Szukaj na tym blogu

czwartek, 14 grudnia 2023

Intune policies - get details from MS Graph



Compliance policies:

https://graph.microsoft.com/beta/deviceManagement/deviceCompliancePolicies


Conditional access policies:

https://graph.microsoft.com/beta/identity/conditionalAccess/policies


Configuration profiles:

https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations

https://graph.microsoft.com/beta/deviceManagement/configurationPolicies


Scripts

https://graph.microsoft.com/beta/deviceManagement/deviceManagementScripts

HKLM:\SOFTWARE\Microsoft\IntuneManagementExtension\Policies


Remediations:

https://graph.microsoft.com/beta/deviceManagement/deviceHealthScripts


Intune compliance policy evaluation enforcement

To manually enforce compliance policy check on endpoint:

   $syncIme = New-Object -ComObject Shell.Application
    $syncIme.open("intunemanagementextension://synccompliance")


source: https://jannikreinhard.com/2022/07/31/summary-of-the-intune-management-extension/