mmckinnon/IntunePolicies
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: add compliance policy import to main script

Browse Source
This commit is contained in:
Matthew McKinnon
2025-03-17 15:01:33 +10:00
parent 6ebfed511f
commit 7d36e0a147
2 changed files with 23 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
CompliancePolicy.ps1
View File

@ -1,25 +0,0 @@
# Connect to Microsoft Graph
Connect-MgGraph -Scopes "DeviceManagementConfiguration.ReadWrite.All", "Organization.Read.All", "Group.ReadWrite.All", "Directory.ReadWrite.All" -NoWelcome
$policies = Get-ChildItem ./policies/compliance
ForEach ($policie in $policies) {
$PolicieName = $policie.name
$JsonData = Get-Content -Path ./policies/compliance/$PolicieName -Raw
$JsonDataUpdated = $JsonData -replace '\$tenantId', $tenantId
$PolicyObject = $JsonDataUpdated | ConvertFrom-Json
try {
$uri = "https://graph.microsoft.com/beta/deviceManagement/deviceCompliancePolicies" # Using the beta version
$response = Invoke-MgGraphRequest -Method POST -Uri $uri -Body ($PolicyObject | ConvertTo-Json -Depth 10)
Write-Host "✅ $PolicieName - successfully imported!"
#$response
} catch {
Write-Error "❌ An error occurred while importing the policy: $_"
}
}
# Disconnect from Graph
$null = Disconnect-Graph -ErrorAction SilentlyContinue

28
ImportPolicies.ps1
View File

@ -65,8 +65,8 @@ Write-Host "✅ Successfully created group $group"
$policies = Get-ChildItem ./policies/settingscatalog $policies = Get-ChildItem ./policies/settingscatalog
ForEach ($policie in $policies) { ForEach ($policy in $policies) {
$PolicyName = $policie.name $PolicyName = $policy.name
$JsonData = Get-Content -Path ./policies/settingscatalog/$PolicieName -Raw $JsonData = Get-Content -Path ./policies/settingscatalog/$PolicieName -Raw
$JsonDataUpdated = $JsonData -replace '\$tenantId', $tenantId $JsonDataUpdated = $JsonData -replace '\$tenantId', $tenantId
@ -81,6 +81,24 @@ ForEach ($policie in $policies) {
} }
} }
$policies = Get-ChildItem ./policies/compliance
ForEach ($policy in $policies) {
$PolicyName = $policy.name
$JsonData = Get-Content -Path ./policies/compliance/$PolicyName -Raw
$JsonDataUpdated = $JsonData -replace '\$tenantId', $tenantId
$PolicyObject = $JsonDataUpdated | ConvertFrom-Json
try {
$uri = "https://graph.microsoft.com/beta/deviceManagement/deviceCompliancePolicies" # Using the beta version
$null = Invoke-MgGraphRequest -Method POST -Uri $uri -Body ($PolicyObject | ConvertTo-Json -Depth 10)
Write-Host "✅ $PolicyName - successfully imported!"
} catch {
Write-Error "❌ An error occurred while importing the policy: $_"
}
}
# Create Windows Update Ring Policies # Create Windows Update Ring Policies
# Create a baseline policy using web interface # Create a baseline policy using web interface
@ -225,7 +243,7 @@ $ring = $body.displayName
$groupBodyJson = $Body | ConvertTo-Json -Depth 10 $groupBodyJson = $Body | ConvertTo-Json -Depth 10
# Send the POST request to create the Driver Update Profile # Send the POST request to create the Driver Update Profile
$response = Invoke-MgGraphRequest -Method POST -Uri $uri -Body $groupBodyJson -ContentType "application/json" $null = Invoke-MgGraphRequest -Method POST -Uri $uri -Body $groupBodyJson -ContentType "application/json"
Write-Host "✅ Successfully created group $ring" Write-Host "✅ Successfully created group $ring"
@ -245,7 +263,7 @@ $ring = $body.displayName
$groupBodyJson = $Body | ConvertTo-Json -Depth 10 $groupBodyJson = $Body | ConvertTo-Json -Depth 10
# Send the POST request to create the Driver Update Profile # Send the POST request to create the Driver Update Profile
$response = Invoke-MgGraphRequest -Method POST -Uri $uri -Body $groupBodyJson -ContentType "application/json" $null = Invoke-MgGraphRequest -Method POST -Uri $uri -Body $groupBodyJson -ContentType "application/json"
Write-Host "✅ Successfully created group $ring" Write-Host "✅ Successfully created group $ring"
@ -264,7 +282,7 @@ $ring = $body.displayName
$groupBodyJson = $Body | ConvertTo-Json -Depth 10 $groupBodyJson = $Body | ConvertTo-Json -Depth 10
# Send the POST request to create the Driver Update Profile # Send the POST request to create the Driver Update Profile
$response = Invoke-MgGraphRequest -Method POST -Uri $uri -Body $groupBodyJson -ContentType "application/json" $null = Invoke-MgGraphRequest -Method POST -Uri $uri -Body $groupBodyJson -ContentType "application/json"
Write-Host "✅ Successfully created group $ring" Write-Host "✅ Successfully created group $ring"
$null = Disconnect-Graph -ErrorAction SilentlyContinue $null = Disconnect-Graph -ErrorAction SilentlyContinue