescription",
"emptyValueResourceKey": "passwordExpirationInDaysEmptyValueKey",
"childSettings": [
],
"options": [
{
"nameResourceKey": "deviceDefault",
"value": "deviceDefault",
"enabled": true
},
{
"nameResourceKey": "lowSecurityBiometricOption",
"value": "lowSecurityBiometric",
"enabled": true
},
{
"nameResourceKey": "required",
"value": "required",
"enabled": true
},
{
"nameResourceKey": "atLeastNumericOption",
"value": "atLeastNumeric",
"enabled": true
},
{
"nameResourceKey": "numericComplex",
"value": "numericComplex",
"enabled": true
},
{
"nameResourceKey": "atLeastAlphabeticOption",
"value": "atLeastAlphabetic",
"enabled": true
},
{
"nameResourceKey": "atLeastAlphanumericOption",
"value": "atLeastAlphanumeric",
"enabled": true
},
{
"nameResourceKey": "atLeastAlphanumericWithSymbolsOption",
"value": "alphanumericWithSymbols",
"enabled": true
}
],
"entityKey": "passwordRequiredType",
"booleanActions": 0,
"defaultValue": "atLeastNumeric",
"unconfiguredValue": "atLeastNumeric",
"policyType": 13,
"enabled": true
},
{ {
"dataType": 14, "dataType": 14,
"category": 90, "category": 90,
@@ -296,6 +265,181 @@
"defaultValue": false, "defaultValue": false,
"policyType": 13, "policyType": 13,
"enabled": true "enabled": true
},
{
"isSettingDescription": false,
"showAsSectionHeader": true,
"dataType": 8,
"category": 90,
"nameResourceKey": "androidTwelveAndAbovePasswordHeader",
"childSettings": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 90,
"nameResourceKey": "androidTwelveAndAbovePasswordHeaderDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 13,
"enabled": true
}
],
"options": [
],
"booleanActions": 0,
"policyType": 13,
"enabled": true
},
{
"dataType": 16,
"category": 90,
"nameResourceKey": "requiredPasswordComplexityName",
"descriptionResourceKey": "requiredPasswordComplexityDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "none",
"value": "none",
"enabled": true
},
{
"nameResourceKey": "low",
"value": "low",
"enabled": true
},
{
"nameResourceKey": "medium",
"value": "medium",
"enabled": true
},
{
"nameResourceKey": "high",
"value": "high",
"enabled": true
}
],
"entityKey": "requiredPasswordComplexity",
"booleanActions": 0,
"defaultValue": "none",
"unconfiguredValue": "none",
"policyType": 13,
"enabled": true
},
{
"isSettingDescription": false,
"showAsSectionHeader": true,
"dataType": 8,
"category": 90,
"nameResourceKey": "androidElevenAndBelowPasswordHeader",
"childSettings": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 90,
"nameResourceKey": "androidElevenAndBelowPasswordHeaderDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 13,
"enabled": true
}
],
"options": [
],
"booleanActions": 0,
"policyType": 13,
"enabled": true
},
{
"dataType": 16,
"category": 90,
"nameResourceKey": "requiredPasswordTypeName",
"descriptionResourceKey": "requiredPasswordTypeDescription",
"emptyValueResourceKey": "passwordExpirationInDaysEmptyValueKey",
"childSettings": [
],
"options": [
{
"nameResourceKey": "deviceDefault",
"value": "deviceDefault",
"enabled": true
},
{
"nameResourceKey": "lowSecurityBiometricOption",
"value": "lowSecurityBiometric",
"enabled": true
},
{
"nameResourceKey": "required",
"value": "required",
"enabled": true
},
{
"nameResourceKey": "atLeastNumericOption",
"value": "atLeastNumeric",
"enabled": true
},
{
"nameResourceKey": "numericComplex",
"value": "numericComplex",
"enabled": true
},
{
"nameResourceKey": "atLeastAlphabeticOption",
"value": "atLeastAlphabetic",
"enabled": true
},
{
"nameResourceKey": "atLeastAlphanumericOption",
"value": "atLeastAlphanumeric",
"enabled": true
},
{
"nameResourceKey": "atLeastAlphanumericWithSymbolsOption",
"value": "alphanumericWithSymbols",
"enabled": true
}
],
"entityKey": "passwordRequiredType",
"booleanActions": 0,
"defaultValue": "atLeastNumeric",
"unconfiguredValue": "atLeastNumeric",
"policyType": 13,
"enabled": true
},
{
"dataType": 14,
"category": 90,
"nameResourceKey": "minimumPasswordLengthName",
"descriptionResourceKey": "minimumPasswordLengthDescription",
"emptyValueResourceKey": "minimumPasswordLengthEmptyValueKeyFourToSixteen",
"childSettings": [
],
"options": [
],
"entityKey": "passwordMinimumLength",
"booleanActions": 0,
"defaultValue": 4,
"policyType": 13,
"enabled": true
} }
] ]
} }
@@ -448,6 +448,12 @@
"displayText": "2048", "displayText": "2048",
"value": "size2048", "value": "size2048",
"enabled": true "enabled": true
},
{
"nameResourceKey": "",
"displayText": "4096",
"value": "size4096",
"enabled": false
} }
], ],
"entityKey": "keySize", "entityKey": "keySize",
@@ -418,6 +418,12 @@
"displayText": "2048", "displayText": "2048",
"value": "size2048", "value": "size2048",
"enabled": true "enabled": true
},
{
"nameResourceKey": "",
"displayText": "4096",
"value": "size4096",
"enabled": false
} }
], ],
"entityKey": "keySize", "entityKey": "keySize",
@@ -195,6 +195,12 @@
"displayText": "2048", "displayText": "2048",
"value": "size2048", "value": "size2048",
"enabled": true "enabled": true
},
{
"nameResourceKey": "",
"displayText": "4096",
"value": "size4096",
"enabled": false
} }
], ],
"entityKey": "keySize", "entityKey": "keySize",
@@ -418,6 +418,12 @@
"displayText": "2048", "displayText": "2048",
"value": "size2048", "value": "size2048",
"enabled": true "enabled": true
},
{
"nameResourceKey": "",
"displayText": "4096",
"value": "size4096",
"enabled": false
} }
], ],
"entityKey": "keySize", "entityKey": "keySize",
@@ -457,6 +457,12 @@
"displayText": "2048", "displayText": "2048",
"value": "size2048", "value": "size2048",
"enabled": true "enabled": true
},
{
"nameResourceKey": "",
"displayText": "4096",
"value": "size4096",
"enabled": false
} }
], ],
"entityKey": "keySize", "entityKey": "keySize",
@@ -457,6 +457,12 @@
"displayText": "2048", "displayText": "2048",
"value": "size2048", "value": "size2048",
"enabled": true "enabled": true
},
{
"nameResourceKey": "",
"displayText": "4096",
"value": "size4096",
"enabled": false
} }
], ],
"entityKey": "keySize", "entityKey": "keySize",
@@ -234,6 +234,12 @@
"displayText": "2048", "displayText": "2048",
"value": "size2048", "value": "size2048",
"enabled": true "enabled": true
},
{
"nameResourceKey": "",
"displayText": "4096",
"value": "size4096",
"enabled": false
} }
], ],
"entityKey": "keySize", "entityKey": "keySize",
@@ -14,7 +14,7 @@
], ],
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"isSettingDescription": false, "isSettingDescription": false,
@@ -30,7 +30,7 @@
], ],
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"isSettingDescription": false, "isSettingDescription": false,
@@ -46,7 +46,7 @@
], ],
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"isSettingDescription": false, "isSettingDescription": false,
@@ -62,7 +62,7 @@
], ],
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"dataType": 16, "dataType": 16,
@@ -87,7 +87,7 @@
"booleanActions": 0, "booleanActions": 0,
"defaultValue": "notConfigured", "defaultValue": "notConfigured",
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"dataType": 16, "dataType": 16,
@@ -112,7 +112,7 @@
"booleanActions": 0, "booleanActions": 0,
"defaultValue": "notConfigured", "defaultValue": "notConfigured",
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"dataType": 16, "dataType": 16,
@@ -137,7 +137,7 @@
"booleanActions": 0, "booleanActions": 0,
"defaultValue": "notConfigured", "defaultValue": "notConfigured",
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"dataType": 16, "dataType": 16,
@@ -162,7 +162,7 @@
"booleanActions": 0, "booleanActions": 0,
"defaultValue": "notConfigured", "defaultValue": "notConfigured",
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"isSettingDescription": false, "isSettingDescription": false,
@@ -178,7 +178,7 @@
], ],
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"isSettingDescription": false, "isSettingDescription": false,
@@ -194,7 +194,7 @@
], ],
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"dataType": 16, "dataType": 16,
@@ -226,7 +226,7 @@
], ],
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"dataType": 16, "dataType": 16,
@@ -432,7 +432,7 @@
"booleanActions": 0, "booleanActions": 0,
"defaultValue": 0, "defaultValue": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"columns": [ "columns": [
@@ -484,7 +484,7 @@
"entityKey": "startDay", "entityKey": "startDay",
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
} }
}, },
{ {
@@ -620,7 +620,7 @@
"entityKey": "startTime", "entityKey": "startTime",
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
} }
}, },
{ {
@@ -671,7 +671,7 @@
"entityKey": "endDay", "entityKey": "endDay",
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
} }
}, },
{ {
@@ -808,7 +808,7 @@
"entityKey": "endTime", "entityKey": "endTime",
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
} }
} }
], ],
@@ -825,7 +825,7 @@
"entityKey": "customUpdateTimeWindows", "entityKey": "customUpdateTimeWindows",
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
} }
], ],
"enabled": true "enabled": true
@@ -846,7 +846,7 @@
], ],
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"dataType": 16, "dataType": 16,
@@ -1052,7 +1052,7 @@
"booleanActions": 0, "booleanActions": 0,
"defaultValue": 0, "defaultValue": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
}, },
{ {
"columns": [ "columns": [
@@ -1104,7 +1104,7 @@
"entityKey": "startDay", "entityKey": "startDay",
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
} }
}, },
{ {
@@ -1240,7 +1240,7 @@
"entityKey": "startTime", "entityKey": "startTime",
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
} }
}, },
{ {
@@ -1291,7 +1291,7 @@
"entityKey": "endDay", "entityKey": "endDay",
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
} }
}, },
{ {
@@ -1428,7 +1428,7 @@
"entityKey": "endTime", "entityKey": "endTime",
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
} }
} }
], ],
@@ -1445,7 +1445,7 @@
"entityKey": "customUpdateTimeWindows", "entityKey": "customUpdateTimeWindows",
"booleanActions": 0, "booleanActions": 0,
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
} }
], ],
"enabled": true "enabled": true
@@ -1456,7 +1456,7 @@
"defaultValue": "alwaysUpdate", "defaultValue": "alwaysUpdate",
"unconfiguredValue": "alwaysUpdate", "unconfiguredValue": "alwaysUpdate",
"policyType": 69, "policyType": 69,
"enabled": false "enabled": true
} }
] ]
} }
@@ -1,451 +1,5 @@
{ {
"systemsecurity_complianceandroidforwork": [ "systemsecurity_complianceandroidforwork": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 113,
"nameResourceKey": "androidPasswordHeader",
"childSettings": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 113,
"nameResourceKey": "learnMore",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 0,
"category": 113,
"nameResourceKey": "compliancePasswordRequirementName",
"descriptionResourceKey": "compliancePasswordRequirementDescription",
"childSettings": [
{
"dataType": 16,
"category": 113,
"nameResourceKey": "requiredPasswordTypeName",
"descriptionResourceKey": "complianceRequiredPasswordTypeDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "selectTypeOption",
"enabled": true
},
{
"nameResourceKey": "deviceDefault",
"value": "deviceDefault",
"enabled": true
},
{
"nameResourceKey": "lowSecurityBiometricOption",
"value": "lowSecurityBiometric",
"children": [
{
"dataType": 14,
"category": 113,
"nameResourceKey": "passwordExpirationName",
"descriptionResourceKey": "passwordExpirationDescription",
"emptyValueResourceKey": "passwordExpirationInDaysEmptyValueOneYearKey",
"childSettings": [
],
"options": [
],
"entityKey": "passwordExpirationDays",
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "atLeastNumericOption",
"value": "numeric",
"children": [
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceMinimumPasswordLengthName",
"descriptionResourceKey": "passwordMinimumLengthDescription",
"emptyValueResourceKey": "minimumPasswordLengthEmptyValueKeyFourToSixteen",
"childSettings": [
],
"options": [
],
"entityKey": "passwordMinimumLength",
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 14,
"category": 113,
"nameResourceKey": "passwordExpirationName",
"descriptionResourceKey": "passwordExpirationDescription",
"emptyValueResourceKey": "passwordExpirationInDaysEmptyValueOneYearKey",
"childSettings": [
],
"options": [
],
"entityKey": "passwordExpirationDays",
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceNumberOfPreviousPasswordsToBlockName",
"descriptionResourceKey": "complianceNumberOfPreviousPasswordsToBlockDescription",
"emptyValueResourceKey": "numberOfPreviousPasswordsToBlockEmptyValueKey",
"childSettings": [
],
"options": [
],
"entityKey": "passwordPreviousPasswordBlockCount",
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "numericComplex",
"value": "numericComplex",
"children": [
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceMinimumPasswordLengthName",
"descriptionResourceKey": "passwordMinimumLengthDescription",
"emptyValueResourceKey": "minimumPasswordLengthEmptyValueKeyFourToSixteen",
"childSettings": [
],
"options": [
],
"entityKey": "passwordMinimumLength",
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 14,
"category": 113,
"nameResourceKey": "passwordExpirationName",
"descriptionResourceKey": "passwordExpirationDescription",
"emptyValueResourceKey": "passwordExpirationInDaysEmptyValueOneYearKey",
"childSettings": [
],
"options": [
],
"entityKey": "passwordExpirationDays",
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceNumberOfPreviousPasswordsToBlockName",
"descriptionResourceKey": "complianceNumberOfPreviousPasswordsToBlockDescription",
"emptyValueResourceKey": "numberOfPreviousPasswordsToBlockEmptyValueKey",
"childSettings": [
],
"options": [
],
"entityKey": "passwordPreviousPasswordBlockCount",
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "atLeastAlphabeticOption",
"value": "alphabetic",
"children": [
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceMinimumPasswordLengthName",
"descriptionResourceKey": "passwordMinimumLengthDescription",
"emptyValueResourceKey": "minimumPasswordLengthEmptyValueKeyFourToSixteen",
"childSettings": [
],
"options": [
],
"entityKey": "passwordMinimumLength",
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 14,
"category": 113,
"nameResourceKey": "passwordExpirationName",
"descriptionResourceKey": "passwordExpirationDescription",
"emptyValueResourceKey": "passwordExpirationInDaysEmptyValueOneYearKey",
"childSettings": [
],
"options": [
],
"entityKey": "passwordExpirationDays",
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceNumberOfPreviousPasswordsToBlockName",
"descriptionResourceKey": "complianceNumberOfPreviousPasswordsToBlockDescription",
"emptyValueResourceKey": "numberOfPreviousPasswordsToBlockEmptyValueKey",
"childSettings": [
],
"options": [
],
"entityKey": "passwordPreviousPasswordBlockCount",
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "atLeastAlphanumericOption",
"value": "alphanumeric",
"children": [
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceMinimumPasswordLengthName",
"descriptionResourceKey": "passwordMinimumLengthDescription",
"emptyValueResourceKey": "minimumPasswordLengthEmptyValueKeyFourToSixteen",
"childSettings": [
],
"options": [
],
"entityKey": "passwordMinimumLength",
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 14,
"category": 113,
"nameResourceKey": "passwordExpirationName",
"descriptionResourceKey": "passwordExpirationDescription",
"emptyValueResourceKey": "passwordExpirationInDaysEmptyValueOneYearKey",
"childSettings": [
],
"options": [
],
"entityKey": "passwordExpirationDays",
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceNumberOfPreviousPasswordsToBlockName",
"descriptionResourceKey": "complianceNumberOfPreviousPasswordsToBlockDescription",
"emptyValueResourceKey": "numberOfPreviousPasswordsToBlockEmptyValueKey",
"childSettings": [
],
"options": [
],
"entityKey": "passwordPreviousPasswordBlockCount",
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "atLeastAlphanumericWithSymbolsOption",
"value": "alphanumericWithSymbols",
"children": [
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceMinimumPasswordLengthName",
"descriptionResourceKey": "passwordMinimumLengthDescription",
"emptyValueResourceKey": "minimumPasswordLengthEmptyValueKeyFourToSixteen",
"childSettings": [
],
"options": [
],
"entityKey": "passwordMinimumLength",
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 14,
"category": 113,
"nameResourceKey": "passwordExpirationName",
"descriptionResourceKey": "passwordExpirationDescription",
"emptyValueResourceKey": "passwordExpirationInDaysEmptyValueOneYearKey",
"childSettings": [
],
"options": [
],
"entityKey": "passwordExpirationDays",
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceNumberOfPreviousPasswordsToBlockName",
"descriptionResourceKey": "complianceNumberOfPreviousPasswordsToBlockDescription",
"emptyValueResourceKey": "numberOfPreviousPasswordsToBlockEmptyValueKey",
"childSettings": [
],
"options": [
],
"entityKey": "passwordPreviousPasswordBlockCount",
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"enabled": true
}
],
"entityKey": "passwordRequiredType",
"booleanActions": 0,
"defaultValue": "deviceDefault",
"unconfiguredValue": "deviceDefault",
"policyType": 30,
"enabled": true
}
],
"options": [
],
"entityKey": "passwordRequired",
"booleanActions": 1,
"defaultValue": false,
"policyType": 30,
"enabled": true
},
{
"dataType": 16,
"category": 113,
"nameResourceKey": "complianceMinutesOfInactivityBeforePasswordRequiredName",
"descriptionResourceKey": "complianceMinutesOfInactivityBeforePasswordRequiredDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "notConfigured",
"enabled": true
},
{
"nameResourceKey": "oneMinuteOption",
"value": 1,
"enabled": true
},
{
"nameResourceKey": "fiveMinutesOption",
"value": 5,
"enabled": true
},
{
"nameResourceKey": "tenMinutesOption",
"value": 10,
"enabled": true
},
{
"nameResourceKey": "fifteenMinutesOption",
"value": 15,
"enabled": true
},
{
"nameResourceKey": "thirtyMinutesOption",
"value": 30,
"enabled": true
},
{
"nameResourceKey": "oneHourOption",
"value": 60,
"enabled": true
},
{
"nameResourceKey": "fourHoursOption",
"value": 240,
"enabled": true
},
{
"nameResourceKey": "eightHoursOption",
"value": 480,
"enabled": true
}
],
"entityKey": "passwordMinutesOfInactivityBeforeLock",
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"options": [
],
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{ {
"isSettingDescription": false, "isSettingDescription": false,
"showAsSectionHeader": false, "showAsSectionHeader": false,
@@ -576,6 +130,410 @@
"booleanActions": 0, "booleanActions": 0,
"policyType": 30, "policyType": 30,
"enabled": true "enabled": true
},
{
"dataType": 0,
"category": 113,
"nameResourceKey": "compliancePasswordRequirementName",
"descriptionResourceKey": "compliancePasswordRequirementDescription",
"childSettings": [
{
"dataType": 10,
"category": 113,
"nameResourceKey": "androidTwelveDeprecationInfoBox",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"isSettingDescription": false,
"showAsSectionHeader": true,
"dataType": 8,
"category": 113,
"nameResourceKey": "allAndroidVersionsPasswordHeader",
"childSettings": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 113,
"nameResourceKey": "allAndroidVersionsPasswordHeaderDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"options": [
],
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 14,
"category": 113,
"nameResourceKey": "passwordExpirationName",
"descriptionResourceKey": "passwordExpirationDescription",
"emptyValueResourceKey": "passwordExpirationInDaysEmptyValueOneYearKey",
"childSettings": [
],
"options": [
],
"entityKey": "passwordExpirationDays",
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceNumberOfPreviousPasswordsToBlockName",
"descriptionResourceKey": "complianceNumberOfPreviousPasswordsToBlockDescription",
"emptyValueResourceKey": "numberOfPreviousPasswordsToBlockEmptyValueKey",
"childSettings": [
],
"options": [
],
"entityKey": "passwordPreviousPasswordBlockCount",
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 16,
"category": 113,
"nameResourceKey": "complianceMinutesOfInactivityBeforePasswordRequiredName",
"descriptionResourceKey": "complianceMinutesOfInactivityBeforePasswordRequiredDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "notConfigured",
"enabled": true
},
{
"nameResourceKey": "oneMinuteOption",
"value": 1,
"enabled": true
},
{
"nameResourceKey": "fiveMinutesOption",
"value": 5,
"enabled": true
},
{
"nameResourceKey": "tenMinutesOption",
"value": 10,
"enabled": true
},
{
"nameResourceKey": "fifteenMinutesOption",
"value": 15,
"enabled": true
},
{
"nameResourceKey": "thirtyMinutesOption",
"value": 30,
"enabled": true
},
{
"nameResourceKey": "oneHourOption",
"value": 60,
"enabled": true
},
{
"nameResourceKey": "fourHoursOption",
"value": 240,
"enabled": true
},
{
"nameResourceKey": "eightHoursOption",
"value": 480,
"enabled": true
}
],
"entityKey": "passwordMinutesOfInactivityBeforeLock",
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"isSettingDescription": false,
"showAsSectionHeader": true,
"dataType": 8,
"category": 113,
"nameResourceKey": "androidTwelveAndAbovePasswordHeader",
"childSettings": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 113,
"nameResourceKey": "androidTwelveAndAbovePasswordHeaderDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"options": [
],
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 16,
"category": 113,
"nameResourceKey": "requiredPasswordComplexityName",
"descriptionResourceKey": "requiredPasswordComplexityDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "none",
"value": "none",
"enabled": true
},
{
"nameResourceKey": "low",
"value": "low",
"enabled": true
},
{
"nameResourceKey": "medium",
"value": "medium",
"enabled": true
},
{
"nameResourceKey": "high",
"value": "high",
"enabled": true
}
],
"entityKey": "requiredPasswordComplexity",
"booleanActions": 0,
"defaultValue": "none",
"unconfiguredValue": "none",
"policyType": 30,
"enabled": true
},
{
"isSettingDescription": false,
"showAsSectionHeader": true,
"dataType": 8,
"category": 113,
"nameResourceKey": "androidElevenAndBelowPasswordHeader",
"childSettings": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 113,
"nameResourceKey": "androidElevenAndBelowPasswordHeaderDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"options": [
],
"booleanActions": 0,
"policyType": 30,
"enabled": true
},
{
"dataType": 16,
"category": 113,
"nameResourceKey": "requiredPasswordTypeName",
"descriptionResourceKey": "complianceRequiredPasswordTypeDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "selectTypeOption",
"enabled": true
},
{
"nameResourceKey": "deviceDefault",
"value": "deviceDefault",
"enabled": true
},
{
"nameResourceKey": "lowSecurityBiometricOption",
"value": "lowSecurityBiometric",
"enabled": true
},
{
"nameResourceKey": "atLeastNumericOption",
"value": "numeric",
"children": [
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceMinimumPasswordLengthName",
"descriptionResourceKey": "passwordMinimumLengthDescription",
"emptyValueResourceKey": "minimumPasswordLengthEmptyValueKeyFourToSixteen",
"childSettings": [
],
"options": [
],
"entityKey": "passwordMinimumLength",
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "numericComplex",
"value": "numericComplex",
"children": [
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceMinimumPasswordLengthName",
"descriptionResourceKey": "passwordMinimumLengthDescription",
"emptyValueResourceKey": "minimumPasswordLengthEmptyValueKeyFourToSixteen",
"childSettings": [
],
"options": [
],
"entityKey": "passwordMinimumLength",
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "atLeastAlphabeticOption",
"value": "alphabetic",
"children": [
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceMinimumPasswordLengthName",
"descriptionResourceKey": "passwordMinimumLengthDescription",
"emptyValueResourceKey": "minimumPasswordLengthEmptyValueKeyFourToSixteen",
"childSettings": [
],
"options": [
],
"entityKey": "passwordMinimumLength",
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "atLeastAlphanumericOption",
"value": "alphanumeric",
"children": [
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceMinimumPasswordLengthName",
"descriptionResourceKey": "passwordMinimumLengthDescription",
"emptyValueResourceKey": "minimumPasswordLengthEmptyValueKeyFourToSixteen",
"childSettings": [
],
"options": [
],
"entityKey": "passwordMinimumLength",
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "atLeastAlphanumericWithSymbolsOption",
"value": "alphanumericWithSymbols",
"children": [
{
"dataType": 14,
"category": 113,
"nameResourceKey": "complianceMinimumPasswordLengthName",
"descriptionResourceKey": "passwordMinimumLengthDescription",
"emptyValueResourceKey": "minimumPasswordLengthEmptyValueKeyFourToSixteen",
"childSettings": [
],
"options": [
],
"entityKey": "passwordMinimumLength",
"booleanActions": 0,
"policyType": 30,
"enabled": true
}
],
"enabled": true
}
],
"entityKey": "passwordRequiredType",
"booleanActions": 0,
"defaultValue": "deviceDefault",
"unconfiguredValue": "deviceDefault",
"policyType": 30,
"enabled": true
}
],
"options": [
],
"entityKey": "passwordRequired",
"booleanActions": 1,
"defaultValue": false,
"policyType": 30,
"enabled": true
} }
] ]
} }
@@ -1707,303 +1707,6 @@
} }
], ],
"enabled": true "enabled": true
},
{
"nameResourceKey": "microsoftTunnelOption",
"value": "microsoftTunnel",
"children": [
{
"complexOptions": [
{
"dataType": 20,
"category": 129,
"nameResourceKey": "vPNPolicyConnectionName",
"descriptionResourceKey": "vPNPolicyConnectionDescription",
"emptyValueResourceKey": "vPNConnectionExample",
"childSettings": [
],
"options": [
],
"entityKey": "connectionName",
"booleanActions": 0,
"policyType": 8,
"enabled": true
},
{
"complexOptions": [
{
"dataType": 26,
"category": 129,
"nameResourceKey": "changeMicrosoftTunnelSite",
"descriptionResourceKey": "microsoftTunnelSite",
"emptyValueResourceKey": "selectMicrosoftTunnelSite",
"childSettings": [
],
"options": [
],
"entityKey": "microsoftTunnelSiteId",
"booleanActions": 0,
"policyType": 8,
"enabled": true
}
],
"dataType": 5,
"category": 129,
"nameResourceKey": "microsoftTunnelSite",
"descriptionResourceKey": "microsoftTunnelSiteDescription",
"emptyValueResourceKey": "selectMicrosoftTunnelSite",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 8,
"enabled": true
}
],
"dataType": 5,
"category": 129,
"nameResourceKey": "vpn",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 8,
"enabled": true
},
{
"complexOptions": [
{
"isSettingDescription": true,
"showAsSectionHeader": false,
"dataType": 8,
"category": 129,
"nameResourceKey": "vPNAppsName",
"descriptionResourceKey": "vPNAppsDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 8,
"enabled": true
},
{
"columns": [
{
"metadata": {
"dataType": 20,
"category": 129,
"nameResourceKey": "appId",
"descriptionResourceKey": "Empty",
"childSettings": [
],
"options": [
],
"entityKey": "appId",
"booleanActions": 0,
"policyType": 8,
"enabled": true
}
},
{
"metadata": {
"dataType": 20,
"category": 129,
"nameResourceKey": "appNameName",
"descriptionResourceKey": "Empty",
"childSettings": [
],
"options": [
],
"entityKey": "name",
"booleanActions": 0,
"policyType": 8,
"enabled": true
}
}
],
"dataType": 21,
"category": 129,
"nameResourceKey": "Empty",
"descriptionResourceKey": "Empty",
"childSettings": [
],
"options": [
],
"entityKey": "targetedMobileApps",
"booleanActions": 0,
"policyType": 8,
"enabled": true
}
],
"dataType": 5,
"category": 129,
"nameResourceKey": "vpnPerApp",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 8,
"enabled": true
},
{
"complexOptions": [
{
"dataType": 0,
"category": 129,
"nameResourceKey": "androidPersonalWorkProfileAlwaysOnVpnEnabledName",
"descriptionResourceKey": "androidEnterpriseWorkProfileAlwaysOnVpnEnabledDescription",
"childSettings": [
],
"options": [
],
"entityKey": "alwaysOn",
"booleanActions": 2,
"defaultValue": false,
"policyType": 8,
"enabled": true
}
],
"dataType": 5,
"category": 129,
"nameResourceKey": "vpnAlwaysOn",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 8,
"enabled": true
},
{
"complexOptions": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 129,
"nameResourceKey": "vPNPolicyUseProxyServerName",
"descriptionResourceKey": "vPNPolicyUseProxyServerDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 8,
"enabled": true
},
{
"complexOptions": [
{
"dataType": 20,
"category": 129,
"nameResourceKey": "vPNPolicyAutomaticConfigurationScriptName",
"descriptionResourceKey": "vPNPolicyAutomaticConfigurationScriptDescription",
"emptyValueResourceKey": "vPNScriptExample",
"childSettings": [
],
"options": [
],
"entityKey": "automaticConfigurationScriptUrl",
"booleanActions": 0,
"policyType": 8,
"enabled": true
},
{
"dataType": 20,
"category": 129,
"nameResourceKey": "vPNPolicyAddressName",
"descriptionResourceKey": "vPNPolicyAddressDescription",
"emptyValueResourceKey": "vPNAddressExample",
"childSettings": [
],
"options": [
],
"entityKey": "address",
"booleanActions": 0,
"policyType": 8,
"enabled": true
},
{
"dataType": 14,
"category": 129,
"nameResourceKey": "vPNPolicyPortNumberName",
"descriptionResourceKey": "empty",
"emptyValueResourceKey": "proxyPortExample",
"childSettings": [
],
"options": [
],
"entityKey": "port",
"booleanActions": 0,
"policyType": 8,
"enabled": true
}
],
"dataType": 6,
"category": 129,
"nameResourceKey": "vPNPolicyUseProxyServerName",
"descriptionResourceKey": "vPNPolicyUseProxyServerDescription",
"childSettings": [
],
"options": [
],
"entityKey": "proxyServer",
"booleanActions": 0,
"policyType": 8,
"enabled": true
}
],
"dataType": 5,
"category": 129,
"nameResourceKey": "vpnProxy",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 8,
"enabled": true
}
],
"enabled": false
} }
], ],
"entityKey": "connectionType", "entityKey": "connectionType",
@@ -1683,303 +1683,6 @@
} }
], ],
"enabled": true "enabled": true
},
{
"nameResourceKey": "microsoftTunnelOption",
"value": "microsoftTunnel",
"children": [
{
"complexOptions": [
{
"dataType": 20,
"category": 129,
"nameResourceKey": "vPNPolicyConnectionName",
"descriptionResourceKey": "vPNPolicyConnectionDescription",
"emptyValueResourceKey": "vPNConnectionExample",
"childSettings": [
],
"options": [
],
"entityKey": "connectionName",
"booleanActions": 0,
"policyType": 12,
"enabled": true
},
{
"complexOptions": [
{
"dataType": 26,
"category": 129,
"nameResourceKey": "changeMicrosoftTunnelSite",
"descriptionResourceKey": "microsoftTunnelSite",
"emptyValueResourceKey": "selectMicrosoftTunnelSite",
"childSettings": [
],
"options": [
],
"entityKey": "microsoftTunnelSiteId",
"booleanActions": 0,
"policyType": 12,
"enabled": true
}
],
"dataType": 5,
"category": 129,
"nameResourceKey": "microsoftTunnelSite",
"descriptionResourceKey": "microsoftTunnelSiteDescription",
"emptyValueResourceKey": "selectMicrosoftTunnelSite",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 12,
"enabled": true
}
],
"dataType": 5,
"category": 129,
"nameResourceKey": "vpn",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 12,
"enabled": true
},
{
"complexOptions": [
{
"isSettingDescription": true,
"showAsSectionHeader": false,
"dataType": 8,
"category": 129,
"nameResourceKey": "vPNAppsName",
"descriptionResourceKey": "vPNAppsDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 12,
"enabled": true
},
{
"columns": [
{
"metadata": {
"dataType": 20,
"category": 129,
"nameResourceKey": "appId",
"descriptionResourceKey": "Empty",
"childSettings": [
],
"options": [
],
"entityKey": "appId",
"booleanActions": 0,
"policyType": 12,
"enabled": true
}
},
{
"metadata": {
"dataType": 20,
"category": 129,
"nameResourceKey": "appNameName",
"descriptionResourceKey": "Empty",
"childSettings": [
],
"options": [
],
"entityKey": "name",
"booleanActions": 0,
"policyType": 12,
"enabled": true
}
}
],
"dataType": 21,
"category": 129,
"nameResourceKey": "Empty",
"descriptionResourceKey": "Empty",
"childSettings": [
],
"options": [
],
"entityKey": "targetedMobileApps",
"booleanActions": 0,
"policyType": 12,
"enabled": true
}
],
"dataType": 5,
"category": 129,
"nameResourceKey": "vpnPerApp",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 12,
"enabled": true
},
{
"complexOptions": [
{
"dataType": 0,
"category": 129,
"nameResourceKey": "androidPersonalWorkProfileAlwaysOnVpnEnabledName",
"descriptionResourceKey": "androidEnterpriseWorkProfileAlwaysOnVpnEnabledDescription",
"childSettings": [
],
"options": [
],
"entityKey": "alwaysOn",
"booleanActions": 2,
"defaultValue": false,
"policyType": 12,
"enabled": true
}
],
"dataType": 5,
"category": 129,
"nameResourceKey": "vpnAlwaysOn",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 12,
"enabled": true
},
{
"complexOptions": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 129,
"nameResourceKey": "vPNPolicyUseProxyServerName",
"descriptionResourceKey": "vPNPolicyUseProxyServerDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 12,
"enabled": true
},
{
"complexOptions": [
{
"dataType": 20,
"category": 129,
"nameResourceKey": "vPNPolicyAutomaticConfigurationScriptName",
"descriptionResourceKey": "vPNPolicyAutomaticConfigurationScriptDescription",
"emptyValueResourceKey": "vPNScriptExample",
"childSettings": [
],
"options": [
],
"entityKey": "automaticConfigurationScriptUrl",
"booleanActions": 0,
"policyType": 12,
"enabled": true
},
{
"dataType": 20,
"category": 129,
"nameResourceKey": "vPNPolicyAddressName",
"descriptionResourceKey": "vPNPolicyAddressDescription",
"emptyValueResourceKey": "vPNAddressExample",
"childSettings": [
],
"options": [
],
"entityKey": "address",
"booleanActions": 0,
"policyType": 12,
"enabled": true
},
{
"dataType": 14,
"category": 129,
"nameResourceKey": "vPNPolicyPortNumberName",
"descriptionResourceKey": "empty",
"emptyValueResourceKey": "proxyPortExample",
"childSettings": [
],
"options": [
],
"entityKey": "port",
"booleanActions": 0,
"policyType": 12,
"enabled": true
}
],
"dataType": 6,
"category": 129,
"nameResourceKey": "vPNPolicyUseProxyServerName",
"descriptionResourceKey": "vPNPolicyUseProxyServerDescription",
"childSettings": [
],
"options": [
],
"entityKey": "proxyServer",
"booleanActions": 0,
"policyType": 12,
"enabled": true
}
],
"dataType": 5,
"category": 129,
"nameResourceKey": "vpnProxy",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 12,
"enabled": true
}
],
"enabled": false
} }
], ],
"entityKey": "connectionType", "entityKey": "connectionType",
@@ -559,6 +559,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -2276,6 +2304,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -3993,6 +4049,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -5710,6 +5794,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -7915,6 +8027,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -9632,6 +9772,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -11349,6 +11517,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -13051,6 +13247,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -15141,6 +15365,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -16843,6 +17095,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -18545,6 +18825,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -20289,6 +20597,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -22006,6 +22342,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -23723,6 +24087,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -25440,6 +25832,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -27645,6 +28065,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -29362,6 +29810,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -31079,6 +31555,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -32781,6 +33285,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -34871,6 +35403,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -36573,6 +37133,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -38275,6 +38863,34 @@
"enabled": true "enabled": true
} }
}, },
{
"metadata": {
"dataType": 16,
"category": 129,
"nameResourceKey": "trafficRuleDirectionName",
"descriptionResourceKey": "trafficRuleDirectionDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "outboundOption",
"value": "outbound",
"enabled": true
},
{
"nameResourceKey": "inboundOption",
"value": "inbound",
"enabled": true
}
],
"entityKey": "vpnTrafficDirection",
"booleanActions": 0,
"defaultValue": "outbound",
"policyType": 89,
"enabled": true
}
},
{ {
"metadata": { "metadata": {
"dataType": 14, "dataType": 14,
@@ -50,7 +50,7 @@
"dataType": 20, "dataType": 20,
"category": 140, "category": 140,
"nameResourceKey": "webContentFilterTypePermittedUrlsColumnName", "nameResourceKey": "webContentFilterTypePermittedUrlsColumnName",
"emptyValueResourceKey": "WebContentFilterWhiteListedUrlExample", "emptyValueResourceKey": "WebContentFilterPermittedUrlExample",
"childSettings": [ "childSettings": [
], ],
@@ -86,7 +86,7 @@
"dataType": 20, "dataType": 20,
"category": 140, "category": 140,
"nameResourceKey": "webContentFilterTypeBlockedUrlsColumnName", "nameResourceKey": "webContentFilterTypeBlockedUrlsColumnName",
"emptyValueResourceKey": "WebContentFilterBlackListedUrlExample", "emptyValueResourceKey": "WebContentFilterBlockedUrlExample",
"childSettings": [ "childSettings": [
], ],
@@ -119,7 +119,7 @@
"enabled": true "enabled": true
}, },
{ {
"nameResourceKey": "webContentFilterTypeWhitelistedUrlsOption", "nameResourceKey": "webContentFilterTypePermittedUrlsOption",
"value": "#microsoft.graph.iosWebContentFilterSpecificWebsitesAccess", "value": "#microsoft.graph.iosWebContentFilterSpecificWebsitesAccess",
"children": [ "children": [
{ {
@@ -127,7 +127,7 @@
"showAsSectionHeader": false, "showAsSectionHeader": false,
"dataType": 8, "dataType": 8,
"category": 140, "category": 140,
"nameResourceKey": "webContentFilterTypeWhitelistedUrlsHeaderName", "nameResourceKey": "webContentFilterTypePermittedUrlsHeaderName",
"descriptionResourceKey": "empty", "descriptionResourceKey": "empty",
"childSettings": [ "childSettings": [
@@ -144,7 +144,7 @@
"showAsSectionHeader": false, "showAsSectionHeader": false,
"dataType": 8, "dataType": 8,
"category": 140, "category": 140,
"nameResourceKey": "webContentFilterTypeWhitelistedUrlsLinkTextName", "nameResourceKey": "webContentFilterTypePermittedUrlsLinkTextName",
"descriptionResourceKey": "empty", "descriptionResourceKey": "empty",
"childSettings": [ "childSettings": [
@@ -162,7 +162,7 @@
"metadata": { "metadata": {
"dataType": 20, "dataType": 20,
"category": 140, "category": 140,
"nameResourceKey": "webContentFilterTypeWhitelistedUrlsColumnUrlName", "nameResourceKey": "webContentFilterTypePermittedUrlsColumnUrlName",
"emptyValueResourceKey": "kioskModeAppStoreExample", "emptyValueResourceKey": "kioskModeAppStoreExample",
"childSettings": [ "childSettings": [
@@ -180,7 +180,7 @@
"metadata": { "metadata": {
"dataType": 20, "dataType": 20,
"category": 140, "category": 140,
"nameResourceKey": "webContentFilterTypeWhitelistedUrlsColumnBookmarkPathName", "nameResourceKey": "webContentFilterTypePermittedUrlsColumnBookmarkPathName",
"emptyValueResourceKey": "WebContentFilterBookmarkPathExample", "emptyValueResourceKey": "WebContentFilterBookmarkPathExample",
"childSettings": [ "childSettings": [
@@ -198,7 +198,7 @@
"metadata": { "metadata": {
"dataType": 20, "dataType": 20,
"category": 140, "category": 140,
"nameResourceKey": "webContentFilterTypeWhitelistedUrlsColumnTitleName", "nameResourceKey": "webContentFilterTypePermittedUrlsColumnTitleName",
"emptyValueResourceKey": "WebContentFilterBookmarkTitleExample", "emptyValueResourceKey": "WebContentFilterBookmarkTitleExample",
"childSettings": [ "childSettings": [
@@ -215,8 +215,8 @@
], ],
"dataType": 21, "dataType": 21,
"category": 140, "category": 140,
"nameResourceKey": "webContentFilterTypeWhitelistedUrlsTableName", "nameResourceKey": "webContentFilterTypeSpecificUrlsTableName",
"descriptionResourceKey": "webContentFilterTypeWhitelistedUrlsTableDescription", "descriptionResourceKey": "webContentFilterTypeSpecificUrlsTableDescription",
"childSettings": [ "childSettings": [
], ],
@@ -125,6 +125,748 @@
], ],
"enabled": true "enabled": true
}, },
{
"nameResourceKey": "eAPTLSName",
"value": "eapTls",
"children": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 149,
"nameResourceKey": "trust",
"descriptionResourceKey": "trustDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"columns": [
{
"metadata": {
"dataType": 20,
"category": 149,
"nameResourceKey": "empty",
"descriptionResourceKey": "empty",
"emptyValueResourceKey": "trustedServerCertificateNameExample",
"childSettings": [
],
"options": [
],
"entityKey": "trustedServerCertificateNamesName",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
}
],
"dataType": 21,
"category": 149,
"nameResourceKey": "trustedServerCertificateNamesName",
"descriptionResourceKey": "trustedServerCertificateNamesDescription",
"childSettings": [
],
"options": [
],
"entityKey": "trustedServerCertificateNames",
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"complexOptions": [
{
"dataType": 4,
"category": 149,
"nameResourceKey": "selectCertificateProfiles",
"descriptionResourceKey": "selectRootCertificatesForServerValidationName",
"childSettings": [
],
"options": [
],
"entityKey": "rootCertificatesForServerValidation",
"booleanActions": 0,
"unconfiguredValue": "notConfigured",
"policyType": 68,
"enabled": true
}
],
"dataType": 5,
"category": 149,
"nameResourceKey": "selectRootCertificatesForServerValidationName",
"descriptionResourceKey": "empty",
"emptyValueResourceKey": "selectCertificates",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 149,
"nameResourceKey": "authentication",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"value": "certificate",
"dataType": 9,
"category": 149,
"childSettings": [
],
"options": [
],
"entityKey": "authenticationMethod",
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"complexOptions": [
{
"dataType": 4,
"category": 149,
"nameResourceKey": "selectCertificateProfile",
"descriptionResourceKey": "empty",
"childSettings": [
],
"options": [
],
"entityKey": "identityCertificateForClientAuthentication",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
],
"dataType": 5,
"category": 149,
"nameResourceKey": "certificatesOption",
"descriptionResourceKey": "empty",
"emptyValueResourceKey": "selectCertificate",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"dataType": 20,
"category": 149,
"nameResourceKey": "enableIdentityPrivacyName",
"descriptionResourceKey": "enableIdentityPrivacyDescription",
"emptyValueResourceKey": "identityPrivacyExample",
"childSettings": [
],
"options": [
],
"entityKey": "enableOuterIdentityPrivacy",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "eAPTTLSName",
"value": "eapTtls",
"children": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 149,
"nameResourceKey": "trust",
"descriptionResourceKey": "trustDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"columns": [
{
"metadata": {
"dataType": 20,
"category": 149,
"nameResourceKey": "empty",
"descriptionResourceKey": "empty",
"emptyValueResourceKey": "trustedServerCertificateNameExample",
"childSettings": [
],
"options": [
],
"entityKey": "trustedServerCertificateNamesName",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
}
],
"dataType": 21,
"category": 149,
"nameResourceKey": "trustedServerCertificateNamesName",
"descriptionResourceKey": "trustedServerCertificateNamesDescription",
"childSettings": [
],
"options": [
],
"entityKey": "trustedServerCertificateNames",
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"complexOptions": [
{
"dataType": 4,
"category": 149,
"nameResourceKey": "selectCertificateProfiles",
"descriptionResourceKey": "selectRootCertificatesForServerValidationName",
"childSettings": [
],
"options": [
],
"entityKey": "rootCertificatesForServerValidation",
"booleanActions": 0,
"unconfiguredValue": "notConfigured",
"policyType": 68,
"enabled": true
}
],
"dataType": 5,
"category": 149,
"nameResourceKey": "selectRootCertificatesForServerValidationName",
"descriptionResourceKey": "empty",
"emptyValueResourceKey": "selectCertificates",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 149,
"nameResourceKey": "authentication",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"dataType": 16,
"category": 149,
"nameResourceKey": "authenticationMethodName",
"descriptionResourceKey": "authenticationMethodTTLSDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "notConfigured",
"enabled": true
},
{
"nameResourceKey": "usernameAndPasswordOption",
"value": "usernameAndPassword",
"children": [
{
"dataType": 16,
"category": 149,
"nameResourceKey": "nonEapMethodName",
"descriptionResourceKey": "nonEapMethodDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "selectNonEapMethod",
"enabled": true
},
{
"nameResourceKey": "pAPName",
"value": "unencryptedPassword",
"enabled": true
},
{
"nameResourceKey": "cHAPName",
"value": "challengeHandshakeAuthenticationProtocol",
"enabled": true
},
{
"nameResourceKey": "mSCHAPName",
"value": "microsoftChap",
"enabled": true
},
{
"nameResourceKey": "cHAPTWOName",
"value": "microsoftChapVersionTwo",
"enabled": true
}
],
"entityKey": "nonEapAuthenticationMethodForEapTtls",
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"dataType": 20,
"category": 149,
"nameResourceKey": "enableIdentityPrivacyName",
"descriptionResourceKey": "enableIdentityPrivacyDescription",
"emptyValueResourceKey": "identityPrivacyExample",
"childSettings": [
],
"options": [
],
"entityKey": "enableOuterIdentityPrivacy",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "certificatesOption",
"value": "certificate",
"children": [
{
"complexOptions": [
{
"dataType": 4,
"category": 149,
"nameResourceKey": "selectCertificateProfile",
"descriptionResourceKey": "empty",
"childSettings": [
],
"options": [
],
"entityKey": "identityCertificateForClientAuthentication",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
],
"dataType": 5,
"category": 149,
"nameResourceKey": "certificatesOption",
"descriptionResourceKey": "empty",
"emptyValueResourceKey": "selectCertificate",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"dataType": 20,
"category": 149,
"nameResourceKey": "enableIdentityPrivacyName",
"descriptionResourceKey": "enableIdentityPrivacyDescription",
"emptyValueResourceKey": "identityPrivacyExample",
"childSettings": [
],
"options": [
],
"entityKey": "enableOuterIdentityPrivacy",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
],
"enabled": true
}
],
"entityKey": "authenticationMethod",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "lEAPName",
"value": "leap",
"children": [
{
"value": "certificate",
"dataType": 9,
"category": 149,
"childSettings": [
],
"options": [
],
"entityKey": "authenticationMethod",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "pEAPName",
"value": "peap",
"children": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 149,
"nameResourceKey": "trust",
"descriptionResourceKey": "trustDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"columns": [
{
"metadata": {
"dataType": 20,
"category": 149,
"nameResourceKey": "empty",
"descriptionResourceKey": "empty",
"emptyValueResourceKey": "trustedServerCertificateNameExample",
"childSettings": [
],
"options": [
],
"entityKey": "trustedServerCertificateNamesName",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
}
],
"dataType": 21,
"category": 149,
"nameResourceKey": "trustedServerCertificateNamesName",
"descriptionResourceKey": "trustedServerCertificateNamesDescription",
"childSettings": [
],
"options": [
],
"entityKey": "trustedServerCertificateNames",
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"complexOptions": [
{
"dataType": 4,
"category": 149,
"nameResourceKey": "selectCertificateProfiles",
"descriptionResourceKey": "selectRootCertificatesForServerValidationName",
"childSettings": [
],
"options": [
],
"entityKey": "rootCertificatesForServerValidation",
"booleanActions": 0,
"unconfiguredValue": "notConfigured",
"policyType": 68,
"enabled": true
}
],
"dataType": 5,
"category": 149,
"nameResourceKey": "selectRootCertificatesForServerValidationName",
"descriptionResourceKey": "empty",
"emptyValueResourceKey": "selectCertificates",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 149,
"nameResourceKey": "authentication",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"dataType": 16,
"category": 149,
"nameResourceKey": "authenticationMethodName",
"descriptionResourceKey": "authenticationMethodName",
"childSettings": [
],
"options": [
{
"nameResourceKey": "notConfigured",
"enabled": true
},
{
"nameResourceKey": "usernameAndPasswordOption",
"value": "usernameAndPassword",
"children": [
{
"dataType": 20,
"category": 149,
"nameResourceKey": "enableIdentityPrivacyName",
"descriptionResourceKey": "enableIdentityPrivacyDescription",
"emptyValueResourceKey": "identityPrivacyExample",
"childSettings": [
],
"options": [
],
"entityKey": "enableOuterIdentityPrivacy",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
],
"enabled": true
},
{
"nameResourceKey": "certificatesOption",
"value": "certificate",
"children": [
{
"complexOptions": [
{
"dataType": 4,
"category": 149,
"nameResourceKey": "selectCertificateProfile",
"descriptionResourceKey": "empty",
"childSettings": [
],
"options": [
],
"entityKey": "identityCertificateForClientAuthentication",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
],
"dataType": 5,
"category": 149,
"nameResourceKey": "certificatesOption",
"descriptionResourceKey": "empty",
"emptyValueResourceKey": "selectCertificate",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"dataType": 20,
"category": 149,
"nameResourceKey": "enableIdentityPrivacyName",
"descriptionResourceKey": "enableIdentityPrivacyDescription",
"emptyValueResourceKey": "identityPrivacyExample",
"childSettings": [
],
"options": [
],
"entityKey": "enableOuterIdentityPrivacy",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
],
"enabled": true
}
],
"entityKey": "authenticationMethod",
"booleanActions": 0,
"policyType": 68,
"enabled": true
}
],
"enabled": true
}
],
"entityKey": "eapType",
"booleanActions": 0,
"policyType": 68,
"enabled": false
},
{
"dataType": 16,
"category": 149,
"nameResourceKey": "eAPTypeName",
"descriptionResourceKey": "eAPTypeDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "selectEAP",
"enabled": true
},
{
"nameResourceKey": "eAPFASTName",
"value": "eapFast",
"children": [
{
"value": "certificate",
"dataType": 9,
"category": 149,
"childSettings": [
],
"options": [
],
"entityKey": "authenticationMethod",
"booleanActions": 0,
"policyType": 68,
"enabled": true
},
{
"dataType": 16,
"category": 149,
"nameResourceKey": "pACHeading",
"descriptionResourceKey": "empty",
"childSettings": [
],
"options": [
{
"nameResourceKey": "dontUsePACName",
"value": "noProtectedAccessCredential",
"enabled": true
},
{
"nameResourceKey": "usePACName",
"value": "useProtectedAccessCredential",
"enabled": true
},
{
"nameResourceKey": "provisionPACName",
"value": "useProtectedAccessCredentialAndProvision",
"enabled": true
},
{
"nameResourceKey": "provisionPACAnonName",
"value": "useProtectedAccessCredentialAndProvisionAnonymously",
"enabled": true
}
],
"entityKey": "eapFastConfiguration",
"booleanActions": 0,
"defaultValue": "noProtectedAccessCredential",
"policyType": 68,
"enabled": true
}
],
"enabled": true
},
{ {
"nameResourceKey": "eAPTLSName", "nameResourceKey": "eAPTLSName",
"value": "eapTls", "value": "eapTls",
@@ -794,7 +1536,7 @@
"entityKey": "eapType", "entityKey": "eapType",
"booleanActions": 0, "booleanActions": 0,
"policyType": 68, "policyType": 68,
"enabled": true "enabled": false
} }
] ]
} }
@@ -183,7 +183,77 @@
"booleanActions": 3, "booleanActions": 3,
"defaultValue": false, "defaultValue": false,
"policyType": 13, "policyType": 13,
"enabled": true "enabled": false
},
{
"dataType": 16,
"category": 127,
"nameResourceKey": "blockAddingAccountsName",
"descriptionResourceKey": "blockAddingAccountsDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "allowAllAccountsExceptGoogle",
"value": "allowAllExceptGoogleAccounts",
"enabled": true
},
{
"nameResourceKey": "allowAllAccounts",
"value": "allowAll",
"children": [
{
"columns": [
{
"metadata": {
"dataType": 20,
"category": 127,
"nameResourceKey": "domainAllowListTableName",
"emptyValueResourceKey": "domainAllowListTableEmptyValueExample",
"childSettings": [
],
"options": [
],
"entityKey": "empty",
"booleanActions": 0,
"policyType": 13,
"enabled": true
}
}
],
"dataType": 21,
"category": 127,
"nameResourceKey": "domainAllowListName",
"descriptionResourceKey": "domainAllowListDescription",
"childSettings": [
],
"options": [
],
"entityKey": "allowedGoogleAccountDomains",
"booleanActions": 0,
"policyType": 13,
"enabled": false
}
],
"enabled": true
},
{
"nameResourceKey": "blockAllAccounts",
"value": "blockAll",
"enabled": true
}
],
"entityKey": "workProfileAccountUse",
"booleanActions": 0,
"defaultValue": "allowAllExceptGoogleAccounts",
"unconfiguredValue": "allowAllExceptGoogleAccounts",
"policyType": 13,
"enabled": false
}, },
{ {
"dataType": 0, "dataType": 0,
@@ -304,29 +374,56 @@
"enabled": true "enabled": true
}, },
{ {
"dataType": 0, "dataType": 10,
"category": 127, "category": 127,
"nameResourceKey": "workProfileRequirePasswordName", "nameResourceKey": "androidTwelveDeprecationInfoBox",
"descriptionResourceKey": "workProfileRequirePasswordDescription", "childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 13,
"enabled": true
},
{
"isSettingDescription": false,
"showAsSectionHeader": true,
"dataType": 8,
"category": 127,
"nameResourceKey": "allAndroidVersionsPasswordHeader",
"childSettings": [ "childSettings": [
{ {
"dataType": 14, "isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 127, "category": 127,
"nameResourceKey": "workProfileMinimumPasswordLengthName", "nameResourceKey": "allAndroidVersionsPasswordHeaderDescription",
"descriptionResourceKey": "workProfileMinimumPasswordLengthDescription",
"emptyValueResourceKey": "workProfileMinimumPasswordLengthEmptyValueKey",
"childSettings": [ "childSettings": [
], ],
"options": [ "options": [
], ],
"entityKey": "workProfilePasswordMinimumLength",
"booleanActions": 0, "booleanActions": 0,
"defaultValue": 4,
"policyType": 13, "policyType": 13,
"enabled": true "enabled": true
}, }
],
"options": [
],
"booleanActions": 0,
"policyType": 13,
"enabled": true
},
{
"dataType": 0,
"category": 127,
"nameResourceKey": "workProfileRequirePasswordName",
"descriptionResourceKey": "workProfileRequirePasswordDescription",
"childSettings": [
{ {
"dataType": 16, "dataType": 16,
"category": 127, "category": 127,
@@ -430,6 +527,208 @@
"policyType": 13, "policyType": 13,
"enabled": true "enabled": true
}, },
{
"dataType": 14,
"category": 127,
"nameResourceKey": "workProfileNumberOfPreviousPasswordsToBlockName",
"descriptionResourceKey": "workProfileNumberOfPreviousPasswordsToBlockDescription",
"emptyValueResourceKey": "workProfileNumberOfPreviousPasswordsToBlockEmptyValueKey",
"childSettings": [
],
"options": [
],
"entityKey": "workProfilePasswordPreviousPasswordBlockCount",
"booleanActions": 0,
"defaultValue": 5,
"policyType": 13,
"enabled": true
},
{
"dataType": 0,
"category": 127,
"nameResourceKey": "workProfileBlockFaceUnlockName",
"descriptionResourceKey": "workProfileBlockFaceUnlockDescription",
"childSettings": [
],
"options": [
],
"entityKey": "workProfilePasswordBlockFaceUnlock",
"booleanActions": 3,
"defaultValue": false,
"policyType": 13,
"enabled": true
},
{
"dataType": 0,
"category": 127,
"nameResourceKey": "workProfileBlockFingerprintUnlockName",
"descriptionResourceKey": "workProfileBlockFingerprintUnlockDescription",
"childSettings": [
],
"options": [
],
"entityKey": "workProfilePasswordBlockFingerprintUnlock",
"booleanActions": 3,
"defaultValue": false,
"policyType": 13,
"enabled": true
},
{
"dataType": 0,
"category": 127,
"nameResourceKey": "workProfileBlockIrisUnlockName",
"descriptionResourceKey": "workProfileBlockIrisUnlockDescription",
"childSettings": [
],
"options": [
],
"entityKey": "workProfilePasswordBlockIrisUnlock",
"booleanActions": 3,
"defaultValue": false,
"policyType": 13,
"enabled": true
},
{
"dataType": 0,
"category": 127,
"nameResourceKey": "workProfileBlockSmartLockName",
"descriptionResourceKey": "workProfileBlockSmartLockDescription",
"childSettings": [
],
"options": [
],
"entityKey": "workProfilePasswordBlockTrustAgents",
"booleanActions": 3,
"defaultValue": false,
"policyType": 13,
"enabled": true
},
{
"dataType": 0,
"category": 127,
"nameResourceKey": "blockUnifiedPasswordForWorkProfileName",
"descriptionResourceKey": "blockUnifiedPasswordForWorkProfileDescription",
"childSettings": [
],
"options": [
],
"entityKey": "blockUnifiedPasswordForWorkProfile",
"booleanActions": 3,
"defaultValue": false,
"policyType": 13,
"enabled": false
},
{
"isSettingDescription": false,
"showAsSectionHeader": true,
"dataType": 8,
"category": 127,
"nameResourceKey": "androidTwelveAndAbovePasswordHeader",
"childSettings": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 127,
"nameResourceKey": "androidTwelveAndAbovePasswordHeaderDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 13,
"enabled": true
}
],
"options": [
],
"booleanActions": 0,
"policyType": 13,
"enabled": true
},
{
"dataType": 16,
"category": 127,
"nameResourceKey": "workProfileRequiredPasswordComplexityName",
"descriptionResourceKey": "workProfileRequiredPasswordComplexityDescription",
"childSettings": [
],
"options": [
{
"nameResourceKey": "none",
"value": "none",
"enabled": true
},
{
"nameResourceKey": "low",
"value": "low",
"enabled": true
},
{
"nameResourceKey": "medium",
"value": "medium",
"enabled": true
},
{
"nameResourceKey": "high",
"value": "high",
"enabled": true
}
],
"entityKey": "workProfileRequiredPasswordComplexity",
"booleanActions": 0,
"defaultValue": "none",
"unconfiguredValue": "none",
"policyType": 13,
"enabled": true
},
{
"isSettingDescription": false,
"showAsSectionHeader": true,
"dataType": 8,
"category": 127,
"nameResourceKey": "androidElevenAndBelowPasswordHeader",
"childSettings": [
{
"isSettingDescription": false,
"showAsSectionHeader": false,
"dataType": 8,
"category": 127,
"nameResourceKey": "androidElevenAndBelowPasswordHeaderDescription",
"childSettings": [
],
"options": [
],
"booleanActions": 0,
"policyType": 13,
"enabled": true
}
],
"options": [
],
"booleanActions": 0,
"policyType": 13,
"enabled": true
},
{ {
"dataType": 16, "dataType": 16,
"category": 127, "category": 127,
@@ -549,86 +848,18 @@
{ {
"dataType": 14, "dataType": 14,
"category": 127, "category": 127,
"nameResourceKey": "workProfileNumberOfPreviousPasswordsToBlockName", "nameResourceKey": "workProfileMinimumPasswordLengthName",
"descriptionResourceKey": "workProfileNumberOfPreviousPasswordsToBlockDescription", "descriptionResourceKey": "workProfileMinimumPasswordLengthDescription",
"emptyValueResourceKey": "workProfileNumberOfPreviousPasswordsToBlockEmptyValueKey", "emptyValueResourceKey": "workProfileMinimumPasswordLengthEmptyValueKey",
"childSettings": [ "childSettings": [
], ],
"options": [ "options": [
], ],
"entityKey": "workProfilePasswordPreviousPasswordBlockCount", "entityKey": "workProfilePasswordMinimumLength",
"booleanActions": 0, "booleanActions": 0,
"defaultValue": 5, "defaultValue": 4,
"policyType": 13,
"enabled": true
},
{
"dataType": 0,
"category": 127,
"nameResourceKey": "workProfileBlockFaceUnlockName",
"descriptionResourceKey": "workProfileBlockFaceUnlockDescription",
"childSettings": [
],
"options": [
],
"entityKey": "workProfilePasswordBlockFaceUnlock",
"booleanActions": 3,
"defaultValue": false,
"policyType": 13,
"enabled": true
},
{
"dataType": 0,
"category": 127,
"nameResourceKey": "workProfileBlockFingerprintUnlockName",
"descriptionResourceKey": "workProfileBlockFingerprintUnlockDescription",
"childSettings": [
],
"options": [
],
"entityKey": "workProfilePasswordBlockFingerprintUnlock",
"booleanActions": 3,
"defaultValue": false,
"policyType": 13,
"enabled": true
},
{
"dataType": 0,
"category": 127,
"nameResourceKey": "workProfileBlockIrisUnlockName",
"descriptionResourceKey": "workProfileBlockIrisUnlockDescription",
"childSettings": [
],
"options": [
],
"entityKey": "workProfilePasswordBlockIrisUnlock",
"booleanActions": 3,
"defaultValue": false,
"policyType": 13,
"enabled": true
},
{
"dataType": 0,
"category": 127,
"nameResourceKey": "workProfileBlockSmartLockName",
"descriptionResourceKey": "workProfileBlockSmartLockDescription",
"childSettings": [
],
"options": [
],
"entityKey": "workProfilePasswordBlockTrustAgents",
"booleanActions": 3,
"defaultValue": false,
"policyType": 13, "policyType": 13,
"enabled": true "enabled": true
} }
+2867 -1693
View File
File diff suppressed because it is too large Load Diff
+2864 -1690
View File
File diff suppressed because it is too large Load Diff
+2860 -1686
View File
File diff suppressed because it is too large Load Diff
+2867 -1693
View File
File diff suppressed because it is too large Load Diff
+2864 -1690
View File
File diff suppressed because it is too large Load Diff
+2862 -1688
View File
File diff suppressed because it is too large Load Diff
+2870 -1696
View File
File diff suppressed because it is too large Load Diff
+2869 -1695
View File
File diff suppressed because it is too large Load Diff
+2868 -1694
View File
File diff suppressed because it is too large Load Diff
+2867 -1693
View File
File diff suppressed because it is too large Load Diff
+2867 -1693
View File
File diff suppressed because it is too large Load Diff
+2860 -1686
View File
File diff suppressed because it is too large Load Diff
+2863 -1689
View File
File diff suppressed because it is too large Load Diff
+2862 -1688
View File
File diff suppressed because it is too large Load Diff
+2868 -1694
View File
File diff suppressed because it is too large Load Diff
File diff suppressed because it is too large Load Diff
File diff suppressed because it is too large Load Diff
File diff suppressed because it is too large Load Diff
File diff suppressed because it is too large Load Diff
+2860 -1686
View File
File diff suppressed because it is too large Load Diff
+6 -2
View File
@@ -11,7 +11,7 @@ Objects can be compared based on Properties or Documentatation info.
function Get-ModuleVersion function Get-ModuleVersion
{ {
'1.0.10' '1.0.11'
} }
function Invoke-InitializeModule function Invoke-InitializeModule
@@ -516,7 +516,11 @@ function Start-BulkCompareExportObjects
Write-Log "****************************************************************" Write-Log "****************************************************************"
$compareObjectsResult = @() $compareObjectsResult = @()
$txtNameFilter = (Get-XamlProperty $global:ccContentProviderOptions.Content "txtCompareNameFilter" "Text").Trim() $txtNameFilter = (Get-XamlProperty $global:ccContentProviderOptions.Content "txtCompareNameFilter" "Text")
if($txtNameFilter -is [String])
{
$txtNameFilter = $txtNameFilter.Trim()
}
$rootFolder = (Get-XamlProperty $global:ccContentProviderOptions.Content "txtExportPath" "Text") $rootFolder = (Get-XamlProperty $global:ccContentProviderOptions.Content "txtExportPath" "Text")
$compareProps = $script:defaultCompareProps $compareProps = $script:defaultCompareProps
+32 -3
View File
@@ -20,7 +20,7 @@ $global:documentationProviders = @()
function Get-ModuleVersion function Get-ModuleVersion
{ {
'2.0.0' '2.0.2'
} }
function Invoke-InitializeModule function Invoke-InitializeModule
@@ -61,6 +61,7 @@ function Invoke-InitializeModule
Settings="TableHeaders.settings" Settings="TableHeaders.settings"
returnCode='Win32ReturnCodes.Columns.returnCode' returnCode='Win32ReturnCodes.Columns.returnCode'
type='Win32ReturnCodes.Columns.codeType' type='Win32ReturnCodes.Columns.codeType'
RecommendedValue="AzureIAMCommon.Recommended"
} }
} }
@@ -290,7 +291,8 @@ function Get-ObjectDocumentation
elseif($type -eq "#microsoft.graph.deviceManagementIntent") elseif($type -eq "#microsoft.graph.deviceManagementIntent")
{ {
Invoke-TranslateIntentObject $obj $objectType | Out-Null Invoke-TranslateIntentObject $obj $objectType | Out-Null
$properties = @("Name","Value","Category","FullValueTable","RawValue","SettingId","Description") $properties = @("Name","Value","Category","FullValueTable","RawValue","RecommendedValue","SettingId","Description")
$defaultDocumentationProperties = @("Name","Value","RecommendedValue")
} }
#endregion #endregion
#region Administrative Templates #region Administrative Templates
@@ -541,6 +543,10 @@ function Get-ObjectTypeString
{ {
return (Get-LanguageString "Titles.windows10QualityUpdate") return (Get-LanguageString "Titles.windows10QualityUpdate")
} }
elseif($objTypeId -eq "WinDriverUpdatePolicies")
{
return (Get-LanguageString "Titles.windows10DriverUpdate")
}
elseif($objTypeId -eq "TenantAdmin") elseif($objTypeId -eq "TenantAdmin")
{ {
return (Get-LanguageString "Titles.tenantAdmin") return (Get-LanguageString "Titles.tenantAdmin")
@@ -1300,6 +1306,12 @@ function Get-IntentCategory
{ {
param($templateType) param($templateType)
if(-not $templateType)
{
Write-Log "Get-IntentCategory called with empty Category" 2
return
}
if($templateType.StartsWith("endpointSecurity")) if($templateType.StartsWith("endpointSecurity"))
{ {
$templateType = $templateType.Substring(16) $templateType = $templateType.Substring(16)
@@ -1482,6 +1494,12 @@ function Add-IntentSettingObjectToList
$objSetting.Level = $objSetting.Level + 1 $objSetting.Level = $objSetting.Level + 1
} }
$recommendedSetting = $global:catRecommendedSettings[$objSetting.CategoryObject.Id] | Where definitionId -eq $objSetting.SettingId
if($recommendedSetting.valueJson -and ($objSetting.ValueSet -eq $false -or $recommendedSetting.valueJson -ne ($objSetting.RawValue | ConvertTo-Json -Compress))) {
$objSetting | Add-Member Noteproperty -Name "RecommendedValue" -Value ($recommendedSetting.valueJson | ConvertFrom-Json) -Force
}
$script:objectSettingsData += $objSetting $script:objectSettingsData += $objSetting
if($objSetting.ValueSet -eq $false) { return } if($objSetting.ValueSet -eq $false) { return }
@@ -2409,6 +2427,17 @@ function Invoke-TranslateSection
} }
$value = $arrTmp -join $script:objectSeparator $value = $arrTmp -join $script:objectSeparator
} }
elseif($prop.dataType -eq 108) # String with format
{
$value = $propValue
if($prop.formatStringKey) {
$str = Get-LanguageString $prop.formatStringKey
if($str)
{
$value = $str -f $propValue
}
}
}
else else
{ {
Write-Log "Unsupported property '$((Get-LanguageString "SettingDetails.$($prop.nameResourceKey)"))' ($($prop.nameResourceKey)) for object property $($prop.entityKey). Type: $($prop.dataType)" 2 Write-Log "Unsupported property '$((Get-LanguageString "SettingDetails.$($prop.nameResourceKey)"))' ($($prop.nameResourceKey)) for object property $($prop.entityKey). Type: $($prop.dataType)" 2
@@ -3588,7 +3617,7 @@ function Invoke-TranslateAssignments
$hours = ($endTime.ToUniversalTime() - $endTime).Hours $hours = ($endTime.ToUniversalTime() - $endTime).Hours
$endTime = $endTime.AddHours($hours) $endTime = $endTime.AddHours($hours)
} }
$value = "$($instTime.ToShortDateString()) $($instTime.ToShortTimeString())" $value = "$($endTime.ToShortDateString()) $($endTime.ToShortTimeString())"
} }
} }
File diff suppressed because it is too large Load Diff
+442 -32
View File
@@ -10,7 +10,7 @@ This module is for the Endpoint Manager/Intune View. It manages Export/Import/Co
#> #>
function Get-ModuleVersion function Get-ModuleVersion
{ {
'3.8.1' '3.9.2'
} }
function Invoke-InitializeModule function Invoke-InitializeModule
@@ -73,6 +73,21 @@ function Invoke-InitializeModule
SubPath = "EndpointManager" SubPath = "EndpointManager"
}) "EndpointManager" }) "EndpointManager"
Add-SettingsObject (New-Object PSObject -Property @{
Title = "Save Encryption File"
Key = "EMSaveEncryptionFile"
Type = "Boolean"
Description = "Save encryption file when uploading an app. This can then be used to when downloading the app file."
SubPath = "EndpointManager"
}) "EndpointManager"
Add-SettingsObject (New-Object PSObject -Property @{
Title = "App download folder"
Key = "EMIntuneAppDownloadFolder"
Type = "Folder"
Description = "Folder where app packages will be downloaded and where encryption files will be saved"
SubPath = "EndpointManager"
}) "EndpointManager"
$viewPanel = Get-XamlObject ($global:AppRootFolder + "\Xaml\EndpointManagerPanel.xaml") -AddVariables $viewPanel = Get-XamlObject ($global:AppRootFolder + "\Xaml\EndpointManagerPanel.xaml") -AddVariables
@@ -89,7 +104,7 @@ function Invoke-InitializeModule
Deactivating = { Invoke-EMDeactivateView } Deactivating = { Invoke-EMDeactivateView }
Activating = { Invoke-EMActivatingView } Activating = { Invoke-EMActivatingView }
Authentication = (Get-MSALAuthenticationObject) Authentication = (Get-MSALAuthenticationObject)
Authenticate = { Invoke-EMAuthenticateToMSAL } Authenticate = { Invoke-EMAuthenticateToMSAL @args }
AppInfo = (Get-GraphAppInfo "EMAzureApp" "d1ddf0e4-d672-4dae-b554-9d5bdfd93547" "EM") AppInfo = (Get-GraphAppInfo "EMAzureApp" "d1ddf0e4-d672-4dae-b554-9d5bdfd93547" "EM")
SaveSettings = { Invoke-EMSaveSettings } SaveSettings = { Invoke-EMSaveSettings }
@@ -120,7 +135,7 @@ function Invoke-InitializeModule
ViewID = "IntuneGraphAPI" ViewID = "IntuneGraphAPI"
API = "/identity/conditionalAccess/policies" API = "/identity/conditionalAccess/policies"
Permissons=@("Policy.Read.All","Policy.ReadWrite.ConditionalAccess","Application.Read.All") Permissons=@("Policy.Read.All","Policy.ReadWrite.ConditionalAccess","Application.Read.All")
Dependencies = @("NamedLocations","Applications","TermsOfUse","AuthenticationStrengths") Dependencies = @("NamedLocations","Applications","TermsOfUse","AuthenticationStrengths","AssignmentFilters")
GroupId = "ConditionalAccess" GroupId = "ConditionalAccess"
ImportExtension = { Add-ConditionalAccessImportExtensions @args } ImportExtension = { Add-ConditionalAccessImportExtensions @args }
PreImportCommand = { Start-PreImportConditionalAccess @args } PreImportCommand = { Start-PreImportConditionalAccess @args }
@@ -128,22 +143,19 @@ function Invoke-InitializeModule
ExpandAssignmentsList = $false ExpandAssignmentsList = $false
}) })
if((Get-SettingValue "PreviewFeatures" $false) -eq $true) Add-ViewItem (New-Object PSObject -Property @{
{ Title = "Terms of use"
Add-ViewItem (New-Object PSObject -Property @{ Id = "TermsOfUse"
Title = "Terms of use" ViewID = "IntuneGraphAPI"
Id = "TermsOfUse" ViewProperties = @("id", "displayName")
ViewID = "IntuneGraphAPI" Expand = "files"
ViewProperties = @("id", "displayName") QUERYLIST = "`$expand=files"
Expand = "files" API = "/identityGovernance/termsOfUse/agreements"
QUERYLIST = "`$expand=files" Permissons=@("Agreement.ReadWrite.All")
API = "/identityGovernance/termsOfUse/agreements" PreImportCommand = { Start-PreImportTermsOfUse @args }
Permissons=@("Agreement.ReadWrite.All") PostExportCommand = { Start-PostExportTermsOfUse @args }
PreImportCommand = { Start-PreImportTermsOfUse @args } GroupId = "ConditionalAccess"
PostExportCommand = { Start-PostExportTermsOfUse @args } })
GroupId = "ConditionalAccess"
})
}
Add-ViewItem (New-Object PSObject -Property @{ Add-ViewItem (New-Object PSObject -Property @{
Title = "Named Locations" Title = "Named Locations"
@@ -262,6 +274,7 @@ function Invoke-InitializeModule
#QUERYLIST = "`$filter=endsWith(id,'Windows10EnrollmentCompletionPageConfiguration')" #QUERYLIST = "`$filter=endsWith(id,'Windows10EnrollmentCompletionPageConfiguration')"
Permissons=@("DeviceManagementServiceConfig.ReadWrite.All") Permissons=@("DeviceManagementServiceConfig.ReadWrite.All")
SkipRemoveProperties = @('Id') SkipRemoveProperties = @('Id')
Dependencies = @("Applications")
AssignmentsType = "enrollmentConfigurationAssignments" AssignmentsType = "enrollmentConfigurationAssignments"
PropertiesToRemoveForUpdate = @('priority') PropertiesToRemoveForUpdate = @('priority')
GroupId = "WinEnrollment" GroupId = "WinEnrollment"
@@ -316,7 +329,7 @@ function Invoke-InitializeModule
PostFileImportCommand = { Start-PostFileImportAdministrativeTemplate @args } PostFileImportCommand = { Start-PostFileImportAdministrativeTemplate @args }
PreImportCommand = { Start-PreImportAdministrativeTemplate @args } PreImportCommand = { Start-PreImportAdministrativeTemplate @args }
LoadObject = { Start-LoadAdministrativeTemplate @args } LoadObject = { Start-LoadAdministrativeTemplate @args }
PropertiesToRemove = @("definitionValues") PropertiesToRemove = @("definitionValues","policyConfigurationIngestionType")
Permissons=@("DeviceManagementConfiguration.ReadWrite.All") Permissons=@("DeviceManagementConfiguration.ReadWrite.All")
Icon="DeviceConfiguration" Icon="DeviceConfiguration"
GroupId = "DeviceConfiguration" GroupId = "DeviceConfiguration"
@@ -456,7 +469,10 @@ function Invoke-InitializeModule
PreDeleteCommand = { Start-PreDeleteApplications @args } PreDeleteCommand = { Start-PreDeleteApplications @args }
PostExportCommand = { Start-PostExportApplications @args } PostExportCommand = { Start-PostExportApplications @args }
PostListCommand = { Start-PostListApplications @args } PostListCommand = { Start-PostListApplications @args }
ExportExtension = { Add-ScriptExportExtensions @args } ExportExtension = { Add-ScriptExportApplications @args }
PostGetCommand = { Start-PostGetApplications @args }
PostImportCommand = { Start-PostImportApplications @args }
PostFilesImportCommand = { Start-PostFilesImportApplications @args }
GroupId = "Apps" GroupId = "Apps"
ScopeTagsReturnedInList = $false ScopeTagsReturnedInList = $false
}) })
@@ -670,6 +686,7 @@ function Invoke-InitializeModule
GroupId = "EndpointAnalytics" GroupId = "EndpointAnalytics"
Icon = "Report" Icon = "Report"
AssignmentsType = "deviceHealthScriptAssignments" AssignmentsType = "deviceHealthScriptAssignments"
AssignmentProperties = @("target","runSchedule","runRemediationScript")
PropertiesToRemoveForUpdate = @('version','isGlobalScript','highestAvailableVersion') PropertiesToRemoveForUpdate = @('version','isGlobalScript','highestAvailableVersion')
}) })
@@ -733,13 +750,60 @@ function Invoke-InitializeModule
Icon = "ConditionalAccess" Icon = "ConditionalAccess"
GroupId = "EndpointSecurity" GroupId = "EndpointSecurity"
}) })
Add-ViewItem (New-Object PSObject -Property @{
Title = "Authentication Context"
Id = "AuthenticationContext"
ViewID = "IntuneGraphAPI"
API = "/identity/conditionalAccess/authenticationContextClassReferences"
PropertiesToRemove = @("@odata.type")
SkipRemoveProperties = @('Id')
ImportOrder = 46
PreImportCommand = { Start-PreImportCommandAuthenticationContext @args }
Permissons=@("Policy.ReadWrite.ConditionalAccess")
ExpandAssignmentsList = $false
Icon = "ConditionalAccess"
GroupId = "EndpointSecurity"
})
Add-ViewItem (New-Object PSObject -Property @{
Title = "W365 Provisioning Policies"
Id = "W365ProvisioningPolicies"
ViewID = "IntuneGraphAPI"
API = "/deviceManagement/virtualEndpoint/provisioningPolicies"
Permissons=@("CloudPC.ReadWrite.All")
Icon = "Devices"
GroupId = "DeviceConfiguration"
})
Add-ViewItem (New-Object PSObject -Property @{
Title = "W365 User Settings"
Id = "W365UserSettings"
ViewID = "IntuneGraphAPI"
API = "/deviceManagement/virtualEndpoint/userSettings"
Permissons = @("CloudPC.ReadWrite.All")
Icon = "Devices"
GroupId = "DeviceConfiguration"
})
Add-ViewItem (New-Object PSObject -Property @{
Title = "Driver Update Profiles"
Id = "DriverUpdateProfiles"
ViewID = "IntuneGraphAPI"
API = "/deviceManagement/windowsDriverUpdateProfiles"
Permissons = @("DeviceManagementConfiguration.ReadWrite.All")
Icon = "UpdatePolicies"
GroupId = "WinDriverUpdatePolicies"
})
} }
function Invoke-EMAuthenticateToMSAL function Invoke-EMAuthenticateToMSAL
{ {
param($params = @{})
$global:EMViewObject.AppInfo = Get-GraphAppInfo "EMAzureApp" "d1ddf0e4-d672-4dae-b554-9d5bdfd93547" "EM" $global:EMViewObject.AppInfo = Get-GraphAppInfo "EMAzureApp" "d1ddf0e4-d672-4dae-b554-9d5bdfd93547" "EM"
Set-MSALCurrentApp $global:EMViewObject.AppInfo Set-MSALCurrentApp $global:EMViewObject.AppInfo
& $global:msalAuthenticator.Login -Account (?? $global:MSALToken.Account.UserName (Get-Setting "" "LastLoggedOnUser")) & $global:msalAuthenticator.Login -Account (?? $global:MSALToken.Account.UserName (Get-Setting "" "LastLoggedOnUser")) @params
} }
function Invoke-EMDeactivateView function Invoke-EMDeactivateView
@@ -1938,24 +2002,41 @@ function local:Start-ImportApp
if($appType -eq "microsoft.graph.win32LobApp") if($appType -eq "microsoft.graph.win32LobApp")
{ {
Copy-Win32LOBPackage $packageFile $obj $fileEncryptionInfo = Copy-Win32LOBPackage $packageFile $obj
} }
elseif($appType -eq "microsoft.graph.windowsMobileMSI") elseif($appType -eq "microsoft.graph.windowsMobileMSI")
{ {
Copy-MSILOB $packageFile $obj $fileEncryptionInfo = Copy-MSILOB $packageFile $obj
} }
elseif($appType -eq "microsoft.graph.iosLOBApp") elseif($appType -eq "microsoft.graph.iosLOBApp")
{ {
Copy-iOSLOB $packageFile $obj $fileEncryptionInfo = Copy-iOSLOB $packageFile $obj
} }
elseif($appType -eq "microsoft.graph.androidLOBApp") elseif($appType -eq "microsoft.graph.androidLOBApp")
{ {
Copy-AndroidLOB $packageFile $obj $fileEncryptionInfo = Copy-AndroidLOB $packageFile $obj
} }
else else
{ {
Write-Log "Unsupported application type $appType. File will not be uploaded" 2 Write-Log "Unsupported application type $appType. File will not be uploaded" 2
} }
if((Get-SettingValue "EMSaveEncryptionFile") -eq $true)
{
#$fileEncryptionInfo = $fileEncryptionInfo | where { $null -ne $_.fileEncryptionInfo }
if($fileEncryptionInfo)
{
$jsonEncryptionInfo = $fileEncryptionInfo.fileEncryptionInfo | ConvertTo-Json -Depth 10
$pkgPath = Get-SettingValue "EMIntuneAppDownloadFolder" (Get-SettingValue "EMIntuneAppPackages")
if($pkgPath -and [IO.Directory]::Exists($pkgPath))
{
$obj = Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$($obj.id)" -ODataMetadata "Minimal"
$fullPath = $pkgPath + "\$($obj.displayName)_$($obj.id)_$($obj.committedContentVersion).json"
$jsonEncryptionInfo | Out-File -FilePath $fullPath -Force -Encoding utf8
}
}
}
} }
function Start-PreUpdateApplication function Start-PreUpdateApplication
@@ -2045,6 +2126,69 @@ function Add-DetailExtensionApplications
$tmp.Children.Insert($index, $btnUpload) $tmp.Children.Insert($index, $btnUpload)
} }
$btnDownload = New-Object System.Windows.Controls.Button
$btnDownload.Content = 'Download'
$btnDownload.Name = 'btnDownloadAppfile'
$btnDownload.Margin = "0,0,5,0"
$btnDownload.Width = "100"
$btnDownload.Add_Click({
Write-Status "Download file"
$obj = $global:dgObjects.SelectedItem.Object
#$obj = Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$($obj.id)"
$pkgPath = Get-SettingValue "EMIntuneAppDownloadFolder" (Get-SettingValue "EMIntuneAppPackages")
$dlgSave = [System.Windows.Forms.SaveFileDialog]::new()
$dlgSave.InitialDirectory = $pkgPath
$dlgSave.FileName = ($obj.FileName + ".encrypted")
if($dlgSave.ShowDialog() -eq [System.Windows.Forms.DialogResult]::OK -and $dlgSave.Filename)
{
Start-DownloadAppContent $obj $dlgSave.FileName
if([IO.File]::Exists($dlgSave.FileName))
{
$fullPath = $pkgPath + "\$($obj.displayName)_$($obj.id)_$($obj.committedContentVersion).json"
if([IO.File]::Exists($fullPath) -eq $false)
{
if(([System.Windows.MessageBox]::Show("Could not find decryption file for $($obj.displayName)`nApp Id: $($obj.id)`nContent version $($obj.committedContentVersion)`n`nDo you want to browse for the file?", "Encryption file not found", "YesNo", "Warning")) -eq "Yes")
{
$of = [System.Windows.Forms.OpenFileDialog]::new()
$of.InitialDirectory = $pkgPath
$of.DefaultExt = "*.json"
$of.Filter = "Json (*.json)|*.*"
$of.Multiselect = $false
if($of.ShowDialog() -eq "OK")
{
$fullPath = $of.FileName
}
}
}
if([IO.File]::Exists($fullPath))
{
Write-Status "Decrypting file"
$encryptionInfo = ConvertFrom-Json (Get-Content -Path $fullPath -Raw)
$destination = $pkgPath + "\$($obj.FileName)"
Start-DecryptFile $dlgSave.Filename $destination $encryptionInfo.encryptionKey $encryptionInfo.initializationVector
}
else
{
Write-Log "Decryption file for $($obj.displayName) not found. Skipping decryption" 2
}
}
}
Write-Status ""
})
$tmp = $form.FindName($buttonPanel)
if($tmp)
{
$tmp.Children.Insert($index, $btnDownload)
}
} }
function Start-PreImportAssignmentsApplications function Start-PreImportAssignmentsApplications
@@ -2060,6 +2204,29 @@ function Start-PreImportAssignmentsApplications
} }
@{"Assignments"=$assignments} @{"Assignments"=$assignments}
} }
elseif($obj.'@odata.type' -eq "#microsoft.graph.winGetApp")
{
Write-LogDebug "Wait for app to be published"
$i = 2
Start-Sleep -s ($i)
$x = 0
while($x -lt 10)
{
###!!!
$appInfo = Invoke-GraphRequest -Url "$($objectType.API)/$($obj.id)" -ODataMetadata "skip"
if($appInfo.publishingState -eq "Published")
{
Write-LogDebug "Application $($obj.displayName) is published"
return
}
Start-Sleep -s ($i)
$x++
if($x -ge 5) { $i++ }
}
Write-Log "Application '$($obj.displayName)' is not published. Skipping assignment" 2
@{"Import"=$false}
}
} }
function Start-PreDeleteApplications function Start-PreDeleteApplications
@@ -2107,6 +2274,42 @@ function Start-PostExportApplications
Write-LogError "Failed to export scripts" $_.Exception Write-LogError "Failed to export scripts" $_.Exception
} }
} }
Save-Setting "Intune" "ExportAppFile" $global:chkExportApplicationFile.IsChecked
if($global:chkExportApplicationFile.IsChecked)
{
$encryptioSource = Get-SettingValue "EMIntuneAppDownloadFolder" (Get-SettingValue "EMIntuneAppPackages")
$pkgPath = $path
if($pkgPath)
{
Write-Status "Download file"
$exportFile = $pkgPath + "\$($obj.FileName).encrypted"
$encryptionFile = $encryptioSource + "\$($obj.displayName)_$($obj.id)_$($obj.committedContentVersion).json"
if($encryptionFile -and [IO.File]::Exists($encryptionFile))
{
Start-DownloadAppContent $obj $exportFile
if([IO.File]::Exists($exportFile))
{
Write-Status "Decrypting file"
$encryptionInfo = ConvertFrom-Json (Get-Content -Path $encryptionFile -Raw)
$destination = $pkgPath + "\$($obj.FileName)"
Start-DecryptFile $exportFile $destination $encryptionInfo.encryptionKey $encryptionInfo.initializationVector
}
try { [IO.File]::Delete($exportFile) }
catch {
Write-LogError "Filed to delete exported encrypted file" $_.Exception
}
}
else
{
Write-Log "Cound not file encryption file `"$($obj.displayName)_$($obj.id)_$($obj.committedContentVersion).json`""
}
}
}
} }
function Start-PostListApplications function Start-PostListApplications
@@ -2134,6 +2337,177 @@ function Start-PostListApplications
$objList $objList
} }
function Add-ScriptExportApplications
{
param($form, $buttonPanel, $index = 0)
Add-ScriptExportExtensions $form $buttonPanel $index
$ctrl = $form.FindName("chkExportApplicationFile")
if(-not $ctrl)
{
$xaml = @"
<StackPanel $($global:wpfNS) Orientation="Horizontal" Margin="0,0,5,0">
<Label Content="Export application file" />
<Rectangle Style="{DynamicResource InfoIcon}" ToolTip="Export the application file. Note: Application file will only be exported if ecryption file is found." />
</StackPanel>
"@
$label = [Windows.Markup.XamlReader]::Parse($xaml)
$global:chkExportApplicationFile = [System.Windows.Controls.CheckBox]::new()
$global:chkExportApplicationFile.IsChecked = ((Get-Setting "Intune" "ExportAppFile" "false") -eq "true")
$global:chkExportApplicationFile.VerticalAlignment = "Center"
$global:chkExportApplicationFile.Name = "chkExportApplicationFile"
@($label, $global:chkExportApplicationFile)
}
}
function Start-PostGetApplications {
param($obj, $objectType)
if($obj.Object.dependentAppCount -is [Int] -and ($obj.Object.dependentAppCount -gt 0 -or $obj.Object.supersededAppCount -gt 0)) {
$relationships = (Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$($obj.Id)/relationships?`$filter=targetType%20eq%20microsoft.graph.mobileAppRelationshipType%27child%27").value
$dependencyApps = @()
$supersededApps = @()
foreach ($rel in $relationships) {
if ($rel."@odata.type" -eq "#microsoft.graph.mobileAppDependency") {
$dependencyApps += "$($rel.targetDisplayName)|!|$($rel.targetDisplayVersion)|!|$($rel.targetId)|!|$($rel.dependencyType)"
}
elseif ($rel."@odata.type" -eq "#microsoft.graph.mobileAppSupersedence") {
$supersededApps += "$($rel.targetDisplayName)|!|$($rel.targetDisplayVersion)|!|$($rel.targetId)|!|$($rel.supersedenceType)"
}
}
if ($dependencyApps.Count -gt 0) {
$obj.Object | Add-Member -MemberType NoteProperty -Name "#CustomRefDependency" -Value ($dependencyApps -join "|*|")
}
if ($supersededApps.Count -gt 0) {
$obj.Object | Add-Member -MemberType NoteProperty -Name "#CustomRefSupersedence" -Value ($supersededApps -join "|*|")
}
}
}
function Start-PostImportApplications
{
param($obj, $objectType, $file)
#$tmpObj = Get-GraphObjectFromFile $file
}
function Start-PostFilesImportApplications
{
param($objType, $importedObjects, $importedFiles)
$refObjects = $importedFiles | Where { $null -ne $_.Object."#CustomRefDependency" -or $null -ne $_.Object."#CustomRefSupersedence" }
if(($refObjects | measure).Count -gt 0)
{
Write-Log "Applicetions with Depnedency or Supersedence detected"
foreach($file in $refObjects)
{
Add-ApplicationReferences $file.ImportedObject $file.Object
}
}
}
function local:Add-ApplicationReferences
{
param($obj, $fileObj)
if($fileObj."#CustomRefDependency" -or $fileObj."#CustomRefSupersedence")
{
Write-Log "Adding app references for $($obj.displayName)"
$depAppsInfo = $fileObj."#CustomRefDependency"
$supAppsInfo = $fileObj."#CustomRefSupersedence"
$releationShips = [PSCustomObject]@{
relationships = @()
}
if($depAppsInfo)
{
foreach($depApp in ($depAppsInfo -split "[|][*][|]"))
{
$appName, $appVer, $appId, $appType = $depApp -split "[|][!][|]"
if(-not $appName -or -not $appVer)
{
Write-Log "Could not get Name and Version from string: $appApp" 2
continue
}
$tmpApps = (Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps?`$filter=displayName eq '$appName'").value
if(-not $tmpApps)
{
Write-Log "No application found with name $appName" 2
continue
}
$tmpApp = $tmpApps | Where displayVersion -eq $appVer
if(-not $tmpApp)
{
Write-Log "No $appName application found with version $appVer" 2
continue
}
elseif(-not ($tmpApp | measure).Count -gt 1)
{
Write-Log "Multiple $appName application found with version $appVer" 2
continue
}
Write-Log "Add $appName ($appVer) to Dependency list"
$releationShips.relationships += [PSCustomObject]@{
"@odata.type" = "#microsoft.graph.mobileAppDependency"
targetId = $tmpApp.Id
dependencyType = $appType
}
}
}
if($supAppsInfo)
{
foreach($suppApp in ($supAppsInfo -split "[|][*][|]"))
{
$appName, $appVer, $appId, $appType = $suppApp -split "[|][!][|]"
if(-not $appName -or -not $appVer)
{
Write-Log "Could not get Name and Version from string: $appApp" 2
continue
}
$tmpApps = (Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps?`$filter=displayName eq '$appName'").value
if(-not $tmpApps)
{
Write-Log "No application found with name $appName" 2
continue
}
$tmpApp = $tmpApps | Where displayVersion -eq $appVer
if(-not $tmpApp)
{
Write-Log "No $appName application found with version $appVer" 2
continue
}
elseif(-not ($tmpApp | measure).Count -gt 1)
{
Write-Log "Multiple $appName application found with version $appVer" 2
continue
}
Write-Log "Add $appName ($appVer) to Supersedence list"
$releationShips.relationships += [PSCustomObject]@{
"@odata.type" = "#microsoft.graph.mobileAppSupersedence"
targetId = $tmpApp.Id
supersedenceType = $appType
}
}
}
if($releationShips.relationships.Count -gt 0)
{
$json = Update-JsonForEnvironment (ConvertTo-Json $releationShips -Depth 20)
Write-Log "Update app references"
Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$($obj.Id)/updateRelationships" -Method "POST" -Body $json
}
}
}
#endregion #endregion
#region Group Policy/Administrative Templates functions #region Group Policy/Administrative Templates functions
@@ -2143,6 +2517,13 @@ function Get-GPOObjectSettings
$gpoSettings = @() $gpoSettings = @()
if ($GPOObj.policyConfigurationIngestionType -eq "unknown") {
$tmpObj = (Invoke-GraphRequest -Url "/deviceManagement/groupPolicyConfigurations?`$filter=id eq '$($GPOObj.id)'").value[0]
if ($tmpObj.policyConfigurationIngestionType) {
$GPOObj.policyConfigurationIngestionType = $tmpObj.policyConfigurationIngestionType
}
}
# Get all configured policies in the Administrative Templates profile # Get all configured policies in the Administrative Templates profile
$GPODefinitionValues = Invoke-GraphRequest -Url "/deviceManagement/groupPolicyConfigurations/$($GPOObj.id)/definitionValues?`$expand=definition" -ODataMetadata "skip" $GPODefinitionValues = Invoke-GraphRequest -Url "/deviceManagement/groupPolicyConfigurations/$($GPOObj.id)/definitionValues?`$expand=definition" -ODataMetadata "skip"
foreach($definitionValue in $GPODefinitionValues.value) foreach($definitionValue in $GPODefinitionValues.value)
@@ -3194,6 +3575,11 @@ function Add-ConditionalAccessImportExtensions
$label = [Windows.Markup.XamlReader]::Parse($xaml) $label = [Windows.Markup.XamlReader]::Parse($xaml)
$CAStates = @() $CAStates = @()
$CAStates += [PSCustomObject]@{
Name = "As Exported - Change On to Report-only"
Value = "AsExportedReportOnly"
}
$CAStates += [PSCustomObject]@{ $CAStates += [PSCustomObject]@{
Name = "As Exported" Name = "As Exported"
Value = "AsExported" Value = "AsExported"
@@ -3218,7 +3604,7 @@ function Add-ConditionalAccessImportExtensions
$global:cbImportCAState.DisplayMemberPath = "Name" $global:cbImportCAState.DisplayMemberPath = "Name"
$global:cbImportCAState.SelectedValuePath = "Value" $global:cbImportCAState.SelectedValuePath = "Value"
$global:cbImportCAState.ItemsSource = $CAStates $global:cbImportCAState.ItemsSource = $CAStates
$global:cbImportCAState.SelectedValue = "AsExported" $global:cbImportCAState.SelectedValue = "disabled"
$global:cbImportCAState.Margin="0,5,0,0" $global:cbImportCAState.Margin="0,5,0,0"
$global:cbImportCAState.HorizontalAlignment="Left" $global:cbImportCAState.HorizontalAlignment="Left"
$global:cbImportCAState.Width=250 $global:cbImportCAState.Width=250
@@ -3231,9 +3617,14 @@ function Start-PreImportConditionalAccess
{ {
param($obj, $objectType, $file, $assignments) param($obj, $objectType, $file, $assignments)
if($global:cbImportCAState.SelectedValue -and $global:cbImportCAState.SelectedValue -ne "AsExported") if ($global:cbImportCAState.SelectedValue -and $global:cbImportCAState.SelectedValue -ne "AsExported") {
{ if ($global:cbImportCAState.SelectedValue -eq "AsExportedReportOnly" -and $obj.state -eq "enabled") {
$obj.state = $global:cbImportCAState.SelectedValue Write-Log "Change Enabled policy to Report-only"
$obj.state = "enabledForReportingButNotEnforced"
}
else {
$obj.state = $global:cbImportCAState.SelectedValue
}
} }
if($obj.grantControls.authenticationStrength) if($obj.grantControls.authenticationStrength)
@@ -3246,6 +3637,11 @@ function Start-PreImportConditionalAccess
} }
$obj.grantControls.authenticationStrength = $authSetting $obj.grantControls.authenticationStrength = $authSetting
} }
if($obj.sessionControls.disableResilienceDefaults -eq $false)
{
$obj.sessionControls.disableResilienceDefaults = $null
}
} }
function Start-PostExportConditionalAccess function Start-PostExportConditionalAccess
@@ -3400,10 +3796,13 @@ function Start-PreImportADMXFiles
return return
} }
$bytes = [IO.File]::ReadAllBytes($admxFile) #$bytes = [IO.File]::ReadAllBytes($admxFile)
$bytes = Get-ASCIIBytes ([IO.File]::ReadAllText($admxFile))
$obj.content = [Convert]::ToBase64String($bytes) $obj.content = [Convert]::ToBase64String($bytes)
$bytes = [IO.File]::ReadAllBytes($admlFile) #$bytes = [IO.File]::ReadAllBytes($admlFile)
$bytes = Get-ASCIIBytes ([IO.File]::ReadAllText($admlFile))
$obj.groupPolicyUploadedLanguageFiles += [PSCustomObject]@{ $obj.groupPolicyUploadedLanguageFiles += [PSCustomObject]@{
fileName = [io.path]::GetFileName($admlFile) fileName = [io.path]::GetFileName($admlFile)
content = [Convert]::ToBase64String($bytes) content = [Convert]::ToBase64String($bytes)
@@ -3455,4 +3854,15 @@ function Start-PreImportCommandAuthenticationStrengths
} }
#endregion #endregion
#region Authentication Strength
function Start-PreImportCommandAuthenticationContext
{
param($obj, $objectType, $file, $assignments)
#@{ "Method" = "PATCH" }
}
#endregion
Export-ModuleMember -alias * -function * Export-ModuleMember -alias * -function *
+55 -1
View File
@@ -10,7 +10,7 @@ This module is for the Endpoint Info View. It shows read-only objects in Intune
#> #>
function Get-ModuleVersion function Get-ModuleVersion
{ {
'3.5.0' '3.9.0'
} }
function Invoke-InitializeModule function Invoke-InitializeModule
@@ -22,6 +22,7 @@ function Invoke-InitializeModule
ID = "EMInfoGraphAPI" ID = "EMInfoGraphAPI"
ViewPanel = $viewPanel ViewPanel = $viewPanel
AuthenticationID = "MSAL" AuthenticationID = "MSAL"
AllowDelete = $false
ItemChanged = { Show-GraphObjects -ObjectTypeChanged; Invoke-ModuleFunction "Invoke-GraphObjectsChanged"; Write-Status ""} ItemChanged = { Show-GraphObjects -ObjectTypeChanged; Invoke-ModuleFunction "Invoke-GraphObjectsChanged"; Write-Status ""}
Activating = { Invoke-EMInfoActivatingView } Activating = { Invoke-EMInfoActivatingView }
Authentication = (Get-MSALAuthenticationObject) Authentication = (Get-MSALAuthenticationObject)
@@ -87,6 +88,24 @@ function Invoke-InitializeModule
Permissons=@("DeviceManagementServiceConfig.ReadWrite.All") Permissons=@("DeviceManagementServiceConfig.ReadWrite.All")
ExpandAssignmentsList = $false ExpandAssignmentsList = $false
}) })
Add-ViewItem (New-Object PSObject -Property @{
Title = "Tenant Settings"
Id = "TenantSettings"
ViewID = "EMInfoGraphAPI"
API = "deviceManagement/settings"
NameProperty = "Name"
AlwaysImport = $true
#ExportFullObject = $true
ViewProperties = @("Name")
ShowButtons = @("Import","Export","View")
Permissons=@("DeviceManagementConfiguration.ReadWrite.All")
PreImportCommand = { Start-PreImportTenantSettings @args }
GetObjectName = { Start-GetObjectNameTenantSettings @args }
PostListCommand = { Start-PostListTenantSettings @args }
Icon="TenantSettings"
ExpandAssignmentsList = $false
})
} }
function Invoke-EMInfoActivatingView function Invoke-EMInfoActivatingView
@@ -108,3 +127,38 @@ function Invoke-EMInfoAuthenticateToMSAL
& $global:msalAuthenticator.Login -Account $usr & $global:msalAuthenticator.Login -Account $usr
} }
} }
function Start-PreImportTenantSettings
{
param($obj, $objectType)
$objClone = $obj | ConvertTo-Json -Depth 50 | ConvertFrom-Json
if($objClone.deviceComplianceCheckinThresholdDays -lt 1)
{
$objClone.deviceComplianceCheckinThresholdDays = 30
}
Remove-Property $objClone "@odata.type"
$json = @{ "settings" = $objClone } | ConvertTo-Json -Depth 50
(Invoke-GraphRequest -Url "deviceManagement" -Content $json -HttpMethod "PATCH") | Out-Null
return (@{"Import"=$false})
}
function Start-GetObjectNameTenantSettings
{
param($objList, $objectType)
return "Tenant Settings"
}
function Start-PostListTenantSettings
{
param($objList, $objectType)
if(($objList | measure).Count -eq 1)
{
$objList[0].Name = "Tenant Settings"
#$objList[0] | Add-Member -MemberType NoteProperty -Name "SettingName" -Value "Tenant Settings"
}
$objList
}
+153 -17
View File
@@ -10,7 +10,7 @@ This module manages Application objects in Intune e.g. uploading application fil
#> #>
function Get-ModuleVersion function Get-ModuleVersion
{ {
'3.7.4' '3.9.2'
} }
######################################################################################### #########################################################################################
@@ -94,14 +94,18 @@ function Copy-MSILOB
$tmpFile = [IO.Path]::GetTempFileName() $tmpFile = [IO.Path]::GetTempFileName()
$msiInfo = Get-MSIFileInformation $msiFile @("ProductName", "ProductCode", "ProductVersion", "ProductLanguage") $msiInfo = Get-MSIFileInformation $msiFile @("ProductName", "ProductCode", "ProductVersion", "ProductLanguage", "UpgradeCode", "ALLUSERS")
if(-not $msiInfo) { return } if(-not $msiInfo) { return }
$fileEncryptionInfo = New-IntuneEncryptedFile $msiFile $tmpFile $fileEncryptionInfo = New-IntuneEncryptedFile $msiFile $tmpFile
[xml]$manifestXML = '<MobileMsiData MsiExecutionContext="Any" MsiRequiresReboot="false" MsiUpgradeCode="" MsiIsMachineInstall="true" MsiIsUserInstall="false" MsiIncludesServices="false" MsiContainsSystemRegistryKeys="false" MsiContainsSystemFolders="false"></MobileMsiData>' [xml]$manifestXML = '<MobileMsiData MsiExecutionContext="Any" MsiRequiresReboot="false" MsiUpgradeCode="" MsiIsMachineInstall="true" MsiIsUserInstall="false" MsiIncludesServices="false" MsiContainsSystemRegistryKeys="false" MsiContainsSystemFolders="false"></MobileMsiData>'
$manifestXML.MobileMsiData.MsiUpgradeCode = $msiInfo["ProductCode"] $manifestXML.MobileMsiData.MsiUpgradeCode = $msiInfo["UpgradeCode"]
if($msiInfo["ALLUSERS"] -eq 1)
{
$manifestXML.MobileMsiData.MsiExecutionContext = "System"
}
$appFileBody = @{ $appFileBody = @{
"@odata.type" = "#microsoft.graph.mobileAppContentFile" "@odata.type" = "#microsoft.graph.mobileAppContentFile"
@@ -109,11 +113,14 @@ function Copy-MSILOB
size = (Get-Item $msiFile).Length size = (Get-Item $msiFile).Length
sizeEncrypted = (Get-Item $tmpFile).Length sizeEncrypted = (Get-Item $tmpFile).Length
manifest = [Convert]::ToBase64String([System.Text.Encoding]::ASCII.GetBytes($manifestXML.OuterXml)) manifest = [Convert]::ToBase64String([System.Text.Encoding]::ASCII.GetBytes($manifestXML.OuterXml))
isDependency = $false
} }
Add-FileToIntuneApp $appId $appType $tmpFile $appFileBody Add-FileToIntuneApp $appId $appType $tmpFile $appFileBody
Remove-Item $tmpFile -Force Remove-Item $tmpFile -Force
$fileEncryptionInfo
} }
function Copy-iOSLOB function Copy-iOSLOB
@@ -149,6 +156,8 @@ function Copy-iOSLOB
Add-FileToIntuneApp $appId $appType $tmpFile $appFileBody Add-FileToIntuneApp $appId $appType $tmpFile $appFileBody
Remove-Item $tmpFile -Force Remove-Item $tmpFile -Force
$fileEncryptionInfo
} }
function Copy-AndroidLOB function Copy-AndroidLOB
@@ -185,6 +194,8 @@ function Copy-AndroidLOB
Add-FileToIntuneApp $appId $appType $tmpFile $appFileBody Add-FileToIntuneApp $appId $appType $tmpFile $appFileBody
Remove-Item $tmpFile -Force Remove-Item $tmpFile -Force
$fileEncryptionInfo
} }
function Copy-Win32LOBPackage function Copy-Win32LOBPackage
@@ -235,7 +246,7 @@ function Copy-Win32LOBPackage
$fileBody = @{ $fileBody = @{
"@odata.type" = "#microsoft.graph.mobileAppContentFile" "@odata.type" = "#microsoft.graph.mobileAppContentFile"
name = $DetectionXML.ApplicationInfo.FileName name = "IntunePackage.intunewin"
size = [int64]$DetectionXML.ApplicationInfo.UnencryptedContentSize size = [int64]$DetectionXML.ApplicationInfo.UnencryptedContentSize
sizeEncrypted = (Get-Item $tmpIntunewinFile).Length sizeEncrypted = (Get-Item $tmpIntunewinFile).Length
manifest = $null manifest = $null
@@ -246,45 +257,58 @@ function Copy-Win32LOBPackage
# Remove extracted inintunewin file # Remove extracted inintunewin file
Remove-Item $tmpIntunewinPath -Force -Recurse Remove-Item $tmpIntunewinPath -Force -Recurse
$fileEncryptionInfo
} }
function Add-FileToIntuneApp function Add-FileToIntuneApp
{ {
param($appId, $appType, $appFile, $fileBody) param($appId, $appType, $appFile, $fileBody)
$contentVersion = Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions" -HttpMethod POST -Content "{}" $contentVersion = Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions" -HttpMethod POST -Content "{}" -ODataMetadata "Minimal"
$contentVersionId = $contentVersion.id $contentVersionId = $contentVersion.id
$fileObj = Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions/$contentVersionId/files" -HttpMethod POST -Content (ConvertTo-Json $fileBody -Depth 5) $fileObj = Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions/$contentVersionId/files" -HttpMethod POST -Content (ConvertTo-Json $fileBody -Depth 5) -ODataMetadata "Minimal"
if(-not $fileObj) if(-not $fileObj)
{ {
return return
} }
Write-Log "File object created. ID: $($fileObj.id)"
# Wait for Azure storage URI # Wait for Azure storage URI
$fileObj = Wait-IntuneFileState "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions/$contentVersionId/files/$($fileObj.Id)" "AzureStorageUriRequest" $fileObj = Wait-IntuneFileState "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions/$contentVersionId/files/$($fileObj.Id)" "AzureStorageUriRequest"
if(-not $fileObj) if(-not $fileObj)
{ {
Write-Log "No File Object returned from commit. Upload failed" 3
return return
} }
# Upload file # Upload file
Send-IntuneFileToAzureStorage $fileObj.azureStorageUri $appFile "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions/$contentVersionId/files/$($fileObj.Id)" Send-IntuneFileToAzureStorage $fileObj.azureStorageUri $appFile "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions/$contentVersionId/files/$($fileObj.Id)" | Out-Null
# Commit the file # Commit the file
$reponse = Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions/$contentVersionId/files/$($fileObj.Id)/commit" -HttpMethod POST -Content (ConvertTo-Json $fileEncryptionInfo -Depth 5) Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions/$contentVersionId/files/$($fileObj.Id)/commit" -HttpMethod POST -Content (ConvertTo-Json $fileEncryptionInfo -Depth 5) | Out-Null
Wait-IntuneFileState "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions/$contentVersionId/files/$($fileObj.Id)" "CommitFile" Wait-IntuneFileState "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions/$contentVersionId/files/$($fileObj.Id)" "CommitFile" | Out-Null
$fiUpload = [IO.FileInfo]$appFile
# Commit the content version # Commit the content version
$commitAppBody = @{ $commitAppBody = @{
"@odata.type" = "#$appType" "@odata.type" = "#$appType"
committedContentVersion = $contentVersionId committedContentVersion = $contentVersionId
fileName = $fiUpload.Name
} }
$reponse = Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$appId" -HttpMethod PATCH -Content (ConvertTo-Json $commitAppBody -Depth 5) # if($fileBody.Name) {
# $fileUploadName = $fileBody.Name
# }
# else {
$fiUpload = [IO.FileInfo]$appFile
$fileUploadName = $fiUpload.Name
# }
$commitAppBody.Add("fileName",$fileUploadName)
Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$appId" -HttpMethod PATCH -Content (ConvertTo-Json $commitAppBody -Depth 5) | Out-Null
Write-Log "Upload finished for file $fileUploadName version $contentVersionId"
} }
function Wait-IntuneFileState function Wait-IntuneFileState
@@ -318,7 +342,7 @@ function Wait-IntuneFileState
return return
} }
Start-Sleep -s 5 Start-Sleep -Seconds 1
} }
if($succes -eq $false) if($succes -eq $false)
@@ -357,7 +381,7 @@ function Send-IntuneFileToAzureStorage
$ids += $id $ids += $id
$start = $chunk * $chunkSizeInBytes $start = $chunk * $chunkSizeInBytes
$length = [Math]::Min($chunkSizeInBytes, $fileSize - $start) $length = [Math]::Min([uint64]($chunkSizeInBytes), [uint64]($fileSize - $start))
$bytes = $reader.ReadBytes($length) $bytes = $reader.ReadBytes($length)
$currentChunk = $chunk + 1 $currentChunk = $chunk + 1
@@ -423,9 +447,17 @@ function Set-FinalizeAzureStorageUpload
} }
$xml += '</BlockList>' $xml += '</BlockList>'
$params = @{}
$proxyURI = Get-ProxyURI
if($proxyURI)
{
$params.Add("proxy", $proxyURI)
$params.Add("UseBasicParsing", $true)
}
try try
{ {
Invoke-RestMethod $uri -Method Put -Body $xml Invoke-RestMethod $uri -Method Put -Body $xml @params
} }
catch catch
{ {
@@ -457,12 +489,18 @@ function Write-AzureStorageChunk
$success = $false $success = $false
$retryCount = 0 $retryCount = 0
$params = @{}
$proxyURI = Get-ProxyURI
if($proxyURI)
{
$params.Add("proxy", $proxyURI)
}
while($true) while($true)
{ {
try try
{ {
$response = Invoke-WebRequest $uri -Method Put -Headers $headers -Body $encodedBody $response = Invoke-WebRequest $uri -Method Put -Headers $headers -Body $encodedBody -UseBasicParsing @params
if($retryCount -gt 0) if($retryCount -gt 0)
{ {
Write-Log "Chunk uploaded successfully" Write-Log "Chunk uploaded successfully"
@@ -622,3 +660,101 @@ function New-IntuneEncryptedFile
$fileEncryptionInfo $fileEncryptionInfo
} }
function Start-DecryptFile
{
param($sourceFile, $targetFile, $encryptionKey, $initializationVector)
if([IO.File]::Exists($targetFile))
{
$fi = [IO.FileInfo]$targetFile
$newName = $fi.Name + "_$((Get-Date).ToString("yyyyMMdd_HHmm"))" + $fi.Extension
$targetFile = $fi.DirectoryName + "\$newName"
Write-Log "Target file exists. Changing target file to $targetFile" 2
}
$bufferBlockSize = 1024 * 4
try
{
$aes = [System.Security.Cryptography.Aes]::Create()
$buffer = New-Object byte[] $bufferBlockSize
$bytesRead = 0
$targetStream = [System.IO.File]::Open($targetFile, [System.IO.FileMode]::Create, [System.IO.FileAccess]::ReadWrite, [System.IO.FileShare]::None)
try
{
$sourceStream = [System.IO.File]::Open($sourceFile, [System.IO.FileMode]::Open, [System.IO.FileAccess]::Read, [System.IO.FileShare]::None)
$decryptor = $aes.CreateDecryptor([Convert]::FromBase64String($encryptionKey), [Convert]::FromBase64String($initializationVector))
$decryptoStream = New-Object System.Security.Cryptography.CryptoStream -ArgumentList @($targetStream, $decryptor, [System.Security.Cryptography.CryptoStreamMode]::Write)
$sourceStream.Seek(48L, [System.IO.SeekOrigin]::Begin)
while (($bytesRead = $sourceStream.Read($buffer, 0, $bufferBlockSize)) -gt 0)
{
$decryptoStream.Write($buffer, 0, $bytesRead)
$decryptoStream.Flush()
}
$decryptoStream.FlushFinalBlock()
}
finally
{
if ($null -ne $decryptoStream) { $decryptoStream.Dispose() }
if ($null -ne $targetStream) { $targetStream.Dispose() }
if ($null -ne $decryptor) { $decryptor.Dispose() }
if ($null -ne $sourceStream) { $sourceStream.Dispose() }
}
}
finally
{
if ($null -ne $sourceStream) { $sourceStream.Dispose() }
if ($null -ne $aes) { $aes.Dispose() }
}
}
function Start-DownloadAppContent
{
param($obj, $destinationFile)
# Not use but kept for reference. File can be download but it will be encrypted
if([IO.File]::Exists($destinationFile))
{
try { [IO.File]::Delete($encryptionFile) }
catch {}
}
$appId = $obj.Id
$appInfo = Invoke-GraphRequest -Url "$($global:graphURL)/deviceAppManagement/mobileApps/$appId"
$appType = $appInfo.'@odata.type'.Trim('#')
#$contentVersions = Invoke-GraphRequest -Url "$($global:graphURL)/deviceAppManagement/mobileApps/$appId/$appType/contentVersions"
#$contentVerId = $contentVersions.Value[0].id
$contentVerId = $appInfo.committedContentVersion
$contentFiles = Invoke-GraphRequest "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions/$contentVerId/files"
$contentFile = Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions/$contentVerId/files/$($contentFiles.value[-1].Id)" -NoError
if(-not $contentFile)
{
foreach($file in $contentFiles.value)
{
if($contentFiles.value[-1].Id -eq $file.id) { continune }
# NOT happy about this. file objects are not always returned in the order of upload.
$contentFile = Invoke-GraphRequest -Url "/deviceAppManagement/mobileApps/$appId/$appType/contentVersions/$contentVerId/files/$($file.Id)" -NoError
if($contentFile)
{
break
}
}
}
Start-DownloadFile $contentFile.azureStorageUri $destinationFile
}
+2 -2
View File
@@ -22,7 +22,7 @@ $global:EMToolsViewObject = $null
function Get-ModuleVersion function Get-ModuleVersion
{ {
'1.0.3' '1.0.4'
} }
function Invoke-InitializeModule function Invoke-InitializeModule
@@ -82,7 +82,7 @@ function Add-EMToolsViewItem
Activating = { Invoke-EMToolsActivatingView } Activating = { Invoke-EMToolsActivatingView }
Authentication = (Get-MSALAuthenticationObject) Authentication = (Get-MSALAuthenticationObject)
Authenticate = { Invoke-EMToolsAuthenticateToMSAL } Authenticate = { Invoke-EMToolsAuthenticateToMSAL }
AppInfo = (Get-GraphAppInfo "EM" "d1ddf0e4-d672-4dae-b554-9d5bdfd93547") AppInfo = (Get-GraphAppInfo "EMAzureApp" "d1ddf0e4-d672-4dae-b554-9d5bdfd93547")
SaveSettings = { Invoke-EMSaveSettings } SaveSettings = { Invoke-EMSaveSettings }
Permissions = @() Permissions = @()
}) })
+301 -132
View File
@@ -10,7 +10,7 @@ This module manages Authentication for the application with MSAL. It is also res
#> #>
function Get-ModuleVersion function Get-ModuleVersion
{ {
'3.8.1' '3.9.2'
} }
$global:msalAuthenticator = $null $global:msalAuthenticator = $null
@@ -158,6 +158,10 @@ function Clear-MSALCurentUserVaiables
{ {
$global:MSALTenantId = $null $global:MSALTenantId = $null
$global:MSALGraphEnvironment = $null $global:MSALGraphEnvironment = $null
$script:jwtAccessToken = $null
$script:jwtIdToken = $null
} }
function Get-MSALCurrentApp function Get-MSALCurrentApp
@@ -223,14 +227,23 @@ function Get-MSALUserInfo
if($global:MSALToken) if($global:MSALToken)
{ {
Write-Log "Get current user" Write-Log "Get current user"
$tmpMe = MSGraph\Invoke-GraphRequest -Url "ME" -SkipAuthentication -ODataMetadata "Skip"
if($null -ne $tmpMe -and $tmpMe.creationType -ne "Invitation") if($script:jwtAccessToken.Payload.idtyp -ne "app")
{ {
### Only get user info from home tenant $tmpMe = MSGraph\Invoke-GraphRequest -Url "ME" -SkipAuthentication -ODataMetadata "Skip"
$global:Me = $tmpMe if($null -ne $tmpMe -and $tmpMe.creationType -ne "Invitation")
Write-Log "Get profile picture" {
$global:profilePhoto = "$($env:LOCALAPPDATA)\CloudAPIPowerShellManagement\$($global:Me.Id).jpeg" ### Only get user info from home tenant
MSGraph\Invoke-GraphRequest "me/photos/48x48/`$value" -OutFile $global:profilePhoto -SkipAuthentication -NoError | Out-Null $global:Me = $tmpMe
Write-Log "Get profile picture"
$global:profilePhoto = "$($env:LOCALAPPDATA)\CloudAPIPowerShellManagement\$($global:Me.Id).jpeg"
MSGraph\Invoke-GraphRequest "me/photos/48x48/`$value" -OutFile $global:profilePhoto -SkipAuthentication -NoError | Out-Null
}
}
else
{
$global:profilePhoto = $null
$global:me = $script:jwtAccessToken.Payload.app_displayname
} }
Write-Log "Get organization info" Write-Log "Get organization info"
@@ -535,12 +548,14 @@ function Add-MSALPrereq
Write-Log "Some MSAL features might not work!" 3 Write-Log "Some MSAL features might not work!" 3
Write-Log "This could happen if another version of MSAL.DLL was loaded beforethe script tried to load it" 3 Write-Log "This could happen if another version of MSAL.DLL was loaded beforethe script tried to load it" 3
$RequiredAssemblies.Add($fiLoaded.FullName) $RequiredAssemblies.Add($fiLoaded.FullName)
$script:msalFile = $fiLoaded.FullName
} }
else else
{ {
Write-Log "Using MSAL file $msalPath. Version: $($fi.VersionInfo.FileVersion)" Write-Log "Using MSAL file $msalPath. Version: $($fi.VersionInfo.FileVersion)"
[void][System.Reflection.Assembly]::LoadFile($msalPath) [void][System.Reflection.Assembly]::LoadFile($msalPath)
$RequiredAssemblies.Add($msalPath) $RequiredAssemblies.Add($msalPath)
$script:msalFile = $msalPath
} }
$RequiredAssemblies.Add('System.Security.dll') $RequiredAssemblies.Add('System.Security.dll')
@@ -598,6 +613,7 @@ function Connect-MSALClientApp
{ {
return return
} }
Add-MSALProxy $ClientApplicationBuilder
$script:MSALApp = $ClientApplicationBuilder.Build() $script:MSALApp = $ClientApplicationBuilder.Build()
} }
@@ -677,6 +693,43 @@ function Get-MsalAuthenticationToken
$authResult $authResult
} }
function Add-MSALProxy
{
param($appBuilder)
$proxy = Get-SettingValue "ProxyURI"
if($proxy)
{
Write-Log "Use proxy $proxy"
if(-not ("HttpFactoryWithProxy" -as [type]))
{
try
{
Write-Log "Add type HttpFactoryWithProxy"
[System.Collections.Generic.List[string]] $RequiredAssemblies = New-Object System.Collections.Generic.List[string]
$RequiredAssemblies.Add($script:msalFile)
$RequiredAssemblies.Add('System.Net.Http.dll')
$RequiredAssemblies.Add('System.Net.Primitives.dll')
Add-Type -Path ($global:AppRootFolder + "\CS\HttpFactoryWithProxy.cs") -ReferencedAssemblies $RequiredAssemblies
}
catch
{
Write-LogError "Failed to compile HttpFactoryWithProxy" $_.Exception
}
}
try
{
$hcf = [HttpFactoryWithProxy]::new($proxy)
[void] $appBuilder.WithHttpClientFactory($hcf)
}
catch
{
Write-LogError "Failed to set proxy for MSAL" $_.Exception
}
}
}
function Get-MSALLoginEnvironment function Get-MSALLoginEnvironment
{ {
$loginEnv = $script:lstAADEnvironments | Where value -eq (Get-Setting "" "MSALCloudType" "public") $loginEnv = $script:lstAADEnvironments | Where value -eq (Get-Setting "" "MSALCloudType" "public")
@@ -717,6 +770,8 @@ function Get-MSALApp
[void] $appBuilder.WithClientName("CloudAPIPowerShellManagement") [void] $appBuilder.WithClientName("CloudAPIPowerShellManagement")
[void] $appBuilder.WithClientVersion($PSVersionTable.PSVersion) [void] $appBuilder.WithClientVersion($PSVersionTable.PSVersion)
Add-MSALProxy $appBuilder
# Ceck if correct version... # Ceck if correct version...
#$appBuilder.WithMultiCloudSupport($true) #$appBuilder.WithMultiCloudSupport($true)
@@ -792,6 +847,42 @@ function Connect-MSALUser
Write-LogDebug "Authenticate" Write-LogDebug "Authenticate"
if($global:MainAppStarted -eq $false)
{
$script:AppLogin = (Get-SettingValue "GraphAzureAppLogin") -or ($global:TenantId -and $global:AzureAppId -and ($global:ClientSecret -or $global:ClientCert))
}
if($script:AppLogin)
{
if($global:MSALToken -and $global:MSALToken.ExpiresOn.LocalDateTime.Ticks -gt ((Get-Date).AddMinutes(-5)).Ticks)
{
return
}
# Get login info for silent job from settings
if(-not $global:AzureAppId) { $global:AzureAppId = Get-SettingValue "GraphAzureAppId" -TenantID $global:TenantId }
if(-not $global:ClientSecret -and -not $global:ClientCert) { $global:ClientSecret = Get-SettingValue "GraphAzureAppSecret" -TenantID $global:TenantId }
if(-not $global:ClientSecret -and -not $global:ClientCert) { $global:ClientCert = Get-SettingValue "GraphAzureAppCert" -TenantID $global:TenantId }
if($global:AzureAppId -and $global:ClientSecret -and $global:TenantId)
{
Connect-MSALClientApp $global:AzureAppId $global:TenantId -secret $global:ClientSecret
}
elseif($global:AzureAppId -and $global:ClientCert -and $global:TenantId)
{
Connect-MSALClientApp $global:AzureAppId $global:TenantId -certificate $global:ClientCert
}
else
{
Write-Log "Azure AppId, Tenant Id and Sercret/Cert must be specified for App logins" 3
}
Invoke-MSALAuthenticationUpdated $global:MSALToken
return
}
if($ShowMenu -eq $true -and ((Get-SettingValue "AzureADLoginMenu") -eq $true)) if($ShowMenu -eq $true -and ((Get-SettingValue "AzureADLoginMenu") -eq $true))
{ {
if((Show-MSALLoginMenu) -eq $false) { return } if((Show-MSALLoginMenu) -eq $false) { return }
@@ -1065,6 +1156,8 @@ function Connect-MSALUser
else { [void]$appBuilder.WithAuthority($global:MSALApp.Authority) } else { [void]$appBuilder.WithAuthority($global:MSALApp.Authority) }
if($global:appObj.RedirectUri) { [void]$appBuilder.WithRedirectUri($global:appObj.RedirectUri) } if($global:appObj.RedirectUri) { [void]$appBuilder.WithRedirectUri($global:appObj.RedirectUri) }
Add-MSALProxy $appBuilder
$app = $appBuilder.Build() $app = $appBuilder.Build()
if((Get-SettingValue "CacheMSALToken")) if((Get-SettingValue "CacheMSALToken"))
@@ -1091,9 +1184,17 @@ function Connect-MSALUser
'Content-Type' = 'application/json' 'Content-Type' = 'application/json'
'Authorization' = "Bearer " + $tmpResults.AccessToken 'Authorization' = "Bearer " + $tmpResults.AccessToken
'ExpiresOn' = $tmpResults.ExpiresOn 'ExpiresOn' = $tmpResults.ExpiresOn
} }
$ret = Invoke-RestMethod "https://management.azure.com/tenants?api-version=2020-01-01" -Headers $Headers $params = @{}
$proxyURI = Get-ProxyURI
if($proxyURI)
{
$params.Add("proxy", $proxyURI)
$params.Add("UseBasicParsing", $true)
}
$ret = Invoke-RestMethod "https://management.azure.com/tenants?api-version=2020-01-01" -Headers $Headers @params
if($ret) if($ret)
{ {
$script:AccessableTenants = $ret.Value $script:AccessableTenants = $ret.Value
@@ -1115,7 +1216,8 @@ function Connect-MSALUser
Save-Setting "" "LastLoggedOnUser" $authResult.Account.UserName Save-Setting "" "LastLoggedOnUser" $authResult.Account.UserName
Save-Setting "" "LastLoggedOnUserId" $authResult.Account.HomeAccountId.ObjectId Save-Setting "" "LastLoggedOnUserId" $authResult.Account.HomeAccountId.ObjectId
} }
Invoke-MSALAuthenticationUpdated $authResult
<#
Write-LogDebug "User, tenant or app has changed" Write-LogDebug "User, tenant or app has changed"
Get-MSALUserInfo Get-MSALUserInfo
if($authResult) if($authResult)
@@ -1123,9 +1225,26 @@ function Connect-MSALUser
Invoke-MSALCheckObjectViewAccess $authResult Invoke-MSALCheckObjectViewAccess $authResult
} }
Invoke-ModuleFunction "Invoke-GraphAuthenticationUpdated" Invoke-ModuleFunction "Invoke-GraphAuthenticationUpdated"
#>
} }
} }
function local:Invoke-MSALAuthenticationUpdated
{
param($authResult)
Write-LogDebug "User, tenant or app has changed"
$script:jwtAccessToken = Get-JWTtoken $global:MSALToken.AccessToken
$script:jwtIdToken = Get-JWTtoken $global:MSALToken.IdToken
Get-MSALUserInfo
if($authResult)
{
Invoke-MSALCheckObjectViewAccess $authResult
}
Invoke-ModuleFunction "Invoke-GraphAuthenticationUpdated"
}
function Start-MSALConsentPrompt function Start-MSALConsentPrompt
{ {
param([switch]$PassThru, $authToken) param([switch]$PassThru, $authToken)
@@ -1202,6 +1321,22 @@ function Invoke-MSALCheckObjectViewAccess
Set-XamlProperty $script:userEllipsGrid "lnkRequestConsent" "Visibility" "Visible" Set-XamlProperty $script:userEllipsGrid "lnkRequestConsent" "Visibility" "Visible"
} }
$accessToken = $null
if($authToken)
{
$accessToken = Get-JWTtoken $authToken.AccessToken
}
$curPermissions = $null
if($accessToken.Payload.idtyp -eq "app")
{
$curPermissions = $accessToken.Payload.roles
}
elseif($accessToken.Payload.scp)
{
$curPermissions = $accessToken.Payload.scp.Split(" ")
}
foreach($viewObjInfo in ($global:viewObjects | Where { $_.ViewInfo.AuthenticationID -eq "MSAL" })) foreach($viewObjInfo in ($global:viewObjects | Where { $_.ViewInfo.AuthenticationID -eq "MSAL" }))
{ {
$viewObjInfo = $global:viewObjects | Where { $_.ViewInfo.Id -eq $global:EMViewObject.Id } $viewObjInfo = $global:viewObjects | Where { $_.ViewInfo.Id -eq $global:EMViewObject.Id }
@@ -1210,10 +1345,8 @@ function Invoke-MSALCheckObjectViewAccess
{ {
if($authToken) if($authToken)
{ {
$accessToken = Get-JWTtoken $authToken.AccessToken if($curPermissions)
if($accessToken.Payload.scp)
{ {
$curPermissions = $accessToken.Payload.scp.Split(" ")
foreach($viewItem in $viewObjInfo.ViewItems) foreach($viewItem in $viewObjInfo.ViewItems)
{ {
$full = 0 $full = 0
@@ -1511,6 +1644,10 @@ function Get-MSALProfileEllipse
{ {
$initials = "$($global:me.userPrincipalName[0])".ToUpper() $initials = "$($global:me.userPrincipalName[0])".ToUpper()
} }
elseif($script:jwtAccessToken.Payload.idtyp -eq "app")
{
$initials = "APP"
}
$grd = Get-MSALUserPhotoEllips -size $size -fontSize $fontSize -Color $Color $grd = Get-MSALUserPhotoEllips -size $size -fontSize $fontSize -Color $Color
@@ -1534,8 +1671,15 @@ function Get-MSALProfileEllipse
$global:grdProfileInfo.Tag = $grd $global:grdProfileInfo.Tag = $grd
$grd.Tag = $global:grdProfileInfo $grd.Tag = $global:grdProfileInfo
Set-XamlProperty $global:grdProfileInfo "txtOrganization" "Text" $global:Organization.displayName Set-XamlProperty $global:grdProfileInfo "txtOrganization" "Text" $global:Organization.displayName
Set-XamlProperty $global:grdProfileInfo "txtUsername" "Text" $global:me.displayName if($script:jwtAccessToken.Payload.idtyp -eq "app")
Set-XamlProperty $global:grdProfileInfo "txtLogonName" "Text" $global:me.userPrincipalName {
Set-XamlProperty $global:grdProfileInfo "txtUsername" "Text" "App Login"
}
else
{
Set-XamlProperty $global:grdProfileInfo "txtUsername" "Text" $global:me.displayName
Set-XamlProperty $global:grdProfileInfo "txtLogonName" "Text" $global:me.userPrincipalName
}
$global:tokenInfo = Get-JWTtoken $global:MSALToken.AccessToken $global:tokenInfo = Get-JWTtoken $global:MSALToken.AccessToken
if($global:tokenInfo) if($global:tokenInfo)
@@ -1560,140 +1704,148 @@ function Get-MSALProfileEllipse
$profileGrid.Children.Add($tmpObj) | Out-Null $profileGrid.Children.Add($tmpObj) | Out-Null
} }
if($script:jwtAccessToken.Payload.idtyp -eq "app")
{
$tmpObj.Visibility = "Collapsed"
}
$global:grdProfileInfo.Add_Loaded({param($obj, $e) $global:grdProfileInfo.Add_Loaded({param($obj, $e)
$point = $obj.Tag.TransformToAncestor($window).Transform([System.Windows.Point]::new(0,0)); $point = $obj.Tag.TransformToAncestor($window).Transform([System.Windows.Point]::new(0,0));
[System.Windows.Controls.Canvas]::SetLeft($obj,($point.X - $obj.ActualWidth + $obj.Tag.ActualWidth)) [System.Windows.Controls.Canvas]::SetLeft($obj,($point.X - $obj.ActualWidth + $obj.Tag.ActualWidth))
[System.Windows.Controls.Canvas]::SetTop($obj,($point.Y + $obj.Tag.ActualHeight)) [System.Windows.Controls.Canvas]::SetTop($obj,($point.Y + $obj.Tag.ActualHeight))
}) })
######################################################################################################### if($script:jwtAccessToken.Payload.idtyp -ne "app")
### Show / Hide consent button
#########################################################################################################
$script:userEllipsGrid = $tmpObj
if(($script:missingPermissions | measure).Count -eq 0)
{ {
Set-XamlProperty $script:userEllipsGrid "lnkRequestConsent" "Visibility" "Collapsed" #########################################################################################################
} ### Show / Hide consent button
Add-XamlEvent $script:userEllipsGrid "lnkRequestConsent" "add_Click" { #########################################################################################################
Start-MSALConsentPrompt $script:userEllipsGrid = $tmpObj
} if(($script:missingPermissions | measure).Count -eq 0)
$otherLogins = $global:grdProfileInfo.FindName("grdCachedAccounts")
#########################################################################################################
### Add cached users
#########################################################################################################
if((Get-SettingValue "SortAccountList") -eq $true)
{
$accounts = $global:MSALAccounts | Sort -Property Username
}
else
{
$accounts = $global:MSALAccounts
}
foreach($account in $accounts)
{
# Skip current logged on user
if($global:MSALToken.Account.Username -eq $Account.Username -or
$global:MSALToken.Account.HomeAccountId.ObjectId -eq $Account.HomeAccountId.ObjectId) { continue }
Add-CachedUser $account $otherLogins
}
#########################################################################################################
### Add login with another user
#########################################################################################################
$grdAccount = [System.Windows.Controls.Grid]::new()
$cd = [System.Windows.Controls.ColumnDefinition]::new()
$grdAccount.ColumnDefinitions.Add($cd)
$cd = [System.Windows.Controls.ColumnDefinition]::new()
$cd.Width = [double]::NaN
$grdAccount.ColumnDefinitions.Add($cd)
$icon = Get-XamlObject ($global:AppRootFolder + "\Xaml\Icons\Logon.xaml")
$icon.Width = 24
$icon.Height = 24
$icon.Margin = "0,0,5,0"
$grdAccount.Children.Add($icon) | Out-Null
$lbObj = [Windows.Markup.XamlReader]::Parse("<TextBlock $wpfNS>Sign in with a different account</TextBlock>")
$lbObj.SetValue([System.Windows.Controls.Grid]::ColumnProperty,1)
#$lbObj.Style = $window.TryFindResource("HoverUnderlineStyle")
$grdAccount.Children.Add($lbObj) | Out-Null
$lnkButton = [System.Windows.Controls.Button]::new()
$lnkButton.Content = $grdAccount
$lnkButton.Style = $window.TryFindResource("LinkButton")
$lnkButton.Margin = "0,5,0,0"
$lnkButton.Cursor = "Hand"
$lnkButton.Tag = $account
$lnkButton.add_Click({
Write-Status "Logging in..."
Hide-Popup
Connect-MSALUser -Interactive -ShowMenu
if($global:curObjectType)
{ {
Show-GraphObjects Set-XamlProperty $script:userEllipsGrid "lnkRequestConsent" "Visibility" "Collapsed"
}
Add-XamlEvent $script:userEllipsGrid "lnkRequestConsent" "add_Click" {
Start-MSALConsentPrompt
} }
Write-Status ""
})
$otherLogins = $global:grdProfileInfo.FindName("grdLoginAccount") $otherLogins = $global:grdProfileInfo.FindName("grdCachedAccounts")
Add-GridObject $otherLogins $lnkButton
$otherLogins = $global:grdProfileInfo.FindName("grdTenantAccounts")
if(($script:AccessableTenants | measure).Count -gt 1)
{
######################################################################################################### #########################################################################################################
### Add switch to another tenant ### Add cached users
######################################################################################################### #########################################################################################################
$lbObj = [Windows.Markup.XamlReader]::Parse("<TextBlock $wpfNS><Bold>Tenants:</Bold></TextBlock>") if((Get-SettingValue "SortAccountList") -eq $true)
$lbObj.Margin = "0,5,0,0"
Add-GridObject $otherLogins $lbObj
foreach($tenant in $script:AccessableTenants)
{ {
try $accounts = $global:MSALAccounts | Sort -Property Username
}
else
{
$accounts = $global:MSALAccounts
}
foreach($account in $accounts)
{
# Skip current logged on user
if($global:MSALToken.Account.Username -eq $Account.Username -or
$global:MSALToken.Account.HomeAccountId.ObjectId -eq $Account.HomeAccountId.ObjectId) { continue }
Add-CachedUser $account $otherLogins
}
#########################################################################################################
### Add login with another user
#########################################################################################################
$grdAccount = [System.Windows.Controls.Grid]::new()
$cd = [System.Windows.Controls.ColumnDefinition]::new()
$grdAccount.ColumnDefinitions.Add($cd)
$cd = [System.Windows.Controls.ColumnDefinition]::new()
$cd.Width = [double]::NaN
$grdAccount.ColumnDefinitions.Add($cd)
$icon = Get-XamlObject ($global:AppRootFolder + "\Xaml\Icons\Logon.xaml")
$icon.Width = 24
$icon.Height = 24
$icon.Margin = "0,0,5,0"
$grdAccount.Children.Add($icon) | Out-Null
$lbObj = [Windows.Markup.XamlReader]::Parse("<TextBlock $wpfNS>Sign in with a different account</TextBlock>")
$lbObj.SetValue([System.Windows.Controls.Grid]::ColumnProperty,1)
#$lbObj.Style = $window.TryFindResource("HoverUnderlineStyle")
$grdAccount.Children.Add($lbObj) | Out-Null
$lnkButton = [System.Windows.Controls.Button]::new()
$lnkButton.Content = $grdAccount
$lnkButton.Style = $window.TryFindResource("LinkButton")
$lnkButton.Margin = "0,5,0,0"
$lnkButton.Cursor = "Hand"
$lnkButton.Tag = $account
$lnkButton.add_Click({
Write-Status "Logging in..."
Hide-Popup
Connect-MSALUser -Interactive -ShowMenu
if($global:curObjectType)
{ {
$lbObj = [Windows.Markup.XamlReader]::Parse("<TextBlock $wpfNS HorizontalAlignment=`"Stretch`"><Bold>$($tenant.DisplayName)</Bold><LineBreak/>$($tenant.defaultDomain)<LineBreak/>$($tenant.tenantId)</TextBlock>") Show-GraphObjects
}
Write-Status ""
})
if($tenant.tenantId -ne $global:MSALToken.TenantId) $otherLogins = $global:grdProfileInfo.FindName("grdLoginAccount")
Add-GridObject $otherLogins $lnkButton
$otherLogins = $global:grdProfileInfo.FindName("grdTenantAccounts")
if(($script:AccessableTenants | measure).Count -gt 1)
{
#########################################################################################################
### Add switch to another tenant
#########################################################################################################
$lbObj = [Windows.Markup.XamlReader]::Parse("<TextBlock $wpfNS><Bold>Tenants:</Bold></TextBlock>")
$lbObj.Margin = "0,5,0,0"
Add-GridObject $otherLogins $lbObj
foreach($tenant in $script:AccessableTenants)
{
try
{ {
$lbObj.Style = $window.TryFindResource("HoverUnderlineStyleWithBackground") $lbObj = [Windows.Markup.XamlReader]::Parse("<TextBlock $wpfNS HorizontalAlignment=`"Stretch`"><Bold>$($tenant.DisplayName)</Bold><LineBreak/>$($tenant.defaultDomain)<LineBreak/>$($tenant.tenantId)</TextBlock>")
$lbObj.HorizontalAlignment = "Stretch"
$lnkButton = [System.Windows.Controls.Button]::new()
$lnkButton.Content = $lbObj
$lnkButton.HorizontalAlignment = "Stretch"
$lnkButton.Style = $window.TryFindResource("ContentButton")
$lnkButton.Margin = "0,5,0,0"
$lnkButton.Cursor = "Hand"
$lnkButton.Tag = $tenant
$lnkButton.add_Click({
Write-Status "Logging in to $($this.Tag.DisplayName)"
# Set authority to selected tenant
$global:MSALTenantId = $this.Tag.tenantId
Hide-Popup
Connect-MSALUser -Account ($global:MSALAccounts | Where UserName -eq $global:MSALToken.Account.Username)
if($global:curObjectType) if($tenant.tenantId -ne $global:MSALToken.TenantId)
{ {
Show-GraphObjects $lbObj.Style = $window.TryFindResource("HoverUnderlineStyleWithBackground")
} $lbObj.HorizontalAlignment = "Stretch"
Write-Status "" $lnkButton = [System.Windows.Controls.Button]::new()
}) $lnkButton.Content = $lbObj
Add-GridObject $otherLogins $lnkButton $lnkButton.HorizontalAlignment = "Stretch"
} $lnkButton.Style = $window.TryFindResource("ContentButton")
else $lnkButton.Margin = "0,5,0,0"
{ $lnkButton.Cursor = "Hand"
$lbObj.Background = $window.TryFindResource("SelectedRowBackgroundColor") $lnkButton.Tag = $tenant
$lbObj.Margin = "0,5,0,0" $lnkButton.add_Click({
Add-GridObject $otherLogins $lbObj Write-Status "Logging in to $($this.Tag.DisplayName)"
# Set authority to selected tenant
$global:MSALTenantId = $this.Tag.tenantId
Hide-Popup
Connect-MSALUser -Account ($global:MSALAccounts | Where UserName -eq $global:MSALToken.Account.Username)
if($global:curObjectType)
{
Show-GraphObjects
}
Write-Status ""
})
Add-GridObject $otherLogins $lnkButton
}
else
{
$lbObj.Background = $window.TryFindResource("SelectedRowBackgroundColor")
$lbObj.Margin = "0,5,0,0"
Add-GridObject $otherLogins $lbObj
}
} }
catch {}
} }
catch {}
} }
} }
@@ -1756,6 +1908,11 @@ function Get-MSALProfileEllipse
Show-GraphObjects Show-GraphObjects
} }
} }
if($script:jwtAccessToken.Payload.idtyp -eq "app")
{
Set-XamlProperty $tmpObj "lnkLogout" "Visibility" "Collapsed"
}
} }
catch { catch {
Write-LogError "Failed to create profile information object. Error: " $_.Exception Write-LogError "Failed to create profile information object. Error: " $_.Exception
@@ -1931,12 +2088,21 @@ function Get-MSALMissingScopes
$script:missingPermissions = @() $script:missingPermissions = @()
if($script:jwtAccessToken.Payload.idtyp -eq "app")
{
$curScopes = $script:jwtAccessToken.Payload.roles
}
else
{
$curScopes = $authToken.Scopes
}
foreach($scope in $reqScopes) foreach($scope in $reqScopes)
{ {
$tmpScope = $scope.Split('/')[-1] $tmpScope = $scope.Split('/')[-1]
if($tmpScope -eq ".default") { continue } if($tmpScope -eq ".default") { continue }
if($authToken.Scopes -contains $tmpScope) { continue } if($curScopes -contains $tmpScope) { continue }
if(($authToken.Scopes -like "*/$tmpScope")) { continue } if(($curScopes -like "*/$tmpScope")) { continue }
$arrTemp = $tmpScope.Split(".") $arrTemp = $tmpScope.Split(".")
if($arrTemp[1] -eq "Read") if($arrTemp[1] -eq "Read")
{ {
@@ -1960,6 +2126,9 @@ function Show-MSALDecodedToken {
$tokenData, $tokenData,
$title $title
) )
if(-not $tokenData.Header) { return }
$tokenArr = @() $tokenArr = @()
foreach($prop in ($tokenData.Header | GM | Where MemberType -eq NoteProperty)) foreach($prop in ($tokenData.Header | GM | Where MemberType -eq NoteProperty))
{ {
+211 -71
View File
@@ -10,7 +10,7 @@ This module manages Microsoft Grap fuctions like calling APIs, managing graph ob
#> #>
function Get-ModuleVersion function Get-ModuleVersion
{ {
'3.8.1' '3.9.2'
} }
$global:MSGraphGlobalApps = @( $global:MSGraphGlobalApps = @(
@@ -183,6 +183,14 @@ function Invoke-InitializeModule
Description = "Certificate for Azure App" Description = "Certificate for Azure App"
}) "GraphSilent" }) "GraphSilent"
Add-SettingsObject (New-Object PSObject -Property @{
Title = "Login with App in UI (Preview)"
Key = "GraphAzureAppLogin"
Type = "Boolean"
DefaultValue = $false
Description = "Login with specified app in the UI. Note: Change will require app restart"
}) "GraphSilent"
Add-SettingsObject (New-Object PSObject -Property @{ Add-SettingsObject (New-Object PSObject -Property @{
Title = "Refresh Objects after copy" Title = "Refresh Objects after copy"
Key = "RefreshObjectsAfterCopy" Key = "RefreshObjectsAfterCopy"
@@ -214,6 +222,15 @@ function Invoke-InitializeModule
DefaultValue = $false DefaultValue = $false
Description = "Expand assignments when listing objects. This can be used in custom columns based on assignment info" Description = "Expand assignments when listing objects. This can be used in custom columns based on assignment info"
}) "GraphGeneral" }) "GraphGeneral"
Add-SettingsObject (New-Object PSObject -Property @{
Title = "Use Graph 1.0 (Not Recommended)"
Key = "UseGraphV1"
Type = "Boolean"
DefaultValue = $false
Description = "This will use production verionof graph, v1.0. Note: Thot officially supported since this can have unpredicted results. Some parts will require Beta version of Graph."
}) "GraphGeneral"
} }
function Get-GraphAppInfo function Get-GraphAppInfo
@@ -270,7 +287,7 @@ function Invoke-SettingsUpdated
function Initialize-GraphSettings function Initialize-GraphSettings
{ {
$script:defaultVersion = ""
} }
function Invoke-GraphRequest function Invoke-GraphRequest
@@ -297,7 +314,7 @@ function Invoke-GraphRequest
$ODataMetadata = "full", # full, minimal, none or skip $ODataMetadata = "full", # full, minimal, none or skip
[ValidateSet("beta","v1.0")] [ValidateSet("beta","v1.0")]
$GraphVersion = "beta", $GraphVersion = "",
[switch] [switch]
$AllPages, $AllPages,
@@ -317,6 +334,22 @@ function Invoke-GraphRequest
Connect-MSALUser Connect-MSALUser
} }
if(-not $GraphVersion)
{
if(-not $script:defaultVersion)
{
if((Get-SettingValue "UseGraphV1") -eq $true)
{
$script:defaultVersion = "v1.0"
}
else
{
$script:defaultVersion = "beta"
}
}
$GraphVersion = $script:defaultVersion
}
$params = @{} $params = @{}
$requestId = [Guid]::NewGuid().guid $requestId = [Guid]::NewGuid().guid
@@ -394,6 +427,13 @@ function Invoke-GraphRequest
$url = "$($url.Trim())`$top=$($PageSize)" $url = "$($url.Trim())`$top=$($PageSize)"
} }
$proxyURI = Get-ProxyURI
if($proxyURI)
{
$params.Add("proxy", $proxyURI)
$params.Add("UseBasicParsing", $true)
}
$ret = $null $ret = $null
$retryCount = 0 $retryCount = 0
@@ -819,6 +859,7 @@ function Show-GraphObjects
if($ctrl.Name -eq "btnDelete") if($ctrl.Name -eq "btnDelete")
{ {
$allowDelete = Get-SettingValue "EMAllowDelete" $allowDelete = Get-SettingValue "EMAllowDelete"
if($global:currentViewObject.ViewInfo.AllowDelete -eq $false) { $allowDelete = $false }
$ctrl.Visibility = (?: ($allowDelete -eq $true) "Visible" "Collapsed") $ctrl.Visibility = (?: ($allowDelete -eq $true) "Visible" "Collapsed")
} }
elseif(-not $global:curObjectType.ShowButtons -or ($global:curObjectType.ShowButtons | Where-Object { $ctrl.Name -like "*$($_)" } )) elseif(-not $global:curObjectType.ShowButtons -or ($global:curObjectType.ShowButtons | Where-Object { $ctrl.Name -like "*$($_)" } ))
@@ -1027,6 +1068,12 @@ function Get-GraphMetaData
[void][System.Reflection.Assembly]::LoadWithPartialName("System.Web.Extensions") [void][System.Reflection.Assembly]::LoadWithPartialName("System.Web.Extensions")
$wc = New-Object System.Net.WebClient $wc = New-Object System.Net.WebClient
$wc.Encoding = [System.Text.Encoding]::UTF8 $wc.Encoding = [System.Text.Encoding]::UTF8
$proxyURI = Get-ProxyURI
if($proxyURI)
{
$wc.Proxy = $proxyURI
}
try try
{ {
[xml]$global:metaDataXML = $wc.DownloadString($url) [xml]$global:metaDataXML = $wc.DownloadString($url)
@@ -1670,6 +1717,7 @@ function Show-GraphImportForm
$importedObjectsCurType = 0 $importedObjectsCurType = 0
$navigationPropObjects = @() $navigationPropObjects = @()
$arrImportedObjects = @()
foreach ($fileObj in $filesToImport) foreach ($fileObj in $filesToImport)
{ {
if($allowUpdate -and $global:cbImportType.SelectedValue -ne "alwaysImport" -and (Reset-GraphObject $fileObj $global:dgObjects.ItemsSource)) if($allowUpdate -and $global:cbImportType.SelectedValue -ne "alwaysImport" -and (Reset-GraphObject $fileObj $global:dgObjects.ItemsSource))
@@ -1685,9 +1733,15 @@ function Show-GraphImportForm
ImportedObject = $importedObj ImportedObject = $importedObj
} }
} }
$arrImportedObjects += $importedObj
$importedObjectsCurType++ $importedObjectsCurType++
} }
if($global:curObjectType.PostFilesImportCommand)
{
& $global:curObjectType.PostFilesImportCommand $global:curObjectType $arrImportedObjects $filesToImport
}
if($importedObjectsCurType -gt 0 -and $global:LoadedDependencyObjects -is [HashTable] -and $global:LoadedDependencyObjects.ContainsKey($global:curObjectType.Id)) if($importedObjectsCurType -gt 0 -and $global:LoadedDependencyObjects -is [HashTable] -and $global:LoadedDependencyObjects.ContainsKey($global:curObjectType.Id))
{ {
Write-Log "Remove $($global:curObjectType.Title) from dependency cache" Write-Log "Remove $($global:curObjectType.Title) from dependency cache"
@@ -1856,7 +1910,6 @@ function Show-GraphBulkImportForm
function Start-GraphObjectImport function Start-GraphObjectImport
{ {
Write-Status "Import objects" -Block Write-Status "Import objects" -Block
Write-Log "****************************************************************" Write-Log "****************************************************************"
Write-Log "Start bulk import" Write-Log "Start bulk import"
@@ -1906,6 +1959,8 @@ function Start-GraphObjectImport
$importedObjectsCurType = 0 $importedObjectsCurType = 0
$arrImportedObjects = @()
foreach ($fileObj in @($filesToImport)) foreach ($fileObj in @($filesToImport))
{ {
$objName = Get-GraphObjectName $fileObj.Object $item.ObjectType $objName = Get-GraphObjectName $fileObj.Object $item.ObjectType
@@ -1929,11 +1984,17 @@ function Start-GraphObjectImport
ImportedObject = $importedObj ImportedObject = $importedObj
} }
} }
$arrImportedObjects = $importedObj
$importedObjects++ $importedObjects++
$importedObjectsCurType++ $importedObjectsCurType++
} }
if($item.ObjectType.PostFilesImportCommand)
{
& $item.ObjectType.PostFilesImportCommand $item.ObjectType $arrImportedObjects $filesToImport
}
if($importedObjectsCurType -gt 0 -and $global:LoadedDependencyObjects -is [HashTable] -and $global:LoadedDependencyObjects.ContainsKey($item.ObjectType.Id)) if($importedObjectsCurType -gt 0 -and $global:LoadedDependencyObjects -is [HashTable] -and $global:LoadedDependencyObjects.ContainsKey($item.ObjectType.Id))
{ {
Write-Log "Remove $($item.ObjectType.Title) from dependency cache" Write-Log "Remove $($item.ObjectType.Title) from dependency cache"
@@ -2229,6 +2290,11 @@ function Import-GraphFile
Import-GraphObjectAssignment $newObj $file.ObjectType $objClone.Assignments $file.FileInfo.FullName | Out-Null Import-GraphObjectAssignment $newObj $file.ObjectType $objClone.Assignments $file.FileInfo.FullName | Out-Null
} }
if($newObj)
{
$file | Add-Member -NotePropertyName "ImportedObject" -NotePropertyValue $newObj
}
if($PassThru -eq $true -and $newObj) if($PassThru -eq $true -and $newObj)
{ {
$newObj $newObj
@@ -2247,9 +2313,9 @@ function Reset-GraphObject
$nameProp = ?? $fileObj.ObjectType.NameProperty "displayName" $nameProp = ?? $fileObj.ObjectType.NameProperty "displayName"
$curObject = $objectList | Where { $_.Object.$nameProp -eq $fileObj.Object.$nameProp -and $_.Object.'@OData.Type' -eq $fileObj.Object.'@OData.Type' } $curObject = $objectList | Where { $_.Object.$nameProp -eq $fileObj.Object.$nameProp -and $_.Object.'@OData.Type' -eq $fileObj.Object.'@OData.Type' }
if($global:cbImportType.SelectedValue -eq "skipIfExist" -and ($curObject | measure).Count -gt 0) if($global:cbImportType.SelectedValue -eq "skipIfExist" -and ($curObject | measure).Count -gt 0 -and $fileObj.ObjectType.AlwaysImport -ne $true)
{ {
Write-Log "Objects with name $($fileObj.Object.$nameProp) already exists. Object will not be imported" Write-Log "Object with name $($fileObj.Object.$nameProp) already exists. Object will not be imported"
return $true return $true
} }
elseif(($curObject | measure).Count -gt 1) elseif(($curObject | measure).Count -gt 1)
@@ -2259,7 +2325,12 @@ function Reset-GraphObject
} }
elseif(($curObject | measure).Count -eq 1) elseif(($curObject | measure).Count -eq 1)
{ {
Write-Log "Update $((Get-GraphObjectName $fileObj.Object $fileObj.ObjectType)) with id $($curObject.Object.Id)" $idInfo = ""
if([String]::IsNullOrEmpty($curObject.Object.Id) -eq $false)
{
$idInfo = " with id $($curObject.Object.Id)"
}
Write-Log "Update $((Get-GraphObjectName $fileObj.Object $fileObj.ObjectType))$idInfo"
$objectType = $fileObj.ObjectType $objectType = $fileObj.ObjectType
# Clone the object before removing properties # Clone the object before removing properties
@@ -2491,25 +2562,36 @@ function Set-ScopeTags
else { return } else { return }
$scopesIds = @() $scopesIds = @()
$loadedScopeTags = $global:LoadedDependencyObjects["ScopeTags"] if($global:chkReplaceDependencyIDs.IsChecked -eq $false -and $global:chkReplaceDependencyIDs.IsEnabled -eq $false)
$usingDefault = (($obj."$scopeTagProperty" | measure).Count -eq 1 -and ($obj."$scopeTagProperty")[0] -eq "0")
if($loadedScopeTags -and $global:chkImportScopes.IsChecked -eq $true -and $usingDefault -eq $false -and $loadedScopeTags)
{ {
foreach($scopeId in $obj."$scopeTagProperty") if($global:chkImportScopes.IsChecked -eq $true)
{ {
if($scopeId -eq 0) { $scopesIds += "0"; continue } # Add default $scopesIds += $obj.$scopeTagProperty
}
}
else
{
$loadedScopeTags = $global:LoadedDependencyObjects["ScopeTags"]
$usingDefault = (($obj."$scopeTagProperty" | measure).Count -eq 1 -and ($obj."$scopeTagProperty")[0] -eq "0")
if($loadedScopeTags -and $global:chkImportScopes.IsChecked -eq $true -and $usingDefault -eq $false -and $loadedScopeTags)
{
foreach($scopeId in $obj."$scopeTagProperty")
{
if($scopeId -eq 0) { $scopesIds += "0"; continue } # Add default
$scopeMigObj = $loadedScopeTags | Where OriginalId -eq $scopeId $scopeMigObj = $loadedScopeTags | Where OriginalId -eq $scopeId
if($scopeMigObj -and $scopeMigObj.Id) if($scopeMigObj -and $scopeMigObj.Id)
{ {
$scopesIds += "$($scopeMigObj.Id)" $scopesIds += "$($scopeMigObj.Id)"
} }
elseif($scopeMigObj) elseif($scopeMigObj)
{ {
Write-Log "Could not find a ScopeTag for exported Id '$($obj.Id)' ($($scopeMigObj.Name)). Make sure all ScopeTags are imported into the environment" 2 Write-Log "Could not find a ScopeTag for exported Id '$($obj.Id)' ($($scopeMigObj.Name)). Make sure all ScopeTags are imported into the environment" 2
}
} }
} }
} }
if($scopesIds.Count -eq 0) if($scopesIds.Count -eq 0)
{ {
$scopesIds += "0" # Import with Default ScopeTag as default. $scopesIds += "0" # Import with Default ScopeTag as default.
@@ -2538,7 +2620,6 @@ function Add-GraphMigrationInfo
if($objType -eq "#microsoft.graph.groupAssignmentTarget" -or if($objType -eq "#microsoft.graph.groupAssignmentTarget" -or
$objType -eq "#microsoft.graph.exclusionGroupAssignmentTarget") $objType -eq "#microsoft.graph.exclusionGroupAssignmentTarget")
{ {
#Add-GroupMigrationObject $objInfo.groupid
Add-GraphMigrationObject $objInfo.groupid "/groups" "Group" Add-GraphMigrationObject $objInfo.groupid "/groups" "Group"
} }
elseif($objType -eq "#microsoft.graph.allLicensedUsersAssignmentTarget" -or elseif($objType -eq "#microsoft.graph.allLicensedUsersAssignmentTarget" -or
@@ -2660,13 +2741,13 @@ function Add-GraphMigrationObject
if(-not $graphObj) if(-not $graphObj)
{ {
# Get object info # Get object info
$graphObj = Invoke-GraphRequest "$($grapAPI)/$objId" -ODataMetadata "none" $graphObj = Invoke-GraphRequest "$($grapAPI)/$objId" -ODataMetadata "none" -NoError
} }
if($graphObj) if($graphObj)
{ {
# Add object to cache # Add object to cache
if($global:AADObjectCache.ContainsKey($objId) -eq $false) { $global:AADObjectCache.Add($objId, $ugraphObjserObj) } if($global:AADObjectCache.ContainsKey($objId) -eq $false) { $global:AADObjectCache.Add($objId, $graphObj ) }
# Add object to migration file # Add object to migration file
if((Add-GraphMigrationObjectToFile $graphObj $path $objTypeName)) if((Add-GraphMigrationObjectToFile $graphObj $path $objTypeName))
@@ -2681,6 +2762,10 @@ function Add-GraphMigrationObject
} }
} }
} }
else
{
Write-Log "No $objTypeName found with ID $($groupId). It might be deleted." 2
}
} }
function Get-GraphMigrationObject function Get-GraphMigrationObject
@@ -2806,14 +2891,15 @@ function Get-GraphMigrationObjectsFromFile
{ {
if($migObj.Type -like "*group*") if($migObj.Type -like "*group*")
{ {
$obj = (Invoke-GraphRequest "/groups?`$filter=displayName eq '$($migObj.DisplayName)'").Value $migTableGroupName = $migObj.DisplayName.Trim()
$obj = (Invoke-GraphRequest "/groups?`$filter=displayName eq '$($migTableGroupName)'").Value
if(-not $obj) if(-not $obj)
{ {
$groupFi = $null $groupFi = $null
if($global:GraphMigrationTable) if($global:GraphMigrationTable)
{ {
$fi = [IO.FileInfo]$global:GraphMigrationTable $fi = [IO.FileInfo]$global:GraphMigrationTable
$groupFi = [IO.FileInfo]($fi.DirectoryName + "\Groups\$((Remove-InvalidFileNameChars $migObj.DisplayName)).json") $groupFi = [IO.FileInfo]($fi.DirectoryName + "\Groups\$((Remove-InvalidFileNameChars $migTableGroupName)).json")
} }
if($groupFi.Exists -eq $true) if($groupFi.Exists -eq $true)
@@ -2830,31 +2916,47 @@ function Get-GraphMigrationObjectsFromFile
Remove-Property $groupObj $prop.Name Remove-Property $groupObj $prop.Name
} }
$groupObj.displayName = $groupObj.displayName.Trim()
$groupJson = ConvertTo-Json $groupObj -Depth 50 $groupJson = ConvertTo-Json $groupObj -Depth 50
} }
else else
{ {
Write-Log "No group object found for $($migObj.DisplayName). Creating a cloud group with default settings" 2 $groupName = $migTableGroupName
Write-Log "No group object found for $groupName. Creating a cloud group with default settings" 2
$dateStr = ((Get-Date).ToString("yyMMddHHmmss"))
if(($groupName.Length + $dateStr.Length) -gt 64)
{
$nickName = $groupName.Substring(0,(64-$dateStr.Length))
}
else
{
$nickName = $groupName
}
$nickName = $nickName + $dateStr
$groupJson = @" $groupJson = @"
{ {
"displayName": "$($migObj.DisplayName)", "displayName": "$($groupName)",
"groupTypes": [
],
"mailEnabled": false, "mailEnabled": false,
"mailNickname" "NotSet" "mailNickname": "$($nickName)",
"securityEnabled": true "securityEnabled": true
} }
"@ "@
} }
Write-Log "Create AAD Group $($migObj.DisplayName)" Write-Log "Create AAD Group $($migTableGroupName)"
$obj = Invoke-GraphRequest "/groups" -HttpMethod "POST" -Content $groupJson $obj = Invoke-GraphRequest "/groups" -HttpMethod "POST" -Content $groupJson
} }
$global:MigrationTableCache += (New-Object PSObject -Property @{
OriginalId = $migObj.Id if($obj)
Id = $obj.Id {
Type = $migObj.Type $global:MigrationTableCache += (New-Object PSObject -Property @{
}) OriginalId = $migObj.Id
Id = $obj.Id
Type = $migObj.Type
})
}
} }
} }
} }
@@ -2935,7 +3037,7 @@ function Add-GraphDependencyObjects
{ {
if($global:LoadedDependencyObjects.ContainsKey($dep)) { continue } if($global:LoadedDependencyObjects.ContainsKey($dep)) { continue }
$depObjectType = $global:currentViewObject.ViewItems | Where Id -eq $Dep $depObjectType = $global:viewObjects.ViewItems | Where Id -eq $Dep
if(-not $depObjectType) if(-not $depObjectType)
{ {
@@ -3172,12 +3274,23 @@ function Set-GraphNavigationProperties
# Is this the correct way of filter out Assignments, summaries etc.? # Is this the correct way of filter out Assignments, summaries etc.?
if($prop.ContainsTarget -eq $true) { continue } if($prop.ContainsTarget -eq $true) { continue }
if(-not ($oldObj."$($prop.Name)@odata.associationLink")) { continue } if(-not ($oldObj."$($prop.Name)@odata.associationLink")) { continue }
$associationLink = $oldObj."$($prop.Name)@odata.associationLink" -replace $oldObj.Id,$newObj.Id $associationLink = $oldObj."$($prop.Name)@odata.associationLink" -replace $oldObj.Id,$newObj.Id
$refBodyObjs = $null #@() $refBodyObjs = @()
$refObjName = $null $refObjName = $null
$refObjId = $null $refObjId = $null
if($prop.Type -like "Collection(*")
{
$multiNavProperty = $true
$method = "POST"
}
else
{
$multiNavProperty = $false
$method = "PUT"
}
if($FromOldObject -eq $true) if($FromOldObject -eq $true)
{ {
@@ -3185,12 +3298,25 @@ function Set-GraphNavigationProperties
if(-not $navProp) { continue } if(-not $navProp) { continue }
$refObjName = Get-GraphObjectName $navProp $navProp if($multiNavProperty)
$refObjId = $navProp.Id {
$navProperties = $navProp.Value
}
else
{
$navProperties = $navProp
}
$refBodyObjs = ([PSCustomObject]@{ foreach($navProp in $navProperties)
"@odata.id" = ("https://$global:MSALGraphEnvironment/beta/$($objectType.API)('$($navProp.Id)')") {
}) $refBodyObjs += [PSCustomObject]@{
RefObjName = $navProp.displayName ### NOT Correct. Migh be another property but we don't know the type
RefObjId = $navProp.Id
RefBody = ([PSCustomObject]@{
"@odata.id" = ("https://$global:MSALGraphEnvironment/beta/$($objectType.API)('$($navProp.Id)')")
})
}
}
} }
else else
{ {
@@ -3199,50 +3325,58 @@ function Set-GraphNavigationProperties
$idx = $oldObj."#CustomRef_$($prop.Name)".IndexOf("|:|") $idx = $oldObj."#CustomRef_$($prop.Name)".IndexOf("|:|")
if($idx -gt -1) if($idx -gt -1)
{ {
$refObjName = $oldObj."#CustomRef_$($prop.Name)".SubString(0,$idx) $refObjNames = $oldObj."#CustomRef_$($prop.Name)".SubString(0,$idx)
} }
else else
{ {
$refObjName = $oldObj."#CustomRef_$($prop.Name)" $refObjNames = $oldObj."#CustomRef_$($prop.Name)"
} }
$refObjects = Invoke-GraphRequest -URL "$($objectType.API)?`$filter=$($nameProp) eq '$($refObjName)'" -NoError foreach($refObjName in $refObjNames.Split(","))
$objectsFound = ($refObjects.value | measure).Count
if($objectsFound -eq 1)
{ {
# Are there any references that allows multiple ref objects? $refObjects = Invoke-GraphRequest -URL "$($objectType.API)?`$filter=$($nameProp) eq '$($refObjName)'" -NoError
foreach($refObj in $refObjects.value)
$objectsFound = ($refObjects.value | measure).Count
if($objectsFound -eq 1)
{ {
$refBodyObjs = ([PSCustomObject]@{ # Are there any references that allows multiple ref objects?
"@odata.id" = ("https://$global:MSALGraphEnvironment/beta/$($objectType.API)('$($refObj.Id)')") foreach($refObj in $refObjects.value)
}) {
$refObjId = $refObj.Id $refBodyObjs += [PSCustomObject]@{
RefObjName = $refObjName
RefObjId = $refObj.Id
RefBody = ([PSCustomObject]@{
"@odata.id" = ("https://$global:MSALGraphEnvironment/beta/$($objectType.API)('$($refObj.Id)')")
})
}
}
}
elseif($objectsFound -gt 1)
{
Write-Log "Multiple objects ($objectsFound) found with $nameProp $refObjName. Skipping reference." 2
continue
}
else
{
Write-Log "No object found with $nameProp $refObjName" 2
continue
} }
}
elseif($objectsFound -gt 1)
{
Write-Log "Multiple objects ($objectsFound) found with $nameProp $refObjName. Skipping reference." 2
continue
}
else
{
Write-Log "No object found with $nameProp $refObjName" 2
continue
} }
} }
Write-Log "Add $refObjName ($refObjId) to navigation property $($prop.Name)" foreach($refObject in $refBodyObjs)
{
$body = $refBodyObjs | ConvertTo-Json -Depth 50 Write-Log "Add $($refObject.RefObjName) ($($refObject.RefObjId)) to navigation property $($prop.Name)"
Invoke-GraphRequest -URL $associationLink -HttpMethod "PUT" -Content $body | Out-Null $body = $refObject.RefBody | ConvertTo-Json -Depth 50
Invoke-GraphRequest -URL $associationLink -HttpMethod $method -Content $body | Out-Null
}
} }
} }
<# <#
Add Navigation Property data to the object so it included in the exported json file Add Navigation Property data to the object so they are included in the exported json file
#> #>
function Add-GraphNavigationProperties function Add-GraphNavigationProperties
{ {
@@ -4032,6 +4166,12 @@ function Get-GraphObjectName
{ {
param($obj, $objectType) param($obj, $objectType)
if($objectType.GetObjectName)
{
return (& $objectType.GetObjectName $obj $objectType)
}
$obj."$((?? ($objectType.NameProperty) "displayName"))" $obj."$((?? ($objectType.NameProperty) "displayName"))"
} }
+140
View File
@@ -1,4 +1,144 @@
# Release Notes # Release Notes
## 3.9.2 - 2023-10-17
**New features**
- **Application Content Export - Experimental**<br />
- Added support for Exporting Appliction with decrypted content<br />
App file can be downloaded during export or from the detail view of the Application<br />
Enable "Save Encryption File" and specify "App download folder" in Settings<br />
"App download folder" is used for encryption file and manual download<br />
File content will be downloaded to the export foler during export<br />
Files will be downloaded with .encrypted extension and then decrypted to original file name<br />
Please report any issue or any suggestions<br />
**NOTE:** This will ONLY work if the encryption file is exported and available<br />
- **Authentication**<br />
- Login with application<br />
This will login with specified Azure App ID and Secret/Certificate that is used for Batch processes<br />
NOTE: This will require a restart of the app<br />
Start with app **must** use -TenantID on command line. AppID and Secret/Certificate can be specified in Settings or command line<br />
Example: Start-IntuneManagement.ps1 -tenantId \"&lt;TenantID&gt;\" -appid \"&lt;AppID&gt;\" -secret \"&lt;Secret&gt;\"<br />
See *Start-WithApp.cmd* for samle file<br />
Based on [Issue 122](https://github.com/Micke-K/IntuneManagement/issues/122) and [Issue 134](https://github.com/Micke-K/IntuneManagement/issues/134)<br />
- **Support for new Settings**<br />
- Save encryption file - Saves a json file with encryption data when an application file is uploaded eg created or uploaded in details view<br />
- App download folder - Folder where application files should be downloaded and decrypted<br />
- Login with App in UI (Preview) - Use app batch login in UI<br />
- Use Graph 1.0 (Not Recommended) - Use Graph v1.0 instead of Beta. **Note:** Some features will NOT work in v1.0<br />
Based on [Issue 170](https://github.com/Micke-K/IntuneManagement/issues/170)<br />
**Fixes**
- **Documentation**<br />
- Language files re-generated eg Supersedence (preview) -> Supersedence<br />
- Added support for documenting "Filter for devices" info for Conditional Access policies<br />
Based on [Issue 168](https://github.com/Micke-K/IntuneManagement/issues/168)<br />
- **Custom ADMX Files**<br />
- Fixed issues with migrating custom policies between environments (3rd time)<br />
Based on [Issue 124](https://github.com/Micke-K/IntuneManagement/issues/124)<br />
- Fixed issue when importing ADMX files - Encoding issue eg ADMX/ADML file was UTF8<br />
Based on [Issue 169](https://github.com/Micke-K/IntuneManagement/issues/169)<br />
- **Importing Windows LoB Apps**<br />
- Fixed issue when importing LoB Apps that was only targeted to System context<br />
Available Assignment option was missing after import<br />
Based on [Discussion 164](https://github.com/Micke-K/IntuneManagement/discussions/164)<br />
- Added support for Depnedency and Supersedence reations at import<br />
Application will need to be re-exported since additinal data is added to the export file<br />
Based on [Discussion 159](https://github.com/Micke-K/IntuneManagement/discussions/159)<br />
- **Generic**<br />
- Fixed issue when compiling Procxy CS file<br />
- Tls 1.2 is now enforced.<br />
Based on [Discussion 166](https://github.com/Micke-K/IntuneManagement/discussions/166)<br />
<br />
## 3.9.1 - 2023-08-30
**New features**
- **Added support for Windows Update Driver Policies**<br />
- **Support for new Settings**<br />
- Proxy configuration - If configured, Proxy will be used for authentication, APIs and upload<br />
- Disable Write-Error output - Skip PowerShell errors in output<br />
**Default Settings Value Changes**
- Conditional Access policies will now be imported as Disabled by default<br />
- New import option added: As Exported - Change On to Report-only<br />
- This is to avoid being locked out from the tenant when importing Conditional Access policies<br />
- Based on [Discussion 139](https://github.com/Micke-K/IntuneManagement/discussions/139)<br />
**Fixes**
- **Documentation**<br />
- Fixed issues with some Feature Updates properties<br />
- Added missing strings on Windows Update polices<br />
- Regenerated Language files and Translation tables for Template policies<br />
Note: Conditional Access string has changed file in background. Please report if there is anything missing<br />
- **Custom ADMX Files**<br />
- Fixed issues with migrating custom policies between environments<br />
- Case reopened due to something broke the initial functionality<br />
- Only custom ADMX policies with #Definition properties can be imported into a new environment<br />
- Based on [Issue 124](https://github.com/Micke-K/IntuneManagement/issues/124)<br />
- **Scope Tags**<br />
- Fixed issues with importing policies with Scope Tags but they were not set<br />
- Based on [Issue 133](https://github.com/Micke-K/IntuneManagement/issues/133)<br />
**Generic**<br />
- Remove invalid characters from path.<br />
- Based on [Issue 150](https://github.com/Micke-K/IntuneManagement/issues/150)<br />
<br />
## 3.9.0 - 2023-05-04
**New features**
- **Added support for Authentication Context objects**<br />
- These are used by Conditional Access policies<br />
Based on [Issue 109](https://github.com/Micke-K/IntuneManagement/issues/109)<br />
- **Added support for Windows 365 Cloud PC settings**<br />
- Based on [Issue 125](https://github.com/Micke-K/IntuneManagement/issues/125)<br />
- **Added support for Export/Import Tennant Settings**<br />
- This is added the Intune Info view for now (Views -> Intune Info)<br />
This means that there is no support for Bulk Import/Export. It must be done manually<br />
This is to minimize the risk of re-importing Tenant settings<br />
Based on [Discussion 131](https://github.com/Micke-K/IntuneManagement/discussions/131)<br />
**Fixes**
- **Documentation**<br />
- Added full documentation of Requirement and Detection rules for Win Apps<br />
Based on [Issue 119](https://github.com/Micke-K/IntuneManagement/issues/119)<br />
- Fixed issue were documentation could crash if Reusable Settings policies exists<br />
Based on [Issue 123](https://github.com/Micke-K/IntuneManagement/issues/123)<br />
- Regenerated Language files and Translation tables for Template policies<br />
- **Intunwin File Upload**<br />
- Fixed issue when uploading very large files<br />
Based on [Issue 112](https://github.com/Micke-K/IntuneManagement/issues/112)<br />
- Fixed issue when IE not installed<br />
- **Compare**<br />
- Fixed issue where Compare could generate an exception in the log<br />
Based on [Issue 128](https://github.com/Micke-K/IntuneManagement/issues/128)<br />
**Note:** Issue 128 is only partially fixed. Compare needs a major update to fix the rest<br />
- **Import**<br />
- Fixed an issue when creating Cloud groups based on on-prem groups without MigTable<br />
- Fixed an issue when importing groups with a space in the beginning<br />
**Note:** Inital spaces will be removed when importing groups<br />
- Fixed issue when importing Endpoint Status Page polices with applications defined<br />
- Fixed issue when importing Proactive Remediations (Health Scripts) with assignments<br />
- Fixed issue when importing a Conditional Policy with Session propery disableResilienceDefaults set to $false<br />
- Fixed issue when importing WiFi profiles. Support for multiple references was added eg multiple server verification certificates<br />
Based on [Issue 114](https://github.com/Micke-K/IntuneManagement/issues/114)<br />
- Terms of Use was not visible in the menu<br />
**Note:** This might generate a Consent prompt if Use Default Permissions is not enabled<br />
Additional permission required on the Azure App: Agreement.ReadWrite.All<br />
<br />
## 3.8.1 - 2023-01-26 ## 3.8.1 - 2023-01-26
**New features** **New features**
+1
View File
@@ -0,0 +1 @@
cmd /c powershell -version 5 -ex bypass -File "%~DP0Start-IntuneManagement.ps1" -tenantId "<TenantID>" -appid "<AppID>" -secret "<Secret>"
+26
View File
@@ -0,0 +1,26 @@
<Viewbox Width="18" Height="18" xmlns="http://schemas.microsoft.com/winfx/2006/xaml/presentation" xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml">
<Canvas Height="18" Width="18">
<Canvas.Resources>
<LinearGradientBrush x:Key="deed83ab-7995-4b1b-9000-e569a21c2014" StartPoint="0.064690001308918,0.0795900002121925" EndPoint="0.064690001308918,0.187000006437302" MappingMode="RelativeToBoundingBox">
<LinearGradientBrush.GradientStops>
<GradientStopCollection>
<GradientStop Offset="0.225" Color="#50e6ff" />
<GradientStop Offset="1" Color="#198ab3" />
</GradientStopCollection>
</LinearGradientBrush.GradientStops>
</LinearGradientBrush>
<LinearGradientBrush x:Key="deed83ab-7995-4b1b-9000-e569a21c2015" StartPoint="0.0619699992239475,0.0220100004225969" EndPoint="0.0698100030422211,0.119529999792576" MappingMode="RelativeToBoundingBox">
<LinearGradientBrush.GradientStops>
<GradientStopCollection>
<GradientStop Offset="0.225" Color="#50e6ff" />
<GradientStop Offset="1" Color="#198ab3" />
</GradientStopCollection>
</LinearGradientBrush.GradientStops>
</LinearGradientBrush>
</Canvas.Resources>
<Path Data="M11.783 16.761a1.15 1.15 0 0 0 1.154-1.146 1.08 1.08 0 0 0-.008-.139c-.452-3.615-2.515-6.56-6.45-6.56-4 0-6.07 2.493-6.473 6.57a1.158 1.158 0 0 0 1.032 1.269 1.112 1.112 0 0 0 .116.006Z" Fill="{StaticResource deed83ab-7995-4b1b-9000-e569a21c2014}" />
<Path Data="M6.541 9.773A3.6 3.6 0 0 1 4.577 9.2l1.944 5.08 1.931-5.051a3.608 3.608 0 0 1-1.911.544Z" Fill="#FFFFFF" />
<Ellipse Canvas.Left="2.886" Canvas.Top="2.518" Width="7.256" Height="7.256" Fill="{StaticResource deed83ab-7995-4b1b-9000-e569a21c2015}" />
<Path Data="M18 8.611V7.127l-.208-.078-1.592-.521-.416-1.015L16.6 3.8l-1.047-1.046-.208.1-1.483.754-1.015-.408-.647-1.8h-1.488l-.078.208-.52 1.592-1.009.414a3.61 3.61 0 0 1 .966 1.833 2.851 2.851 0 1 1 1.422 5.32 2.884 2.884 0 0 1-.641-.078 7.369 7.369 0 0 1 1.68 2.972l.341-1.039 1.015-.417 1.717.807 1.042-1.041-.1-.208-.754-1.484.407-1.018Z" Fill="#0078d4" />
</Canvas>
</Viewbox>
+1 -1
View File
@@ -135,7 +135,7 @@
<Label Content="Current settings:" /> <Label Content="Current settings:" />
<Rectangle Style="{DynamicResource InfoIcon}" ToolTip="Current property settings. Only updated when saved" /> <Rectangle Style="{DynamicResource InfoIcon}" ToolTip="Current property settings. Only updated when saved" />
</StackPanel> </StackPanel>
<Label Name="lblObjectColumnsConfig" Content="" Margin="0,0,5,0" Grid.Row="3" /> <Label Name="lblObjectColumnsConfig" Content="" Margin="0,0,5,0" Grid.Row="3" Grid.ColumnSpan="2" />
<StackPanel Orientation="Horizontal" Grid.Column="1" Margin="5,5,5,0" Grid.Row="4" Grid.ColumnSpan="2" HorizontalAlignment="Right"> <StackPanel Orientation="Horizontal" Grid.Column="1" Margin="5,5,5,0" Grid.Row="4" Grid.ColumnSpan="2" HorizontalAlignment="Right">
<Button Name="btnObjectColumnsReset" Content="Reset" Margin="0,0,5,0" Width="100" ToolTip="Revert all changes" /> <Button Name="btnObjectColumnsReset" Content="Reset" Margin="0,0,5,0" Width="100" ToolTip="Revert all changes" />