Code Monkey home page Code Monkey logo

intune-config-frameworks's Introduction

Intune Configuration Framework

As mobile usage becomes more prevalent in your organizations, so does the need to protect against data leakage scenarios. Intune offers choices to organizations to tailor the protection to their specific needs through APp Protection Policies, as well as device compliance and configuration policies for mobile platforms. For some, it may not be obvious which policy settings are required to implement a complete scenario. To help organizations prioritize client endpoint hardening, Microsoft is leveraging a configuration framework taxonomy that is broken down into distinct configuration levels, with each level building off the previous level.

This repository includes the configuration level JSON templates for Intune App Protection Policies and device compliance and configuration policies for mobile platforms. The JSON templates can be imported into Intune using the Intune PowerShell scripts.

As with any framework, settings within a corresponding level may need to be adjusted based on the needs of the organization as data protection must evaluate the threat environment, risk appetite, and impact to usability.

Prerequisites

Importing the JSON templates into an Intune tenant requires the following:

  • Install the AzureAD PowerShell module by running 'Install-Module AzureAD' or 'Install-Module AzureADPreview' from an elevated PowerShell prompt
  • An Intune tenant which supports the Azure Portal with a production or trial license (https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune)
  • Using the Microsoft Graph APIs to configure Intune controls and policies requires an Intune license.
  • An account with permissions to administer the Intune Service
  • PowerShell v5.0 on Windows 10 x64
  • First time usage of these scripts requires a Global Administrator of the Tenant to accept the permissions of the application

Additional resources

Copyright

Copyright (c) 2020 Microsoft Corporation. ALl rights reserved.

This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact [email protected] with any additional questions or comments.

intune-config-frameworks's People

Contributors

microsoftopensource avatar smithre4 avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

intune-config-frameworks's Issues

Missing instructions for GDAP

The README is missing instructions on how to execute this for delegated orgs using GDAP, so that partners can use it with managed customers

iOS basic security compliance (Level 1)

{
"@odata.type": "#microsoft.graph.iosCompliancePolicy",
"description": "Level 1 is the minimum security configuration for an enterprise mobile device owned by the organization.",
"displayName": "iOS basic security compliance (Level 1)",
"passcodeBlockSimple": false,
"passcodeExpirationDays": null,
"passcodeMinimumLength": 6,
"passcodeMinutesOfInactivityBeforeLock": null,
"passcodeMinutesOfInactivityBeforeScreenTimeout": 5,
"passcodePreviousPasscodeBlockCount": null,
"passcodeMinimumCharacterSetCount": null,
"passcodeRequiredType": "deviceDefault",
"passcodeRequired": true,
"osMinimumVersion": null,
"osMaximumVersion": null,
"osMinimumBuildVersion": null,
"osMaximumBuildVersion": null,
"securityBlockJailbrokenDevices": true,
"deviceThreatProtectionEnabled": true,
"deviceThreatProtectionRequiredSecurityLevel": "secured",
"managedEmailProfileRequired": false,
"restrictedApps": [

                   ]

}

Failure when adding policies via powershell

Hello - I'm getting the following errors when attempting to run either ps1 import script. Have tried on multiple tenants, ensured licensing, powershell version, modules imported.

Response content:
{"error":{"code":"ModelValidationFailure","message":"An entry with type 'microsoft.management.services.api.iosGeneralDeviceConfiguration' was found, but it is not assignable to the expected type 'microsoft.management.services.api.deviceCompliancePolicy'. The type specified in the entry must be equal to either the expected type or a derived type.","innerError":{"message":"An entry with type 'microsoft.management.services.api.iosGeneralDeviceConfiguration' was found, but it is not assignable to the expected type 'microsoft.management.services.api.deviceCompliancePolicy'. The type specified in the entry must be equal to either the expected type or a derived type.","date":"2023-11-09T19:25:50","request-id":"5edac270-14bb-498d-831e-ab45e7487d54","client-request-id":"5edac270-14bb-498d-831e-ab45e7487d54"}}}
Add-DeviceCompliancePolicy : Request to https://graph.microsoft.com/Beta/deviceManagement/deviceCompliancePolicies
failed with HTTP Status BadRequest Bad Request
At C:\Intune\Intune-Config-Frameworks-master\iOS\Supervised\CompliancePolicy_Import_FromJSON.ps1:350 char:1

  • Add-DeviceCompliancePolicy -JSON $JSON_Output
  •   + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
      + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Add-DeviceCompliancePolicy
    

issue with AzureAD powershell module last version

Hello,

On new AzureAD powershell module, there is not anymore the files on C:\Program Files\WindowsPowerShell\Modules\AzureAD\2.0.2.140 :
-Microsoft.IdentityModel.Clients.ActiveDirectory.dll
-Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.dll
-Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.xml
-Microsoft.IdentityModel.Clients.ActiveDirectory.xml

and cause an error.

I add to copy them from older AzureAD version for the connection to AzureAD account works.

Thanks to update it to be working on the last version :)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.