Search for a command to run...
I work as System Administrator for more than 15 years now and I love to make my life easier by automating work & personal stuff via PowerShell (even silly things like food recipes list generation).
This looks very useful but I get an error when installing the IntuneStuff module.
"Import-Module : AzureRM.Profile already loaded. Az and AzureRM modules cannot be imported in the same session or used in the same script or runbook."
I've found that the AzureRM module is an older module, but I cannot uninstall it because it is a dependency of IntuneStuff.
Actually, this was for the latest version, 1.4.0. I saw that 1.3.0 had lots more downloads so I installed that one instead and it works great.
Thank you for this!
Or any other Azure service requiring special authentication strength
If you are using Azure Local (HCI), you might find the following PowerShell script AzureLocalVMImageUpdater.ps1 useful. What is it good for? The code replaces the Windows VM images in the specified Azure Local cluster(s) with the latest compatible ve...
Problem It happens that the hardware hash of your Autopilot device gets changed. Thanks to the replacement of the motherboard or some other issue. This can lead to future problems when your users need to reinstall the operating system, but the Autopi...
Learn how to use undocumented Azure APIs for massive performance gains
Keeping a secure, version-controlled backup of your Intune-managed device data, including BitLocker, LAPS, and FileVault keys, is a best practice for any modern IT team. In this post, I’ll guide you through an Azure DevOps pipeline that automates the...
For my new PowerShell function Search-IntuneAccountPolicyAssignment (for searching Intune policies assigned to selected account) I was in need to have a list of all these policies so I can search through them. For this reason, I have created a function Get-IntunePolicy and integrated it into my module IntuneStuff.
To get assignable Intune policies, use the function Get-IntunePolicy from my module IntuneStuff like this 👇 🙂
Install-Module IntuneStuff -Force
Import-Module IntuneStuff -Force
# connect to Graph API
Connect-MSGraph
# get all Intune policies
Get-IntunePolicy -verbose
# get just Apps and Compliance Intune policies
Get-IntunePolicy -policyType 'app', 'compliancePolicy'
# get just Apps and Compliance Intune policies with the subset of available properties (id, displayName, lastModifiedDateTime, assignments) for each policy
Get-IntunePolicy -policyType 'app', 'compliancePolicy' -basicOverview
And results can look similar to this 👇
As you can see by default this function returns one object where property names are "policy sections" (app, AppConfigurationpolicy, CompliancePolicy,... ) and values are individual policies. If you don't like this, use the parameter flatOutput and you will get an array of all policies instead.
As can be seen, there is new property PolicyType so you can easily distinguish and filter among these policies.
The second notice here is that the parameter basicOverview is good, well, to get a basic overview of the policies, because just a subset of all properties will be returned. Without this switch, you will get all available properties.
What policies does this function return? As I said, all assignable Intune policies. Right now the list consists of:
So hopefully I haven't forgotten anything.
Thanks to the function parameter PolicyType, you can easily customize policies that will be retrieved too.
Because in my function I try to mimic Intune Web portal structure, I simply open the page with Intune policies, hit F12 to open Developer tools, refresh the page, filter 'graph', and find the correct GET request.
I hope you will find this function useful. And if you find any bug, please let me know in comments or on my twitter @AndrewZtrhgf.