chore: allow rdp connection

This commit is contained in:
2025-04-16 10:18:02 +10:00
parent 19679dadcc
commit 00481bcb6d
17 changed files with 3757 additions and 288 deletions

View File

@ -16,25 +16,26 @@ Connect-MgGraph -Scopes "DeviceManagementConfiguration.ReadWrite.All", "Organiza
$tenant = Get-MgOrganization $tenant = Get-MgOrganization
$tenantId = $tenant.Id $tenantId = $tenant.Id
$policies = Get-ChildItem ./policies # Create the security group with static membership
$groupBody = @{
ForEach ($policie in $policies) { displayName = "Intune - Test Machine Group"
$PolicieName = $policie.name mailEnabled = $false
mailNickname = "IntuneTestMachineGroup"
$JsonData = Get-Content -Path ./policies/$PolicieName -Raw securityEnabled = $true
$JsonDataUpdated = $JsonData -replace '\$tenantId', $tenantId # No need for groupTypes or membershipRule for static groups
$PolicyObject = $JsonDataUpdated | ConvertFrom-Json
try {
$uri = "https://graph.microsoft.com/beta/deviceManagement/configurationPolicies" # Using the beta version
$response = Invoke-MgGraphRequest -Method POST -Uri $uri -Body ($PolicyObject | ConvertTo-Json -Depth 10)
Write-Host "$PolicieName - successfully imported!"
#$response
} catch {
Write-Error "❌ An error occurred while importing the policy: $_"
}
} }
$group = $groupBody.displayName
# Convert the body to JSON
$groupBodyJson = $groupBody | ConvertTo-Json -Depth 100
# Create the static group using Invoke-MgGraphRequest
$response = Invoke-MgGraphRequest -Method POST -Uri "https://graph.microsoft.com/beta/groups" -Body $groupBodyJson -ContentType "application/json"
$groupId = $response.id
Write-Host "✅ Successfully created static group '$group - $groupid'"
# Define the dynamic membership rule # Define the dynamic membership rule
$dynamicRule = '(device.deviceOSType -eq "Windows") and (device.accountEnabled -eq true) and (device.managementType -eq "MDM")' $dynamicRule = '(device.deviceOSType -eq "Windows") and (device.accountEnabled -eq true) and (device.managementType -eq "MDM")'
@ -53,7 +54,7 @@ $groupBody = @{
$group = $groupBody.displayname $group = $groupBody.displayname
# Convert the body to JSON # Convert the body to JSON
$groupBodyJson = $groupBody | ConvertTo-Json -Depth 10 $groupBodyJson = $groupBody | ConvertTo-Json -Depth 100
# Create the group using Invoke-MgGraphRequest # Create the group using Invoke-MgGraphRequest
$null = Invoke-MgGraphRequest -Method POST -Uri "https://graph.microsoft.com/beta/groups" -Body $groupBodyJson -ContentType "application/json" $null = Invoke-MgGraphRequest -Method POST -Uri "https://graph.microsoft.com/beta/groups" -Body $groupBodyJson -ContentType "application/json"
@ -76,12 +77,67 @@ $groupBody = @{
$group = $groupBody.displayname $group = $groupBody.displayname
# Convert the body to JSON # Convert the body to JSON
$groupBodyJson = $groupBody | ConvertTo-Json -Depth 10 $groupBodyJson = $groupBody | ConvertTo-Json -Depth 100
# Create the group using Invoke-MgGraphRequest # Create the group using Invoke-MgGraphRequest
$null = Invoke-MgGraphRequest -Method POST -Uri "https://graph.microsoft.com/beta/groups" -Body $groupBodyJson -ContentType "application/json" $null = Invoke-MgGraphRequest -Method POST -Uri "https://graph.microsoft.com/beta/groups" -Body $groupBodyJson -ContentType "application/json"
Write-Host "✅ Successfully created group $group" Write-Host "✅ Successfully created group $group"
$policies = Get-ChildItem ./policies/settingscatalog
ForEach ($policy in $policies) {
$PolicyName = $policy.name
$JsonData = Get-Content -Path ./policies/settingscatalog/$PolicyName -Raw
$JsonDataUpdated = $JsonData -replace '\$tenantId', $tenantId
$PolicyObject = $JsonDataUpdated | ConvertFrom-Json
try {
# Add assignment to the created group
$uri = "https://graph.microsoft.com/beta/deviceManagement/configurationPolicies" # Using the beta version
$response = Invoke-MgGraphRequest -Method POST -Uri $uri -Body ($PolicyObject | ConvertTo-Json -Depth 100)
Write-Host "$PolicyName - successfully imported!"
$policyid = $response.id
$assignmentUri = "https://graph.microsoft.com/beta/deviceManagement/configurationPolicies/$PolicyId/assign"
$assignmentBody = @{
assignments = @(
@{
target = @{
"@odata.type" = "#microsoft.graph.groupAssignmentTarget"
groupId = $groupId
}
}
)
}
Invoke-MgGraphRequest -Method POST -Uri $assignmentUri -Body ($assignmentBody | ConvertTo-Json -Depth 100)
Write-Host "✅ Group assigned to the policy!"
} catch {
Write-Error "❌ An error occurred while importing the policy: $_"
}
}
# $policies = Get-ChildItem ./policies/compliance
# ForEach ($policy in $policies) {
# $PolicyName = $policy.name
# $JsonData = Get-Content -Path ./policies/compliance/$PolicyName -Raw
# $JsonDataUpdated = $JsonData -replace '\$tenantId', $tenantId
# $PolicyObject = $JsonDataUpdated | ConvertFrom-Json
# try {
# $uri = "https://graph.microsoft.com/beta/deviceManagement/deviceCompliancePolicies" # Using the beta version
# $null = Invoke-MgGraphRequest -Method POST -Uri $uri -Body ($PolicyObject | ConvertTo-Json -Depth 100)
# Write-Host "✅ $PolicyName - successfully imported!"
# } catch {
# Write-Error "❌ An error occurred while importing the policy: $_"
# }
# }
# Create Windows Update Ring Policies # Create Windows Update Ring Policies
# Create a baseline policy using web interface # Create a baseline policy using web interface
@ -91,22 +147,181 @@ Write-Host "✅ Successfully created group $group"
# - Get-MgDeviceManagementDeviceConfiguration -DeviceConfigurationId "<YOUR_POLICY_ID>" | ConvertTo-Json -Depth 10 # - Get-MgDeviceManagementDeviceConfiguration -DeviceConfigurationId "<YOUR_POLICY_ID>" | ConvertTo-Json -Depth 10
# Define the update ring configuration with Microsoft product updates enabled # # Define the update ring configuration with Microsoft product updates enabled
$params = @{ # $params = @{
"@odata.type"= "#microsoft.graph.windowsUpdateForBusinessConfiguration" # "@odata.type"= "#microsoft.graph.windowsUpdateForBusinessConfiguration"
"displayName"= "Windows 11 Update Ring" # "displayName"= "Win - Windows Updates - Ring 1 - Pilot"
"description"= "Update ring for Windows 11 devices" # "description"= "Devices in this ring receive updates immediately after release with 1 day grace period before a forced reboot."
"automaticUpdateMode"= "autoInstallAndRebootAtMaintenanceTime" # "automaticUpdateMode"= "windowsDefault"
"qualityUpdatesDeferralPeriodInDays"= 7 # "deliveryOptimizationMode"= "userDefined"
"featureUpdatesDeferralPeriodInDays"= 30 # "prereleaseFeatures"= "userDefined"
"allowMicrosoftUpdate"= $true # Enables updates for Microsoft products # "microsoftUpdateServiceAllowed"= $true # Enables updates for Microsoft products
} # "driversExcluded"= $false
# "qualityUpdatesDeferralPeriodInDays"= 0
# "featureUpdatesDeferralPeriodInDays"= 0
# "qualityUpdatesPaused"= $false
# "featureUpdatesPaused"= $false
# "businessReadyUpdatesOnly"= "userDefined"
# "skipChecksBeforeRestart"= $false
# "featureUpdatesRollbackWindowInDays"= 30
# "qualityUpdatesWillBeRolledBack"= $false
# "featureUpdatesWillBeRolledBack"= $false
# "deadlineForFeatureUpdatesInDays"= 0
# "deadlineForQualityUpdatesInDays"= 0
# "deadlineGracePeriodInDays"= 1
# "postponeRebootUntilAfterDeadline"= $true
# "autoRestartNotificationDismissal"= "notConfigured"
# "userPauseAccess"= "disabled"
# "userWindowsUpdateScanAccess"= "enabled"
# "updateNotificationLevel"= "defaultNotifications"
# "allowWindows11Upgrade"= $false
# "roleScopeTagIds"= @("0") # Scope tags (use appropriate scope tags as needed)
# "supportsScopeTags"= $true
# }
$ring = $params.displayName # $ring = $params.displayName
# Create the update ring policy in Intune # # Create the update ring policy in Intune
$null = New-MgDeviceManagementDeviceConfiguration -BodyParameter $params # $null = New-MgDeviceManagementDeviceConfiguration -BodyParameter $params
Write-Host "✅ Successfully created group $ring" # Write-Host "✅ Successfully created $ring"
# $params = @{
# "@odata.type"= "#microsoft.graph.windowsUpdateForBusinessConfiguration"
# "displayName"= "Win - Windows Updates - Ring 2 - UAT"
# "description"= "Devices in this ring receive updates 3 days after release and have a 0-day deadline on install with 2 day grace period before a forced reboot."
# "version"= 1
# "deliveryOptimizationMode"= "userDefined"
# "prereleaseFeatures"= "userDefined"
# "automaticUpdateMode"= "windowsDefault"
# "microsoftUpdateServiceAllowed"= $true
# "driversExcluded"= $false
# "qualityUpdatesDeferralPeriodInDays"= 3
# "featureUpdatesDeferralPeriodInDays"= 0
# "qualityUpdatesPaused"= $false
# "featureUpdatesPaused"= $false
# "businessReadyUpdatesOnly"= "userDefined"
# "skipChecksBeforeRestart"= $false
# "featureUpdatesRollbackWindowInDays"= 30
# "qualityUpdatesWillBeRolledBack"= $false
# "featureUpdatesWillBeRolledBack"= $false
# "deadlineForFeatureUpdatesInDays"= 0
# "deadlineForQualityUpdatesInDays"= 0
# "deadlineGracePeriodInDays"= 2
# "postponeRebootUntilAfterDeadline"= $true
# "autoRestartNotificationDismissal"= "notConfigured"
# "userPauseAccess"= "disabled"
# "userWindowsUpdateScanAccess"= "enabled"
# "updateNotificationLevel"= "defaultNotifications"
# "allowWindows11Upgrade"= $false
# "roleScopeTagIds"= @("0")
# "supportsScopeTags"= $true
# "createdDateTime"= "2023-10-27T15:13:33.3648624Z"
# "lastModifiedDateTime"= "2023-10-27T15:13:33.3648624Z"
# }
# $ring = $params.displayName
# # Create the update ring policy in Intune
# $null = New-MgDeviceManagementDeviceConfiguration -BodyParameter $params
# Write-Host "✅ Successfully created $ring"
# $params = @{
# "@odata.type"= "#microsoft.graph.windowsUpdateForBusinessConfiguration"
# "displayName"= "Win - Windows Updates - Ring 3 - Production"
# "description"= "Devices in this ring receive updates 10 days after release and have a 2-day deadline on install with 1 day grace period before a forced reboot."
# "version"= 1
# "deliveryOptimizationMode"= "userDefined"
# "prereleaseFeatures"= "userDefined"
# "automaticUpdateMode"= "windowsDefault"
# "microsoftUpdateServiceAllowed"= $true
# "driversExcluded"= $false
# "qualityUpdatesDeferralPeriodInDays"= 10
# "featureUpdatesDeferralPeriodInDays"= 0
# "qualityUpdatesPaused"= $false
# "featureUpdatesPaused"= $false
# "businessReadyUpdatesOnly"= "userDefined"
# "skipChecksBeforeRestart"= $false
# "featureUpdatesRollbackWindowInDays"= 30
# "qualityUpdatesWillBeRolledBack"= $false
# "featureUpdatesWillBeRolledBack"= $false
# "deadlineForFeatureUpdatesInDays"= 2
# "deadlineForQualityUpdatesInDays"= 2
# "deadlineGracePeriodInDays"= 1
# "postponeRebootUntilAfterDeadline"= $true
# "autoRestartNotificationDismissal"= "notConfigured"
# "userPauseAccess"= "disabled"
# "userWindowsUpdateScanAccess"= "enabled"
# "updateNotificationLevel"= "defaultNotifications"
# "allowWindows11Upgrade"= $false
# "roleScopeTagIds"= @("0")
# "supportsScopeTags"= $true
# "createdDateTime"= "2023-10-27T15:13:33.5897267Z"
# "lastModifiedDateTime"= "2023-10-27T15:13:33.5897267Z"
# }
# $ring = $params.displayName
# # Create the update ring policy in Intune
# $null = New-MgDeviceManagementDeviceConfiguration -BodyParameter $params
# Write-Host "✅ Successfully created $ring"
# $uri = "https://graph.microsoft.com/beta/deviceManagement/windowsDriverUpdateProfiles"
# # Define the JSON body for the new driver update profile
# $body = @{
# "displayName" = "Win - Drivers - Ring 1 - Pilot"
# "description" = "" # Empty description field from original JSON
# "approvalType" = "automatic" # "automatic" from the original JSON
# "deploymentDeferralInDays" = 0 # "0" from the original JSON
# "newUpdates" = 0 # "0" from the original JSON
# "roleScopeTagIds" = @("0") # Role Scope Tag ID from the original JSON
# }
# $ring = $body.displayName
# $groupBodyJson = $Body | ConvertTo-Json -Depth 100
# # Send the POST request to create the Driver Update Profile
# $null = Invoke-MgGraphRequest -Method POST -Uri $uri -Body $groupBodyJson -ContentType "application/json"
# Write-Host "✅ Successfully created group $ring"
# $uri = "https://graph.microsoft.com/beta/deviceManagement/windowsDriverUpdateProfiles"
# # Define the JSON body for the new driver update profile
# $body = @{
# "displayName" = "Win - Drivers - Ring 2 - UAT"
# "description" = "" # Empty description field from original JSON
# "approvalType" = "automatic" # "automatic" from the original JSON
# "deploymentDeferralInDays" = 3 # "3" from the original JSON
# "newUpdates" = 0 # "0" from the original JSON
# "roleScopeTagIds" = @("0") # Role Scope Tag ID from the original JSON
# }
# $ring = $body.displayName
# $groupBodyJson = $Body | ConvertTo-Json -Depth 100
# # Send the POST request to create the Driver Update Profile
# $null = Invoke-MgGraphRequest -Method POST -Uri $uri -Body $groupBodyJson -ContentType "application/json"
# Write-Host "✅ Successfully created group $ring"
# $uri = "https://graph.microsoft.com/beta/deviceManagement/windowsDriverUpdateProfiles"
# # Define the JSON body for the new driver update profile
# $body = @{
# "displayName" = "Win - Drivers - Ring 3 - Production"
# "description" = "" # Empty description field from original JSON
# "approvalType" = "automatic" # "automatic" from the original JSON
# "deploymentDeferralInDays" = 10 # "10" from the original JSON
# "newUpdates" = 0 # "0" from the original JSON
# "roleScopeTagIds" = @("0") # Role Scope Tag ID from the original JSON
# }
# $ring = $body.displayName
# $groupBodyJson = $Body | ConvertTo-Json -Depth 100
# # Send the POST request to create the Driver Update Profile
# $null = Invoke-MgGraphRequest -Method POST -Uri $uri -Body $groupBodyJson -ContentType "application/json"
# Write-Host "✅ Successfully created group $ring"
$null = Disconnect-Graph -ErrorAction SilentlyContinue $null = Disconnect-Graph -ErrorAction SilentlyContinue

35
UpdateRings.ps1 Normal file
View File

@ -0,0 +1,35 @@
# Check if the Microsoft Graph PowerShell SDK is installed
if (-not (Get-Module -ListAvailable -Name Microsoft.Graph)) {
Install-Module -Name Microsoft.Graph -Scope CurrentUser -Force
}
# Check if the Microsoft Graph PowerShell SDK is installed
if (-not (Get-Module -ListAvailable -Name Microsoft.Graph.Beta)) {
Install-Module -Name Microsoft.Graph.Beta -Scope CurrentUser -Force
}
# Connect to Microsoft Graph
Connect-MgGraph -Scopes "DeviceManagementConfiguration.ReadWrite.All", "Organization.Read.All", "Group.ReadWrite.All", "Directory.ReadWrite.All" -NoWelcome
$params = @{
"@odata.type"= "#microsoft.graph.windowsUpdateForBusinessConfiguration"
"displayName"= "Win - OIB - WUfB Drivers - Ring 1 - Pilot - v3.0"
"description"= "" # Empty string if description is not needed
"automaticUpdateMode"= "autoInstallAndRebootAtMaintenanceTime" # You can adjust based on requirements
"qualityUpdatesDeferralPeriodInDays"= 7 # Example deferral value
"featureUpdatesDeferralPeriodInDays"= 30 # Example deferral value
"allowMicrosoftUpdate"= $true # Enables updates for Microsoft products
"roleScopeTagIds"= @("0") # Example role scope tag ID
"assignments"= @() # Empty array for assignments
}
# Use the display name from the parameters for identification
$ring = $params.displayName
# Create the driver update profile
$null = New-MgDeviceManagementDeviceConfiguration -BodyParameter $params
Write-Host "✅ Successfully created $ring"
$null = Disconnect-Graph -ErrorAction SilentlyContinue

File diff suppressed because it is too large Load Diff

View File

@ -0,0 +1,668 @@
{
"id": "f3acfacc-2258-41b5-b2a5-5da7bb7accc7",
"name": "All Macros Disabled",
"description": "",
"platforms": "windows10",
"technologies": "mdm",
"settings": [
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_0"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocuments",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocuments_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_l_empty",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_4"
}
}
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject_0"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_0"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocuments",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocuments_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty4",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty4_4"
}
}
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_automationsecurity",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_automationsecurity_l_settheautomationsecuritylevel",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_automationsecurity_l_settheautomationsecuritylevel_3"
}
}
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_automationsecurity_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_disablevbaforofficeapplications319",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings_l_disablevbaforofficeapplications319_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_allowmixofpolicyanduserlocations",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_office16v2~policy~l_microsoftofficesystem~l_securitysettings~l_trustcenter241_l_allowmixofpolicyanduserlocations_0"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_applymacrosecuritysettings",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_applymacrosecuritysettings_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_outlk16v2~policy~l_microsoftofficeoutlook~l_security~l_trustcenter_l_securityleveloutlook_0"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject_0"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_0"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_turnofftrusteddocuments",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_turnofftrusteddocuments_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_vbawarningspolicy",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty3",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty3_4"
}
}
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpoint~l_powerpointoptions~l_security~l_trustcenter_l_vbawarningspolicy_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_allowtrustedlocationsonthenetwork",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_allowtrustedlocationsonthenetwork_0"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disabletrustedloc",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_disabletrustedloc_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_vbawarningspolicy",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_4"
}
}
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_proj16v2~policy~l_proj~l_projectoptions~l_security~l_trustcenter_l_vbawarningspolicy_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_publisherautomationsecuritylevel",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_publisherautomationsecuritylevel_l_empty",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_publisherautomationsecuritylevel_l_empty_3"
}
}
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security_l_publisherautomationsecuritylevel_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_vbawarningspolicy",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_vbawarningspolicy_l_empty0",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_vbawarningspolicy_l_empty0_4"
}
}
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_pub16v2~policy~l_microsoftofficepublisher~l_security~l_trustcenter_l_vbawarningspolicy_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_macrosecurity_l_enablemicrosoftvisualbasicforapplicationsproject",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_macrosecurity_l_enablemicrosoftvisualbasicforapplicationsproject_0"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_macrosecurity_l_loadmicrosoftvisualbasicforapplicationsprojectsf",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_macrosecurity_l_loadmicrosoftvisualbasicforapplicationsprojectsf_0"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_allowtrustedlocationsonthenetwork",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_allowtrustedlocationsonthenetwork_0"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_disabletrustedloc",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_disabletrustedloc_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_turnofftrusteddocuments",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_turnofftrusteddocuments_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_vbawarningspolicy",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_4"
}
}
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_visio16v2~policy~l_microsoftvisio~l_visiooptions~l_security~l_trustcenter_l_vbawarningspolicy_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject_0"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_0"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_turnofftrusteddocuments",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_turnofftrusteddocuments_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_1"
}
}
},
{
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_vbawarningspolicy",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty19",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"children": [
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty19_4"
}
}
],
"settingValueTemplateReference": null,
"value": "user_vendor_msft_policy_config_word16v2~policy~l_microsoftofficeword~l_wordoptions~l_security~l_trustcenter_l_vbawarningspolicy_1"
}
}
}
]
}

File diff suppressed because it is too large Load Diff

View File

@ -1,10 +1,10 @@
{ {
"@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/configurationPolicies/$entity", "@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/configurationPolicies/$entity",
"createdDateTime": "2025-02-05T23:10:06.2132942Z", "createdDateTime": "2025-03-28T00:02:24.8376125Z",
"creationSource": null, "creationSource": null,
"description": "", "description": "",
"lastModifiedDateTime": "2025-02-05T23:10:06.2132942Z", "lastModifiedDateTime": "2025-03-28T00:02:24.8376125Z",
"name": "Windows LAPS - Enable Administrator Account", "name": "Win - SC - Office Updates",
"platforms": "windows10", "platforms": "windows10",
"priorityMetaData": null, "priorityMetaData": null,
"roleScopeTagIds": [ "roleScopeTagIds": [
@ -12,7 +12,7 @@
], ],
"settingCount": 1, "settingCount": 1,
"technologies": "mdm", "technologies": "mdm",
"id": "388fbf31-619d-42e9-a481-7c09c64d2266", "id": "3824cb36-22d3-490e-bf92-6b1244345c91",
"templateReference": { "templateReference": {
"templateId": "", "templateId": "",
"templateFamily": "none", "templateFamily": "none",
@ -24,11 +24,11 @@
"id": "0", "id": "0",
"settingInstance": { "settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance", "@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus", "settingDefinitionId": "device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_enableautomaticupdates",
"settingInstanceTemplateReference": null, "settingInstanceTemplateReference": null,
"choiceSettingValue": { "choiceSettingValue": {
"settingValueTemplateReference": null, "settingValueTemplateReference": null,
"value": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus_1", "value": "device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_enableautomaticupdates_1",
"children": [] "children": []
} }
} }

View File

@ -0,0 +1,115 @@
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/configurationPolicies/$entity",
"createdDateTime": "2025-04-15T02:45:00.0665339Z",
"creationSource": null,
"description": "",
"lastModifiedDateTime": "2025-04-15T02:45:00.0665339Z",
"name": "Windows Hello for Business",
"platforms": "windows10",
"priorityMetaData": null,
"roleScopeTagIds": [
"0"
],
"settingCount": 3,
"technologies": "mdm",
"id": "89775d0e-7a3b-4e10-9571-608f0c97da87",
"templateReference": {
"templateId": "",
"templateFamily": "none",
"templateDisplayName": null,
"templateDisplayVersion": null
},
"settings": [
{
"id": "0",
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "device_vendor_msft_passportforwork_biometrics_usebiometrics",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "device_vendor_msft_passportforwork_biometrics_usebiometrics_true",
"children": []
}
}
},
{
"id": "1",
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "device_vendor_msft_passportforwork_biometrics_facialfeaturesuseenhancedantispoofing",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "device_vendor_msft_passportforwork_biometrics_facialfeaturesuseenhancedantispoofing_true",
"children": []
}
}
},
{
"id": "2",
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance",
"settingDefinitionId": "user_vendor_msft_passportforwork_{tenantid}",
"settingInstanceTemplateReference": null,
"groupSettingCollectionValue": [
{
"settingValueTemplateReference": null,
"children": [
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_passportforwork_{tenantid}_policies_enablepinrecovery",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "user_vendor_msft_passportforwork_{tenantid}_policies_enablepinrecovery_true",
"children": []
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance",
"settingDefinitionId": "user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_minimumpinlength",
"settingInstanceTemplateReference": null,
"simpleSettingValue": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationIntegerSettingValue",
"settingValueTemplateReference": null,
"value": 6
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance",
"settingDefinitionId": "user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_history",
"settingInstanceTemplateReference": null,
"simpleSettingValue": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationIntegerSettingValue",
"settingValueTemplateReference": null,
"value": 4
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_passportforwork_{tenantid}_policies_requiresecuritydevice",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "user_vendor_msft_passportforwork_{tenantid}_policies_requiresecuritydevice_true",
"children": []
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "user_vendor_msft_passportforwork_{tenantid}_policies_usepassportforwork",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "user_vendor_msft_passportforwork_{tenantid}_policies_usepassportforwork_true",
"children": []
}
}
]
}
]
}
}
]
}