resource "microsoft365wp_device_management_configuration_policy" "disable_enumeration" {
  name = "Disable Enumeration of SAM Accounts and Shares"
  settings = [
    { instance = {
      definition_id = "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares"
      choice = {
        value = {
          value = "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares_1"
        }
      }
      }
    }
  ]
  depends_on = [azuread_group.mem_windows_devices]
  assignments = [
    for x in [
      "${data.azuread_group.mem_windows_devices.object_id}"
    ] :
    { target = { group = { group_id = x } } }
  ]

}