chore: update settings for Edge and Defender policies

This commit is contained in:
2025-03-12 21:36:16 +10:00
parent 40c7895196
commit 39b6a1272d
4 changed files with 270 additions and 56 deletions

View File

@ -1,81 +1,59 @@
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/configurationPolicies/$entity",
"createdDateTime": "2025-03-03T10:40:15.8588089Z",
"creationSource": null,
"description": "",
"lastModifiedDateTime": "2025-03-03T10:40:15.8588089Z",
"name": "LAPS",
"name": "Windows LAPS",
"description": "created by ourcloudnetwork.com",
"platforms": "windows10",
"priorityMetaData": null,
"technologies": "mdm",
"roleScopeTagIds": [
"0"
],
"settingCount": 2,
"technologies": "mdm",
"id": "e7c1fcf8-13fb-42c7-a09a-3f43d7bd5cc9",
"templateReference": {
"templateId": "",
"templateFamily": "none",
"templateDisplayName": null,
"templateDisplayVersion": null
},
"settings": [
{
"id": "0",
"@odata.type": "#microsoft.graph.deviceManagementConfigurationSetting",
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd",
"settingInstanceTemplateReference": null,
"settingDefinitionId": "device_vendor_msft_laps_policies_backupdirectory",
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_1",
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingValue",
"value": "device_vendor_msft_laps_policies_backupdirectory_1",
"children": [
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance",
"settingDefinitionId": "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordagedays",
"settingInstanceTemplateReference": null,
"settingDefinitionId": "device_vendor_msft_laps_policies_passwordagedays_aad",
"simpleSettingValue": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationIntegerSettingValue",
"settingValueTemplateReference": null,
"value": 14
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordcomplexity",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordcomplexity_4",
"children": []
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance",
"settingDefinitionId": "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordlength",
"settingInstanceTemplateReference": null,
"simpleSettingValue": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationIntegerSettingValue",
"settingValueTemplateReference": null,
"value": 14
}
}
]
],
"settingValueTemplateReference": {
"settingValueTemplateId": "4d90f03d-e14c-43c4-86da-681da96a2f92"
}
},
"settingInstanceTemplateReference": {
"settingInstanceTemplateId": "a3270f64-e493-499d-8900-90290f61ed8a"
}
}
},
{
"id": "1",
"@odata.type": "#microsoft.graph.deviceManagementConfigurationSetting",
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus",
"settingInstanceTemplateReference": null,
"settingDefinitionId": "device_vendor_msft_laps_policies_passwordcomplexity",
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus_1",
"children": []
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingValue",
"value": "device_vendor_msft_laps_policies_passwordcomplexity_4",
"children": [],
"settingValueTemplateReference": {
"settingValueTemplateId": "aa883ab5-625e-4e3b-b830-a37a4bb8ce01"
}
},
"settingInstanceTemplateReference": {
"settingInstanceTemplateId": "8a7459e8-1d1c-458a-8906-7b27d216de52"
}
}
}
]
}
],
"templateReference": {
"templateId": "adc46e5a-f4aa-4ff6-aeff-4f27bc525796_1"
}
}

37
policies/LAPSAdmin.json Normal file
View File

@ -0,0 +1,37 @@
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/configurationPolicies/$entity",
"createdDateTime": "2025-02-05T23:10:06.2132942Z",
"creationSource": null,
"description": "",
"lastModifiedDateTime": "2025-02-05T23:10:06.2132942Z",
"name": "Windows LAPS - Enable Administrator Account",
"platforms": "windows10",
"priorityMetaData": null,
"roleScopeTagIds": [
"0"
],
"settingCount": 1,
"technologies": "mdm",
"id": "388fbf31-619d-42e9-a481-7c09c64d2266",
"templateReference": {
"templateId": "",
"templateFamily": "none",
"templateDisplayName": null,
"templateDisplayVersion": null
},
"settings": [
{
"id": "0",
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus_1",
"children": []
}
}
}
]
}