|Open one of the displayed json files which are displayed after you generated the documentations. If this is not displayed, then manually check the Data directory in the PowerShell module directory. |
8 | | 
|Specify the Name and section of each api propert name by copying the labels from the Intune Console. All names have to be in english. If a you can't associate a property with label, then leave the Name attribute in the json file just empty.|
9 | | |Save the file|
10 | | 
|Create a new documentation and check if the result is as expected. if no, go back to step 2.|
11 | | |Submit your file to the project by pusing it via git or send via one of my social media channels (Whatever is simpler for you).|
12 |
--------------------------------------------------------------------------------
/Images/Translate-Manuals-1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/ThomasKur/IntuneDocumentation/277cf291dbbd7dbfda807dd908b5dc61c4a94513/Images/Translate-Manuals-1.png
--------------------------------------------------------------------------------
/Images/Translate-Manuals-2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/ThomasKur/IntuneDocumentation/277cf291dbbd7dbfda807dd908b5dc61c4a94513/Images/Translate-Manuals-2.png
--------------------------------------------------------------------------------
/Images/Translate-Manuals-3.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/ThomasKur/IntuneDocumentation/277cf291dbbd7dbfda807dd908b5dc61c4a94513/Images/Translate-Manuals-3.png
--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
1 | GNU GENERAL PUBLIC LICENSE
2 | Version 3, 29 June 2007
3 |
4 | Copyright (C) 2007 Free Software Foundation, Inc. ' } else { "`n" } 133 | foreach($Assignment in $App_Assignment) { 134 | if($null -ne $Assignment.target.groupId){ 135 | $AppGroups += $Assignment.target.groupId 136 | $Assignments += "$((Get-AADGroup -groupid $Assignment.target.groupId).displayName)$newline - Intent:$($Assignment.intent)" 137 | } else { 138 | $Assignments += "$(($Assignment.target.'@odata.type' -replace "#microsoft.graph.",''))$newline - Intent:$($Assignment.intent)" 139 | } 140 | } 141 | $Intune_App | Add-Member Noteproperty "Assignments" ($Assignments -join $newline) 142 | $Intune_Apps += $Intune_App 143 | } 144 | } 145 | if($null -ne $Intune_Apps){ 146 | Add-Header -level 1 -format $format -Text "Applications" 147 | Add-Table -InputObject ($Intune_Apps | Sort-Object Publisher,DisplayName) -format $format -AutoFitStyle Contents 148 | if($null -ne $AppGroups){ 149 | Add-Header -level 1 -format $format -Text "Groups used to assign apps" 150 | Invoke-PrintGroup -GroupIds $AppGroups 151 | } 152 | } 153 | 154 | #endregion 155 | #region Document App protection policies 156 | $MAMs = Get-IntuneAppProtectionPolicy | Where-Object { $_.'@odata.type' -notlike "*AppConfiguration" } 157 | 158 | if($null -ne $MAMs){ 159 | Add-Header -level 1 -format $format -Text "App Protection Policies" 160 | foreach($MAM in $MAMs){ 161 | write-Log "App Protection Policy: $($MAM.displayName)" 162 | Add-Header -level 2 -format $format -Text $MAM.displayName 163 | if($MAM.'@odata.type' -eq "#microsoft.graph.mdmWindowsInformationProtectionPolicy"){ 164 | $MAM.protectedApps = $MAM.protectedApps.displayName -join ", " 165 | } 166 | Invoke-PrintTable -Properties $MAM.psobject.properties -TypeName $MAM.'@odata.type' 167 | if($MAM.'@odata.type' -eq "#microsoft.graph.iosManagedAppProtection"){ 168 | $MAMA = Get-MAM_iOS_Assignment -policyId $MAM.id 169 | } 170 | if($MAM.'@odata.type' -eq "#microsoft.graph.androidManagedAppProtection"){ 171 | $MAMA = Get-MAM_Android_Assignment -policyId $MAM.id 172 | } 173 | if($MAM.'@odata.type' -eq "#microsoft.graph.mdmWindowsInformationProtectionPolicy"){ 174 | $MAMA = Get-MAM_Windows_Assignment -policyId $MAM.id 175 | } 176 | Invoke-PrintAssignmentDetail -Assignments $MAMA 177 | } 178 | } 179 | #endregion 180 | #region Document App configuration policies 181 | $MACs = Get-IntuneAppProtectionPolicy | Where-Object { $_.'@odata.type' -like "*AppConfiguration" } 182 | if($null -ne $MACs){ 183 | Add-Header -level 1 -format $format -Text "App Configuration Policies" 184 | foreach($MAC in $MACs){ 185 | write-Log "App Configuration Policy: $($MAC.displayName)" 186 | Add-Header -level 2 -format $format -Text $MAC.displayName 187 | Invoke-PrintTable -Properties $MAC.psobject.properties -TypeName $MAC.'@odata.type' 188 | $MACA = Get-ManagedAppConfig_Assignment -policyId $MAC.id 189 | Invoke-PrintAssignmentDetail -Assignments $MACA 190 | } 191 | } 192 | #endregion 193 | #region Document Compliance Policies 194 | $DCPs = Get-IntuneDeviceCompliancePolicy 195 | if($null -ne $DCPs){ 196 | Add-Header -level 1 -format $format -Text "Compliance Policies" 197 | foreach($DCP in $DCPs){ 198 | write-Log "Device Compliance Policy: $($DCP.displayName)" 199 | Add-Header -level 2 -format $format -Text $DCP.displayName 200 | if([String]::IsNullOrWhiteSpace($DCP.'@odata.type') -eq $false){ 201 | Invoke-PrintTable -Properties $DCP.psobject.properties -TypeName $DCP.'@odata.type' 202 | $id = $DCP.id 203 | $DCPA = Get-IntuneDeviceCompliancePolicyAssignment -deviceCompliancePolicyId $id 204 | Invoke-PrintAssignmentDetail -Assignments $DCPA 205 | } 206 | 207 | } 208 | } 209 | #endregion 210 | #region Security Baselines 211 | $SBs = Get-SecBaselinesBeta 212 | if($null -ne $SBs){ 213 | Add-Header -level 1 -format $format -Text "Security Baselines" 214 | foreach($SB in $SBs){ 215 | write-Log "Security Baselines Policy: $($SB.displayName)" 216 | Add-Header -level 2 -format $format -Text $SB.Name 217 | # $SB.Settings | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle Window -Design LightListAccent2 218 | Invoke-PrintTable -Properties $SB.Settings -TypeName $SB.'@odata.type' 219 | Invoke-PrintAssignmentDetail -Assignments $SB.Assignments 220 | } 221 | } 222 | #endregion 223 | #region Document T&C 224 | write-Log "Terms and Conditions" 225 | $GAndTs = Get-IntuneTermsAndConditions 226 | if($null -ne $GAndTs){ 227 | Add-Header -level 1 -format $format -Text "Terms and Conditions" 228 | foreach($GAndT in $GAndTs){ 229 | Add-Header -level 2 -format $format -Text $GAndT.displayName 230 | Add-Table -InputObject ($GAndT | Select-Object -Property id,@{Name="Created at";Expression={$_.createdDateTime}},@{Name="Modified at";Expression={$_.lastModifiedDateTime}},@{Name="Displayname";Expression={$_.displayName}},@{Name="Title";Expression={$_.title}},@{Name="Version";Expression={$_.version}}) -format $format -AutoFitStyle Contents 231 | $DCPA = Get-DeviceManagement_TermsAndConditions_Assignments -termsAndConditionId $GAndT.id 232 | Invoke-PrintAssignmentDetail -Assignments $DCPA 233 | } 234 | } 235 | #endregion 236 | 237 | #region Document Device Configurations 238 | Add-Header -level 1 -format $format -Text "Device Configuration" 239 | $DCPs = Get-ConfigurationProfileBeta 240 | foreach($DCP in $DCPs){ 241 | write-Log "Device Compliance Policy: $($DCP.displayName)" 242 | Add-Header -level 2 -format $format -Text $DCP.displayName 243 | Invoke-PrintTable -Properties $DCP.psobject.properties -TypeName $DCP.'@odata.type' 244 | $id = $DCP.id 245 | $DCPA = Get-IntuneDeviceConfigurationPolicyAssignment -deviceConfigurationId $id 246 | Invoke-PrintAssignmentDetail -Assignments $DCPA 247 | } 248 | $ADMXPolicies = Get-ADMXBasedConfigurationProfile 249 | foreach($ADMXPolicy in $ADMXPolicies){ 250 | write-Log "Device Configuration (ADMX): $($ADMXPolicy.DisplayName)" 251 | Add-Header -level 2 -format $format -Text $ADMXPolicy.DisplayName 252 | Add-Table -InputObject $ADMXPolicy.Settings -format $format 253 | 254 | $DCPA = Get-ADMXBasedConfigurationProfile_Assignment -ADMXBasedConfigurationProfileId $ADMXPolicy.Id 255 | Invoke-PrintAssignmentDetail -Assignments $DCPA 256 | } 257 | #endregion 258 | #region Device Management Scripts (PowerShell) 259 | Add-Header -level 1 -format $format -Text "Device Management Scripts" 260 | $PSScripts = Get-DeviceManagementScript 261 | foreach($PSScript in $PSScripts){ 262 | Add-Header -level 2 -format $format -Text $PSScript.displayName 263 | $ht2 = @{} 264 | $PSScript.psobject.properties | ForEach-Object { 265 | if($_.Name -ne "scriptContent"){ 266 | $ht2[(Format-MsGraphData $($_.Name))] = "$($_.Value)" 267 | } 268 | } 269 | Add-Table -InputObject ($ht2.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) -format $format 270 | $DCPA = Get-DeviceManagementScript_Assignment -DeviceManagementScriptId $ht2.id 271 | Invoke-PrintAssignmentDetail -Assignments $DCPA 272 | 273 | Add-Header -level 3 -format $format -Text "Script" 274 | Add-ScriptText -format $format -Text ($PSScript.scriptContent -replace "`0", "") 275 | } 276 | #endregion 277 | #region AutoPilot Configuration 278 | $AutoPilotConfigs = Get-WindowsAutopilotConfig 279 | if($null -ne $AutoPilotConfigs){ 280 | Add-Header -level 1 -format $format -Text "AutoPilot Configuration" 281 | 282 | foreach($APC in $AutoPilotConfigs){ 283 | write-Log "AutoPilot Config: $($APC.displayName)" 284 | Add-Header -level 2 -format $format -Text $APC.displayName 285 | Invoke-PrintTable -Properties $APC.psobject.properties -TypeName $APC.'@odata.type' 286 | } 287 | } 288 | #endregion 289 | 290 | #region Enrollment Configuration 291 | $EnrollmentStatusPage = Get-EnrollmentStatusPage 292 | if($null -ne $EnrollmentStatusPage){ 293 | Add-Header -level 1 -format $format -Text "Enrollment Configuration" 294 | foreach($ESP in $EnrollmentStatusPage){ 295 | write-Log "Enrollment Status Page Config: $($ESP.displayName)" 296 | $ESPtype = $ESP.'@odata.type' 297 | switch($ESPtype){ 298 | "#microsoft.graph.windows10EnrollmentCompletionPageConfiguration" { $ESPtype = "ESP" } 299 | "#microsoft.graph.deviceEnrollmentLimitConfiguration" { $ESPtype = "Enrollment Limit" } 300 | "#microsoft.graph.deviceEnrollmentPlatformRestrictionsConfiguration" { $ESPtype = "Platform Restrictions" } 301 | "#microsoft.graph.deviceEnrollmentWindowsHelloForBusinessConfiguration" { $ESPtype = "Windows Hello for Business" } 302 | } 303 | Add-Header -level 2 -format $format -Text "$($ESPtype) - $($ESP.displayName)" 304 | 305 | Invoke-PrintTable -Properties $ESP.psobject.properties -TypeName $ESP.'@odata.type' 306 | $DCPA = Get-DeviceManagement_DeviceEnrollmentConfigurations_Assignments -deviceEnrollmentConfigurationId $ESP.id 307 | Invoke-PrintAssignmentDetail -Assignments $DCPA 308 | } 309 | } 310 | #endregion 311 | 312 | #region Custom Roles 313 | $CustomRoles = Get-DeviceManagement_RoleDefinitions | Where-Object { $_.isBuiltin -eq $false } 314 | if($null -ne $CustomRoles){ 315 | Add-Header -level 1 -format $format -Text "Custom Roles" 316 | foreach($CustomRole in $CustomRoles){ 317 | write-Log "Custom role: $($CustomRole.displayName)" 318 | Add-Header -level 2 -format $format -Text $CustomRole.displayName 319 | Add-Text -format $format -Text $CustomRole.rolePermissions.resourceActions.allowedResourceActions -Size 11 320 | } 321 | } 322 | #endregion 323 | 324 | #region Apple Push Certificate 325 | try{ 326 | $VPPs = Get-IntuneVppToken -ErrorAction SilentlyContinue 327 | $APNs = Get-IntuneApplePushNotificationCertificate -ErrorAction SilentlyContinue 328 | } catch { 329 | Write-Log "Failed to load AppleAPN or VPP information" 330 | } 331 | Add-Header -level 1 -format $format -Text "Apple Configurations" 332 | Add-Header -level 2 -format $format -Text "Apple Push Certificate" 333 | foreach($APN in $APNs){ 334 | write-Log "APN Config: $($APN.appleIdentifier)" 335 | Add-Header -level 3 -format $format -Text $APN.appleIdentifier 336 | Invoke-PrintTable -Properties $APN.psobject.properties -TypeName "applePushNotificationCertificate" 337 | } 338 | Add-Header -level 2 -format $format -Text "Apple VPP Tokens" 339 | foreach($VPP in $VPPs){ 340 | write-Log "VPP Config: $($VPP.appleId)" 341 | Add-Header -level 3 -format $format -Text $VPP.appleId 342 | Invoke-PrintTable -Properties $VPP.psobject.properties -TypeName "appleVPPCertificate" 343 | } 344 | #endregion 345 | 346 | #region Device Categories 347 | $Cats = Get-IntuneDeviceCategory 348 | if($null -ne $Cats){ 349 | Add-Header -level 1 -format $format -Text "Device Categories" 350 | write-Log "Device Categories: $($Cats.count)" 351 | foreach($Cat in $Cats){ 352 | Add-Text -format $format -Text (" - " + $Cat.displayName) 353 | } 354 | } 355 | #endregion 356 | 357 | #region Exchange Connection 358 | $exch = Get-IntuneExchangeConnector 359 | if($null -ne $exch){ 360 | Add-Header -level 1 -format $format -Text "Exchange Connector" 361 | write-Log "Exchange Connector: $($exch.serverName)" 362 | Invoke-PrintTable -Properties $exch.psobject.properties -TypeName "ExchangeConnector" 363 | } 364 | #endregion 365 | 366 | #region Partner Configuration 367 | $partnerConfigs = Get-IntuneDeviceManagementPartner 368 | if($null -ne $partnerConfigs){ 369 | Add-Header -level 1 -format $format -Text "Partner Connections" 370 | 371 | foreach($partnerConfig in $partnerConfigs){ 372 | write-Log "Partner Config: $($partnerConfig.displayName)" 373 | Add-Header -level 2 -format $format -Text $partnerConfig.displayName 374 | Invoke-PrintTable -Properties $partnerConfig.psobject.properties -TypeName "PartnerConfiguration" 375 | } 376 | } 377 | #endregion 378 | #endregion 379 | #region Finishing 380 | ######################################################## 381 | if ($format -eq 'docx') { 382 | Write-Log "Press Ctrl + A and then F9 to Update the table of contents and other dynamic fields in the Word document." 383 | } 384 | if($Script:NewTranslationFiles.Count -gt 0 -and $Script:UseTranslation){ 385 | Write-Log "You used the option to translate API properties. Some of the configurations of your tenant could not be translated because translations are missing." -Type Warn 386 | foreach($file in ($Script:NewTranslationFiles | Select-Object -Unique)){ 387 | Write-Log " - $($file.Replace('Internal\..\',''))" -Type Warn 388 | } 389 | Write-Log "You can support the project by translating and submitting the files as issue on the project page. Then it will be included for the future." -Type Warn 390 | Write-Log "Follow the guide here https://github.com/ThomasKur/IntuneDocumentation/blob/master/AddTranslation.md" -Type Warn 391 | } 392 | 393 | Write-Log "End Script $Scriptname" 394 | #endregion 395 | } 396 | -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Functions/New-IntuneDocumentationAppRegistration.ps1: -------------------------------------------------------------------------------- 1 | Function New-IntuneDocumentationAppRegistration(){ 2 | <# 3 | .DESCRIPTION 4 | This script will create an App registration(WPNinjas.eu Automatic Documentation) in Azure AD. Global Admin privileges are required during execution of this function. Afterwards the created clint secret can be used to execute the Intunde Documentation silently. 5 | 6 | .EXAMPLE 7 | $p = New-IntuneDocumentationAppRegistration 8 | $p | fl 9 | 10 | ClientID : d5cf6364-82f7-4024-9ac1-73a9fd2a6ec3 11 | ClientSecret : S03AESdMlhLQIPYYw/cYtLkGkQS0H49jXh02AS6Ek0U= 12 | ClientSecretExpiration : 21.07.2025 21:39:02 13 | TenantId : d873f16a-73a2-4ccf-9d36-67b8243ab99a 14 | 15 | .NOTES 16 | Author: Thomas Kurth/baseVISION 17 | Date: 21.7.2020 18 | 19 | History 20 | See Release Notes in Github. 21 | 22 | #> 23 | [CmdletBinding(SupportsShouldProcess, ConfirmImpact='Medium')] 24 | Param( 25 | [int] 26 | $TokenLifetimeDays = 365 27 | ) 28 | ## Manual Variable Definition 29 | ######################################################## 30 | #$DebugPreference = "Continue" 31 | $ScriptName = "DocumentIntuneAppRegistration" 32 | 33 | 34 | #region Initialization 35 | ######################################################## 36 | Write-Log "Start Script $Scriptname" 37 | 38 | $AzureAD = Get-Module -Name AzureAD 39 | if($AzureAD){ 40 | Write-Verbose -Message "AzureAD module is loaded." 41 | } else { 42 | Write-Warning -Message "AzureAD module is not loaded, please install by 'Install-Module AzureAD'." 43 | } 44 | 45 | #region Authentication 46 | Connect-AzureAD | Out-Null 47 | #endregion 48 | #region Main Script 49 | ######################################################## 50 | 51 | $displayName = "WPNinjas.eu Automatic Documentation" 52 | $appPermissionsRequired = @('Policy.Read.All', 53 | 'Directory.Read.All', 54 | 'DeviceManagementServiceConfig.Read.All', 55 | 'DeviceManagementRBAC.Read.All', 56 | 'DeviceManagementManagedDevices.Read.All', 57 | 'DeviceManagementConfiguration.Read.All', 58 | 'DeviceManagementApps.Read.All', 59 | 'Device.Read.All', 60 | 'Agreement.Read.All', 61 | 'Application.Read.All') 62 | $targetServicePrincipalName = 'Microsoft Graph' 63 | 64 | if (!(Get-AzureADApplication -SearchString $displayName)) { 65 | $app = New-AzureADApplication -DisplayName $displayName ` 66 | -Homepage "https://localhost" ` 67 | -ReplyUrls "urn:ietf:wg:oauth:2.0:oob" ` 68 | -PublicClient $true 69 | 70 | 71 | # create SPN for App Registration 72 | Write-Debug ('Creating SPN for App Registration {0}' -f $displayName) 73 | 74 | # create a password (spn key) 75 | $startDate = Get-Date 76 | $endDate = $startDate.AddDays($TokenLifetimeDays) 77 | $appPwd = New-AzureADApplicationPasswordCredential -ObjectId $app.ObjectId -CustomKeyIdentifier ((New-Guid).Guid.Replace("-","").subString(0, 30)) -StartDate $startDate -EndDate $endDate 78 | 79 | # create a service principal for your application 80 | # you need this to be able to grant your application the required permission 81 | $spForApp = New-AzureADServicePrincipal -AppId $app.AppId -PasswordCredentials @($appPwd) 82 | Set-AzureADAppPermission -targetServicePrincipalName $targetServicePrincipalName -appPermissionsRequired $appPermissionsRequired -childApp $app -spForApp $spForApp 83 | 84 | } else { 85 | Write-Debug ('App Registration {0} already exists' -f $displayName) 86 | $app = Get-AzureADApplication -SearchString $displayName 87 | $spForApp = Get-AzureADServicePrincipal -SearchString $app.AppId 88 | # create a password (spn key) 89 | $startDate = Get-Date 90 | $endDate = $startDate.AddDays($TokenLifetimeDays) 91 | $appPwd = New-AzureADApplicationPasswordCredential -ObjectId $app.ObjectId -CustomKeyIdentifier ((New-Guid).Guid.Replace("-","").subString(0, 30)) -StartDate $startDate -EndDate $endDate 92 | Set-AzureADAppPermission -targetServicePrincipalName $targetServicePrincipalName -appPermissionsRequired $appPermissionsRequired -childApp $app -spForApp $spForApp -ErrorAction SilentlyContinue 93 | 94 | } 95 | 96 | 97 | 98 | 99 | #endregion 100 | #region Finishing 101 | ######################################################## 102 | [PSCustomObject]@{ 103 | ClientID = $app.AppId 104 | ClientSecret = $appPwd.Value 105 | ClientSecretExpiration = $appPwd.EndDate 106 | TenantId = (Get-AzureADCurrentSessionInfo).TenantId 107 | } 108 | 109 | Write-Log "End Script $Scriptname" 110 | #endregion 111 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Add-Header.ps1: -------------------------------------------------------------------------------- 1 | function Add-Header { 2 | <# 3 | .SYNOPSIS 4 | This function is used to add a header in the documentation. 5 | .EXAMPLE 6 | Add-Header -format 'md' -Text "Assignments" -level 2 7 | Adds Assignments as a 2nd level heading in the 'md' format file at $FullDocumentationPath 8 | .NOTES 9 | NAME: Add-Header 10 | #> 11 | param( 12 | [Parameter(Mandatory = $true)] 13 | [String]$format, 14 | 15 | [Parameter(Mandatory = $true)] 16 | [String]$Text, 17 | 18 | [Parameter(HelpMessage = "Please choose a heading level between 1 and 6")] 19 | [ValidateRange(1, 6)] 20 | [int32]$level 21 | ) 22 | 23 | if ($format -eq 'md') { 24 | # For markdown we already used a H1 for the doc Title, so to ensure proper header order 25 | # add 1 to the given header level 26 | "$('#' * ($level + 1)) $Text`r`n" | Out-File -FilePath $FullDocumentationPath -Append -Encoding utf8 27 | } else { 28 | Add-WordText -FilePath $FullDocumentationPath -Heading "Heading$level" -Text $Text 29 | } 30 | } 31 | -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Add-ScriptText.ps1: -------------------------------------------------------------------------------- 1 | function Add-ScriptText { 2 | <# 3 | .SYNOPSIS 4 | This function is used to add script content in the documentation. 5 | .EXAMPLE 6 | Add-ScriptText -format 'docx' -Text "Write-Log $Value" 7 | Adds the text 'Write-Log $Value' formatted as code in the 'docx' format file at $FullDocumentationPath 8 | .NOTES 9 | NAME: Add-ScriptText 10 | #> 11 | param( 12 | [Parameter(Mandatory = $true)] 13 | [String]$format, 14 | 15 | [Parameter(Mandatory = $true)] 16 | [String]$Text 17 | ) 18 | if ($format -eq 'md') { 19 | '```' + "`r`n$Text`r`n" + '```' | Out-File -FilePath $FullDocumentationPath -Append -Encoding utf8 20 | } else { 21 | Add-WordText -FilePath $FullDocumentationPath -Text $Text -Size 10 -Italic -FontFamily "Courier New" 22 | } 23 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Add-Table.ps1: -------------------------------------------------------------------------------- 1 | function Add-Table { 2 | <# 3 | .SYNOPSIS 4 | This function is used to add a table using an Object as input in the documentation. 5 | .EXAMPLE 6 | Add-Table -InputObject $Properties -format 'md' 7 | Converts the $Properties object to a Markdown formatted table and adds to the 'md' format file at $FullDocumentationPath 8 | .NOTES 9 | NAME: Add-Table 10 | #> 11 | param( 12 | [Parameter( 13 | Mandatory = $true, 14 | ValueFromPipeline = $true 15 | )] 16 | [PSObject[]]$InputObject, 17 | 18 | [Parameter(Mandatory = $true)] 19 | [String]$format, 20 | 21 | [Parameter(Mandatory = $false)] 22 | [String]$AutoFitStyle = 'Window' 23 | ) 24 | process { 25 | if ($format -eq 'md') { 26 | ConvertTo-MD ($InputObject) | Out-File -FilePath $FullDocumentationPath -Append -Encoding utf8 27 | } else { 28 | $InputObject | Add-WordTable -FilePath $FullDocumentationPath -AutoFitStyle $AutoFitStyle -Design LightListAccent2 29 | } 30 | } 31 | } 32 | -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Add-Text.ps1: -------------------------------------------------------------------------------- 1 | 2 | function Add-Text { 3 | <# 4 | .SYNOPSIS 5 | This function is used to add a line of text in the documentation. 6 | .EXAMPLE 7 | Add-Text -format 'docx' -Text "Display Name" 8 | Adds the text 'Display Name' in the 'docx' format file at $FullDocumentationPath 9 | .NOTES 10 | NAME: Add-Text 11 | #> 12 | param( 13 | [Parameter(Mandatory = $true)] 14 | [String]$format, 15 | 16 | [Parameter(Mandatory = $true)] 17 | [String]$Text, 18 | 19 | [Parameter(Mandatory=$false, HelpMessage = "Please choose a font size between 4 and 72")] 20 | [ValidateRange(4, 72)] 21 | [Int32]$Size 22 | ) 23 | if ($format -eq 'md') { 24 | $Text | Out-File -FilePath $FullDocumentationPath -Append -Encoding utf8 25 | } else { 26 | Add-WordText -FilePath $FullDocumentationPath -Text $Text -Size $Size 27 | } 28 | } 29 | -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Convert-CamelCaseToDisplayName.ps1: -------------------------------------------------------------------------------- 1 | Function Convert-CamelCaseToDisplayName(){ 2 | <# 3 | .SYNOPSIS 4 | This function to convert camel case to normal case 5 | .DESCRIPTION 6 | This function to convert camel case to normal case 7 | .EXAMPLE 8 | Convert-CamelCaseToDisplayName -Value "androidOsRestriction" 9 | Returns "Android Os Restriction" 10 | .NOTES 11 | NAME: Convert-CamelCaseToDisplayName 12 | #> 13 | [cmdletbinding()] 14 | param 15 | ( 16 | [Parameter(Mandatory=$true)] 17 | $Value 18 | ) 19 | $newString = "" 20 | if(([String]$Value).Contains(' ')){ 21 | # If string already contains spaces don't change 22 | $newString = $value 23 | } else { 24 | $stringChars = $value.GetEnumerator() 25 | $charIndex = 0 26 | $lastUpper = $false 27 | foreach ($char in $stringChars) { 28 | # If upper and not first character, add a space 29 | if ([char]::IsUpper($char) -eq "True" -and $charIndex -gt 0 -and $lastUpper -eq $false) { 30 | $newString = $newString + " " + $char.ToString() 31 | $lastUpper = $true 32 | } elseif ($charIndex -eq 0) { 33 | # If the first character, make it a capital always 34 | $newString = $newString + $char.ToString().ToUpper() 35 | $lastUpper = $true 36 | } else { 37 | $newString = $newString + $char.ToString() 38 | if([char]::IsUpper($char) -eq "True"){ 39 | $lastUpper = $true 40 | }else { 41 | $lastUpper = $false 42 | } 43 | } 44 | $charIndex++ 45 | } 46 | } 47 | return $newString 48 | 49 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/ConvertTo-MD.ps1: -------------------------------------------------------------------------------- 1 | <# 2 | .SYNOPSIS 3 | Converts a PowerShell object to a Markdown table. Based on ConvertTo-Markdown from https://github.com/ishu3101/PSMarkdown with added support 4 | for multiple rows. 5 | .DESCRIPTION 6 | The ConvertTo-MD function converts a Powershell Object to a Markdown formatted table 7 | .EXAMPLE 8 | Get-Process | Where-Object {$_.mainWindowTitle} | Select-Object ID, Name, Path, Company | ConvertTo-MD 9 | This command gets all the processes that have a main window title, and it displays them in a Markdown table format with the process ID, Name, Path and Company. 10 | .EXAMPLE 11 | ConvertTo-MD (Get-Date) 12 | This command converts a date object to Markdown table format 13 | .EXAMPLE 14 | Get-Alias | Select Name, DisplayName | ConvertTo-MD 15 | This command displays the name and displayname of all the aliases for the current session in Markdown table format 16 | #> 17 | Function ConvertTo-MD { 18 | [CmdletBinding()] 19 | [OutputType([string])] 20 | Param ( 21 | [Parameter( 22 | Mandatory = $true, 23 | Position = 0, 24 | ValueFromPipeline = $true 25 | )] 26 | [PSObject[]]$InputObject 27 | ) 28 | 29 | Begin { 30 | $items = @() 31 | $columns = @{} 32 | } 33 | 34 | Process { 35 | ForEach($item in $InputObject) { 36 | $items += $item 37 | $item.PSObject.Properties | ForEach-Object { 38 | if($null -ne $_.Value){ 39 | if(-not $columns.Contains($_.Name) -or $columns[$_.Name] -lt $_.Value.ToString().Length) { 40 | $columns[$_.Name] = $_.Value.ToString().Length 41 | } 42 | } 43 | } 44 | } 45 | } 46 | 47 | End { 48 | ForEach($key in $($columns.Keys)) { 49 | $columns[$key] = [Math]::Max($columns[$key], $key.Length) 50 | } 51 | 52 | $header = @() 53 | ForEach($key in $columns.Keys) { 54 | $header += ('{0,-' + $columns[$key] + '}') -f $key 55 | } 56 | [string]$HeaderToReturn = '| ' + ( $header -join ' | ' ) + ' |' 57 | 58 | $separator = @() 59 | ForEach($key in $columns.Keys) { 60 | $separator += '-' * $columns[$key] 61 | } 62 | [string]$SeparatorToReturn = '| ' + ( $separator -join ' | ' ) + ' |' 63 | 64 | [string]$ValuesToReturn = "" 65 | 66 | ForEach($item in $items) { 67 | $values = @() 68 | ForEach($key in $columns.Keys) { 69 | $values += ('{0,-' + $columns[$key] + '}') -f $item.($key) 70 | } 71 | $ValuesToReturn += '| ' + ( $values -join ' | ' ) + ' |' + "`r`n" 72 | } 73 | return [string]([string]::Concat($HeaderToReturn, "`n", $SeparatorToReturn, "`n", $ValuesToReturn)) 74 | } 75 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Format-MsGraphData.ps1: -------------------------------------------------------------------------------- 1 | Function Format-MsGraphData(){ 2 | <# 3 | .SYNOPSIS 4 | This function Cleansup Values Returned By Microsoft Graph 5 | .DESCRIPTION 6 | This function Cleansup Values Returned By Microsoft Graph 7 | .EXAMPLE 8 | Format-MsGraphData -Value "@Odata.Type" 9 | Returns "Type" 10 | .NOTES 11 | NAME: Format-MsGraphData 12 | #> 13 | [cmdletbinding()] 14 | param 15 | ( 16 | [Parameter(Mandatory=$false)] 17 | [AllowEmptyString()] 18 | [AllowNull()] 19 | $Value 20 | ) 21 | $DateTimeRegex = "\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{7}Z" 22 | if($value -is [array]){ 23 | $value = $value -join "," 24 | } 25 | [string]$value = "$value" 26 | $Value = $Value -replace "#microsoft.graph.","" 27 | $Value = $Value -replace "windows","win" 28 | $Value = $Value -replace "StoreforBusiness","SfB" 29 | $Value = $Value -replace "@odata.","" 30 | if($null -ne $Value -and $Value -match "@{*"){ 31 | $Value = $Value -replace "@{","" 32 | $Value = $Value -replace "}","" 33 | $Value = $Value -replace ";","" 34 | } 35 | if($Value -match $DateTimeRegex){ 36 | try{ 37 | [DateTime]$Date = ([DateTime]::Parse($Value)) 38 | $Value = "$($Date.ToShortDateString()) $($Date.ToShortTimeString())" 39 | } catch { 40 | Write-Log "Cannot parse data" -Type Warn 41 | } 42 | } 43 | return $value 44 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-ADMXBasedConfigurationProfile.ps1: -------------------------------------------------------------------------------- 1 | Function Get-ADMXBasedConfigurationProfile(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the ADMX Policies from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Intune ADMX Configuration 7 | .EXAMPLE 8 | Get-ADMXBasedConfigurationProfile 9 | Returns the ADMX based Configuration Profiles configured in Intune 10 | .NOTES 11 | NAME: Get-ADMXBasedConfigurationProfile 12 | #> 13 | try { 14 | 15 | $Policies = Invoke-MSGraphRequest -HttpMethod GET -Url "https://graph.microsoft.com/Beta/deviceManagement/groupPolicyConfigurations" 16 | $return = @() 17 | foreach($Policy in $Policies.value){ 18 | $return2 = @() 19 | $values = Invoke-MSGraphRequest -HttpMethod GET -Url "https://graph.microsoft.com/Beta/deviceManagement/groupPolicyConfigurations/$($Policy.Id)/definitionValues" 20 | foreach($value in $values.value){ 21 | try{ 22 | $definition = (Invoke-MSGraphRequest -HttpMethod GET -Url "https://graph.microsoft.com/Beta/deviceManagement/groupPolicyConfigurations/$($Policy.Id)/definitionValues/$($value.id)/definition") 23 | $res = Invoke-MSGraphRequest -HttpMethod GET -Url "https://graph.microsoft.com/Beta/deviceManagement/groupPolicyConfigurations/$($Policy.Id)/definitionValues/$($value.id)/presentationValues" 24 | if($null -ne $res.value.Value){ 25 | $AdditionalConfig = if($res.value.value.GetType().baseType.Name -eq "Array"){ $res.value.value -join ", " } else { $res.value.value } 26 | } else { 27 | $AdditionalConfig = "" 28 | } 29 | $return2 += [PSCustomObject]@{ 30 | DisplayName = $definition.displayName 31 | #ExplainText = $definition.explainText 32 | Scope = $definition.classType 33 | Path = $definition.categoryPath 34 | SupportedOn = $definition.supportedOn 35 | State = if($value.enabled -eq $true){"Enabled"} else {"Disabled"} 36 | Value = $AdditionalConfig 37 | } 38 | } catch { 39 | Write-Log -Message "Error reading ADMX setting" -Type Warn -Exception $_.Exception 40 | } 41 | } 42 | $return += [PSCustomObject]@{ 43 | DisplayName = $Policy.displayName 44 | Id = $Policy.id 45 | Settings = $return2 46 | } 47 | } 48 | return $return 49 | } catch { 50 | Write-Log "Response content:`n$responseBody" -Type Error 51 | Write-Log "Failed to get ADMX based Intune Policies." -Type Error -Exception $_.Exception 52 | } 53 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-ADMXBasedConfigurationProfile_Assignment.ps1: -------------------------------------------------------------------------------- 1 | Function Get-ADMXBasedConfigurationProfile_Assignment(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the ADMX Policy Assignments from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Intune ADMX Configuration Assignments 7 | .EXAMPLE 8 | Get-ADMXBasedConfigurationProfile_Assignment -ADMXBasedConfigurationProfileId $id 9 | Returns the ADMX based Configuration Profile Assignments configured in Intune 10 | .NOTES 11 | NAME: Get-ADMXBasedConfigurationProfile_Assignment 12 | #> 13 | param( 14 | $ADMXBasedConfigurationProfileId 15 | ) 16 | try { 17 | $Policies = Invoke-MSGraphRequest -HttpMethod GET -Url "https://graph.microsoft.com/Beta/deviceManagement/groupPolicyConfigurations/$ADMXBasedConfigurationProfileId/assignments" 18 | $Policies.Value 19 | } catch { 20 | Write-Log "Response content:`n$responseBody" -Type Error 21 | Write-Log "Failed to get ADMX based Intune Policies." -Type Error -Exception $_.Exception 22 | } 23 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-AzureADApplicationName.ps1: -------------------------------------------------------------------------------- 1 | Function Get-AzureADApplicationName(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the AzureAD Application Name by ID from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Azure AD Application Name 7 | .EXAMPLE 8 | Get-AzureADApplicationName -AppId 162358712538975698 9 | Returns the Application Name for the given Application id 10 | .NOTES 11 | NAME: Get-AzureADApplicationName 12 | #> 13 | param( 14 | [String] 15 | $AppId 16 | ) 17 | try { 18 | if($AppId -match("^(\{){0,1}[0-9a-fA-F]{8}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{12}(\}){0,1}$")){ 19 | $uri = "https://graph.microsoft.com/beta/servicePrincipals?`$Filter=appId%20eq%20%27$AppId%27" 20 | $app = (Invoke-MSGraphRequest -Url $uri -HttpMethod GET).Value[0] 21 | "$($app.displayName)($AppId)" 22 | } else { 23 | $AppId 24 | } 25 | } catch { 26 | $ex = $_.Exception 27 | $errorResponse = $ex.Response.GetResponseStream() 28 | $reader = New-Object System.IO.StreamReader($errorResponse) 29 | $reader.BaseStream.Position = 0 30 | $reader.DiscardBufferedData() 31 | $responseBody = $reader.ReadToEnd(); 32 | Write-Log "Response content:`n$responseBody" -Type Error 33 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 34 | 35 | } 36 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-AzureADRole.ps1: -------------------------------------------------------------------------------- 1 | Function Get-AzureADRole(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the AzureAD Role Name by ID from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Azure AD Role Name 7 | .EXAMPLE 8 | Get-AzureADRole -RoleId 162358712538975698 9 | Returns the Role Name for the given Role id 10 | .NOTES 11 | NAME: Get-AzureADRole 12 | #> 13 | param( 14 | [String] 15 | $RoleId 16 | ) 17 | try { 18 | if($RoleId -match("^(\{){0,1}[0-9a-fA-F]{8}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{12}(\}){0,1}$")){ 19 | $uri = "https://graph.microsoft.com/beta/directoryRoleTemplates/$RoleId" 20 | (Invoke-MSGraphRequest -Url $uri -HttpMethod GET).displayName 21 | } else { 22 | $RoleId 23 | } 24 | } catch { 25 | $ex = $_.Exception 26 | $errorResponse = $ex.Response.GetResponseStream() 27 | $reader = New-Object System.IO.StreamReader($errorResponse) 28 | $reader.BaseStream.Position = 0 29 | $reader.DiscardBufferedData() 30 | $responseBody = $reader.ReadToEnd(); 31 | Write-Log "Response content:`n$responseBody" -Type Error 32 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 33 | } 34 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-AzureADUser.ps1: -------------------------------------------------------------------------------- 1 | Function Get-AzureADUser(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the AzureAD User Name by ID from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Azure AD User Name 7 | .EXAMPLE 8 | Get-AzureADUser -UserId 162358712538975698 9 | Returns the User Name for the given User id 10 | .NOTES 11 | NAME: Get-AzureADUser 12 | #> 13 | param( 14 | [String] 15 | $UserId 16 | ) 17 | try { 18 | if($UserId -match("^(\{){0,1}[0-9a-fA-F]{8}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{12}(\}){0,1}$")){ 19 | $uri = "https://graph.microsoft.com/beta/users/$UserId" 20 | $user = (Invoke-MSGraphRequest -Url $uri -HttpMethod GET) 21 | "$($user.displayName)($($user.userPrincipalName))" 22 | } else{ 23 | $UserId 24 | } 25 | } catch { 26 | $ex = $_.Exception 27 | $errorResponse = $ex.Response.GetResponseStream() 28 | $reader = New-Object System.IO.StreamReader($errorResponse) 29 | $reader.BaseStream.Position = 0 30 | $reader.DiscardBufferedData() 31 | $responseBody = $reader.ReadToEnd(); 32 | Write-Log "Response content:`n$responseBody" -Type Error 33 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 34 | 35 | } 36 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-ConditionalAccess.ps1: -------------------------------------------------------------------------------- 1 | Function Get-ConditionalAccess(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the Conditional Access from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Azure AD Conditional Access Configuration 7 | .EXAMPLE 8 | Get-ConditionalAccess 9 | Returns the Conditional Access Configuration configured in AzureAD 10 | .NOTES 11 | NAME: Get-ConditionalAccess 12 | #> 13 | try { 14 | $uri = "https://graph.microsoft.com/beta/identity/conditionalAccess/policies" 15 | (Invoke-MSGraphRequest -Url $uri -HttpMethod GET).Value 16 | } catch { 17 | $ex = $_.Exception 18 | $errorResponse = $ex.Response.GetResponseStream() 19 | $reader = New-Object System.IO.StreamReader($errorResponse) 20 | $reader.BaseStream.Position = 0 21 | $reader.DiscardBufferedData() 22 | $responseBody = $reader.ReadToEnd(); 23 | Write-Log "Response content:`n$responseBody" -Type Error 24 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 25 | 26 | } 27 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-ConfigurationProfileBeta.ps1: -------------------------------------------------------------------------------- 1 | Function Get-ConfigurationProfileBeta(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the Intune Configuration Profiles from the Beta Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Intune Configuration Profiles 7 | .EXAMPLE 8 | Get-ConfigurationProfileBeta 9 | Returns the Configuration Profiles configured in Intune 10 | .NOTES 11 | NAME: Get-ConfigurationProfileBeta 12 | #> 13 | 14 | try { 15 | $uri = "https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations" 16 | $request= (Invoke-MSGraphRequest -Url $uri -HttpMethod GET) 17 | $allScripts= @() 18 | 19 | $request.value.GetEnumerator() | ForEach-Object { 20 | try{ 21 | if($null -ne $PSItem.omaSettings){ 22 | foreach($setting in ($PSItem.omaSettings)){ 23 | $PSItem | Add-Member -MemberType NoteProperty -Name $setting.displayName -Value $setting 24 | } 25 | } 26 | } catch { 27 | Write-Log "Failed to parse omaSettings" 28 | } 29 | $PSItem 30 | } 31 | $allScripts 32 | } catch { 33 | $ex = $_.Exception 34 | $errorResponse = $ex.Response.GetResponseStream() 35 | $reader = New-Object System.IO.StreamReader($errorResponse) 36 | $reader.BaseStream.Position = 0 37 | $reader.DiscardBufferedData() 38 | $responseBody = $reader.ReadToEnd(); 39 | Write-Log "Response content:`n$responseBody" -Type Error 40 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 41 | } 42 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-DeviceManagementScript.ps1: -------------------------------------------------------------------------------- 1 | Function Get-DeviceManagementScript(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the Intune PowerShell Scripts from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Intune PowerShell Scripts including the scripts 7 | .EXAMPLE 8 | Get-DeviceManagementScript 9 | Returns the Enrollment Status Page Configuration configured in Intune 10 | .NOTES 11 | NAME: Get-DeviceManagementScript 12 | #> 13 | 14 | try { 15 | $uri = "https://graph.microsoft.com/Beta/deviceManagement/deviceManagementScripts" 16 | $request= (Invoke-MSGraphRequest -Url $uri -HttpMethod GET) 17 | $allScripts= @() 18 | 19 | $request.value.GetEnumerator() | ForEach-Object { 20 | 21 | $currentScript =Invoke-MSGraphRequest -HttpMethod GET -Url "https://graph.microsoft.com/Beta/deviceManagement/deviceManagementScripts/$($PSItem.id)" 22 | 23 | $allScripts += [PSCustomObject]@{ 24 | id = $currentScript.id 25 | displayName = $currentScript.displayName 26 | description = $currentScript.description 27 | enforceSignatureCheck = $PSItem.enforceSignatureCheck 28 | runAs32Bit = $PSItem.runAs32Bit 29 | runAsAccount = $PSItem.runAsAccount 30 | fileName = $PSItem.fileName 31 | scriptContent = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($currentScript.scriptContent)) 32 | } 33 | } 34 | $allScripts 35 | } catch { 36 | $ex = $_.Exception 37 | $errorResponse = $ex.Response.GetResponseStream() 38 | $reader = New-Object System.IO.StreamReader($errorResponse) 39 | $reader.BaseStream.Position = 0 40 | $reader.DiscardBufferedData() 41 | $responseBody = $reader.ReadToEnd(); 42 | Write-Log "Response content:`n$responseBody" -Type Error 43 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 44 | } 45 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-DeviceManagementScript_Assignment.ps1: -------------------------------------------------------------------------------- 1 | Function Get-DeviceManagementScript_Assignment(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the Intune PowerShell Script Assignments from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Intune PowerShell Scripts Assignments 7 | .EXAMPLE 8 | Get-DeviceManagementScript_Assignment -DeviceManagementScriptId $id 9 | 10 | .NOTES 11 | NAME: Get-DeviceManagementScript_Assignment 12 | #> 13 | param( 14 | $DeviceManagementScriptId 15 | ) 16 | try { 17 | $uri = "https://graph.microsoft.com/Beta/deviceManagement/deviceManagementScripts/$DeviceManagementScriptId/assignments" 18 | (Invoke-MSGraphRequest -Url $uri -HttpMethod GET).Value 19 | } catch { 20 | $ex = $_.Exception 21 | $errorResponse = $ex.Response.GetResponseStream() 22 | $reader = New-Object System.IO.StreamReader($errorResponse) 23 | $reader.BaseStream.Position = 0 24 | $reader.DiscardBufferedData() 25 | $responseBody = $reader.ReadToEnd(); 26 | Write-Log "Response content:`n$responseBody" -Type Error 27 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 28 | } 29 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-EnrollmentStatusPage.ps1: -------------------------------------------------------------------------------- 1 | Function Get-EnrollmentStatusPage(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the Enrollment Status Page configuration from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Enrollment Status Page Configuration 7 | .EXAMPLE 8 | Get-EnrollmentStatusPage 9 | Returns the Enrollment Status Page Configuration configured in Intune 10 | .NOTES 11 | NAME: Get-EnrollmentStatusPage 12 | #> 13 | 14 | try { 15 | $uri = "https://graph.microsoft.com/Beta/deviceManagement/deviceEnrollmentConfigurations" 16 | (Invoke-MSGraphRequest -Url $uri -HttpMethod GET).Value 17 | } catch { 18 | $ex = $_.Exception 19 | $errorResponse = $ex.Response.GetResponseStream() 20 | $reader = New-Object System.IO.StreamReader($errorResponse) 21 | $reader.BaseStream.Position = 0 22 | $reader.DiscardBufferedData() 23 | $responseBody = $reader.ReadToEnd(); 24 | Write-Log "Response content:`n$responseBody" -Type Error 25 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 26 | } 27 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-EnrollmentStatusPage_Assignment.ps1: -------------------------------------------------------------------------------- 1 | Function Get-EnrollmentStatusPage_Assignment(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the Enrollment Status Page configuration Assignments from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Enrollment Status Page Configuration Assignments 7 | .EXAMPLE 8 | Get-EnrollmentStatusPage_Assignment -deviceEnrollmentConfigurationsId $id 9 | Returns the Enrollment Status Page Configuration Assignments configured in Intune 10 | .NOTES 11 | NAME: Get-EnrollmentStatusPage_Assignment 12 | #> 13 | param( 14 | $deviceEnrollmentConfigurationsId 15 | ) 16 | try { 17 | $uri = "https://graph.microsoft.com/Beta/deviceManagement/deviceEnrollmentConfigurations/$deviceEnrollmentConfigurationsId/assignments" 18 | (Invoke-MSGraphRequest -Url $uri -HttpMethod GET).Value 19 | } catch { 20 | $ex = $_.Exception 21 | $errorResponse = $ex.Response.GetResponseStream() 22 | $reader = New-Object System.IO.StreamReader($errorResponse) 23 | $reader.BaseStream.Position = 0 24 | $reader.DiscardBufferedData() 25 | $responseBody = $reader.ReadToEnd(); 26 | Write-Log "Response content:`n$responseBody" -Type Error 27 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 28 | } 29 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-MAM_Android_Assignment.ps1: -------------------------------------------------------------------------------- 1 | Function Get-MAM_Android_Assignment(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the Android MAM Assignments from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Android MAM Assignments 7 | .EXAMPLE 8 | Get-MAM_Android_Assignment -policyId $id 9 | Returns the Android MAM Assignments configured in Intune 10 | .NOTES 11 | NAME: Get-MAM_Android_Assignment 12 | #> 13 | param( 14 | $policyId 15 | ) 16 | try { 17 | $uri = "https://graph.microsoft.com/Beta/deviceAppManagement/androidManagedAppProtections/$policyId/assignments" 18 | (Invoke-MSGraphRequest -Url $uri -HttpMethod GET).Value 19 | } catch { 20 | $ex = $_.Exception 21 | $errorResponse = $ex.Response.GetResponseStream() 22 | $reader = New-Object System.IO.StreamReader($errorResponse) 23 | $reader.BaseStream.Position = 0 24 | $reader.DiscardBufferedData() 25 | $responseBody = $reader.ReadToEnd(); 26 | Write-Log "Response content:`n$responseBody" -Type Error 27 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 28 | } 29 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-MAM_Windows_Assignment.ps1: -------------------------------------------------------------------------------- 1 | Function Get-MAM_Windows_Assignment(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the Windows MAM Assignments from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Windows MAM Assignments 7 | .EXAMPLE 8 | Get-MAM_Windows_Assignment -policyId $id 9 | Returns the Windows MAM Assignments configured in Intune 10 | .NOTES 11 | NAME: Get-MAM_Windows_Assignment 12 | #> 13 | param( 14 | $policyId 15 | ) 16 | try { 17 | $uri = "https://graph.microsoft.com/Beta/deviceAppManagement/mdmWindowsInformationProtectionPolicies/$policyId/assignments" 18 | (Invoke-MSGraphRequest -Url $uri -HttpMethod GET).Value 19 | } catch { 20 | $ex = $_.Exception 21 | $errorResponse = $ex.Response.GetResponseStream() 22 | $reader = New-Object System.IO.StreamReader($errorResponse) 23 | $reader.BaseStream.Position = 0 24 | $reader.DiscardBufferedData() 25 | $responseBody = $reader.ReadToEnd(); 26 | Write-Log "Response content:`n$responseBody" -Type Error 27 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 28 | } 29 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-MAM_iOS_Assignment.ps1: -------------------------------------------------------------------------------- 1 | Function Get-MAM_iOS_Assignment(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the iOS MAM Assignments from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the iOS MAM Assignments 7 | .EXAMPLE 8 | Get-MAM_iOS_Assignment -policyId $id 9 | Returns the iOS MAM Assignments configured in Intune 10 | .NOTES 11 | NAME: Get-MAM_iOS_Assignment 12 | #> 13 | param( 14 | $policyId 15 | ) 16 | try { 17 | $uri = "https://graph.microsoft.com/Beta/deviceAppManagement/iosManagedAppProtections/$policyId/assignments" 18 | (Invoke-MSGraphRequest -Url $uri -HttpMethod GET).Value 19 | } catch { 20 | $ex = $_.Exception 21 | $errorResponse = $ex.Response.GetResponseStream() 22 | $reader = New-Object System.IO.StreamReader($errorResponse) 23 | $reader.BaseStream.Position = 0 24 | $reader.DiscardBufferedData() 25 | $responseBody = $reader.ReadToEnd(); 26 | Write-Log "Response content:`n$responseBody" -Type Error 27 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 28 | } 29 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-ManagedAppConfig_Assignment.ps1: -------------------------------------------------------------------------------- 1 | Function Get-ManagedAppConfig_Assignment(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the Managed App Config Assignments from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Managed App Config Assignments 7 | .EXAMPLE 8 | Get-ManagedAppConfig_Assignment -policyId $id 9 | Returns the Managed App Config Assignments configured in Intune 10 | .NOTES 11 | NAME: Get-ManagedAppConfig_Assignment 12 | #> 13 | param( 14 | $policyId 15 | ) 16 | try { 17 | $uri = "https://graph.microsoft.com/Beta/deviceAppManagement/targetedManagedAppConfigurations/$policyId/assignments" 18 | (Invoke-MSGraphRequest -Url $uri -HttpMethod GET).Value 19 | } catch { 20 | $ex = $_.Exception 21 | $errorResponse = $ex.Response.GetResponseStream() 22 | $reader = New-Object System.IO.StreamReader($errorResponse) 23 | $reader.BaseStream.Position = 0 24 | $reader.DiscardBufferedData() 25 | $responseBody = $reader.ReadToEnd(); 26 | Write-Log "Response content:`n$responseBody" -Type Error 27 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 28 | } 29 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-MobileAppsBeta.ps1: -------------------------------------------------------------------------------- 1 | Function Get-MobileAppsBeta(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the all mobile apps from the Beta Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the mobile apps 7 | .EXAMPLE 8 | Get-MobileAppsBeta 9 | Returns the mobile apps configured in Intune 10 | .NOTES 11 | NAME: Get-MobileAppsBeta 12 | #> 13 | try { 14 | $uri = "https://graph.microsoft.com/beta/deviceAppManagement/mobileApps" 15 | (Invoke-MSGraphRequest -Url $uri -HttpMethod GET).Value 16 | } catch { 17 | $ex = $_.Exception 18 | $errorResponse = $ex.Response.GetResponseStream() 19 | $reader = New-Object System.IO.StreamReader($errorResponse) 20 | $reader.BaseStream.Position = 0 21 | $reader.DiscardBufferedData() 22 | $responseBody = $reader.ReadToEnd(); 23 | Write-Log "Response content:`n$responseBody" -Type Error 24 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 25 | 26 | } 27 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-SecBaselinesBeta.ps1: -------------------------------------------------------------------------------- 1 | Function Get-SecBaselinesBeta(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the all Security Baselines from the Beta Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the Security Baselines 7 | .EXAMPLE 8 | Get-SecBaselinesBeta 9 | Returns the Security Baselines configured in Intune 10 | .NOTES 11 | NAME: Get-SecBaselinesBeta 12 | #> 13 | try { 14 | $uri = "https://graph.microsoft.com/beta/deviceManagement/intents" 15 | $templates = (Invoke-MSGraphRequest -Url $uri -HttpMethod GET).Value 16 | $returnTemplates = @() 17 | foreach($template in $templates){ 18 | $settings = Invoke-MSGraphRequest -Url "https://graph.microsoft.com/beta/deviceManagement/intents/$($template.id)/settings" 19 | $templateDetail = Invoke-MSGraphRequest -Url "https://graph.microsoft.com/beta/deviceManagement/templates/$($template.templateId)" 20 | $returnTemplate = [PSCustomObject]@{ id = $template.id } 21 | $returnTemplate | Add-Member Noteproperty -Name Name -Value $template.displayName -Force 22 | $typeString = "$($templateDetail.platformType)-$($templateDetail.templateType)-$($templateDetail.templateSubtype)" 23 | $returnTemplate | Add-Member Noteproperty -Name '@odata.type' -Value $typeString -Force 24 | 25 | $TempSettings = @() 26 | foreach($setting in $settings.value){ 27 | # $settingDef = Invoke-MSGraphRequest -Url "https://graph.microsoft.com/beta/deviceManagement/settingDefinitions/$($setting.id)" -ErrorAction SilentlyContinue 28 | # $displayName = $settingDef.Value.displayName 29 | # if($null -eq $displayName){ 30 | $displayName = $setting.definitionId -replace "deviceConfiguration--","" -replace "admx--","" -replace "_"," " 31 | # } 32 | if($null -eq $setting.value){ 33 | 34 | if($setting.definitionId -eq "deviceConfiguration--windows10EndpointProtectionConfiguration_firewallRules"){ 35 | $v = $setting.valueJson | ConvertFrom-Json 36 | foreach($item in $v){ 37 | $TempSetting = [PSCustomObject]@{ Name = "FW Rule - $($item.displayName)"; Value = ($item | ConvertTo-Json) } 38 | $TempSettings += $TempSetting 39 | } 40 | } else { 41 | 42 | $v = "" 43 | $TempSetting = [PSCustomObject]@{ Name = $displayName; Value = $v } 44 | $TempSettings += $TempSetting 45 | } 46 | } else { 47 | $v = $setting.value 48 | $TempSetting = [PSCustomObject]@{ Name = $displayName; Value = $v } 49 | $TempSettings += $TempSetting 50 | } 51 | 52 | } 53 | $returnTemplate | Add-Member Noteproperty -Name Settings -Value $TempSettings -Force 54 | $assignments = Invoke-MSGraphRequest -Url "https://graph.microsoft.com/beta/deviceManagement/intents/$($template.id)/assignments" 55 | $returnTemplate | Add-Member Noteproperty -Name Assignments -Value $assignments.Value -Force 56 | $returnTemplates += $returnTemplate 57 | } 58 | $returnTemplates 59 | 60 | } catch { 61 | $ex = $_.Exception 62 | $errorResponse = $ex.Response.GetResponseStream() 63 | $reader = New-Object System.IO.StreamReader($errorResponse) 64 | $reader.BaseStream.Position = 0 65 | $reader.DiscardBufferedData() 66 | $responseBody = $reader.ReadToEnd(); 67 | Write-Log "Response content:`n$responseBody" -Type Error 68 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 69 | 70 | } 71 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Get-WindowsAutopilotConfig.ps1: -------------------------------------------------------------------------------- 1 | Function Get-WindowsAutopilotConfig(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to get the AutoPilot configuration from the Graph API REST interface 5 | .DESCRIPTION 6 | The function connects to the Graph API Interface and gets the AutoPilot Configuration 7 | .EXAMPLE 8 | Get-WindowsAutopilotConfig 9 | Returns the AutoPilot Configuration configured in Intune 10 | .NOTES 11 | NAME: Get-WindowsAutopilotConfig 12 | #> 13 | try { 14 | $uri = "https://graph.microsoft.com/Beta/deviceManagement/windowsAutopilotDeploymentProfiles" 15 | (Invoke-MSGraphRequest -Url $uri -HttpMethod GET).Value 16 | } catch { 17 | $ex = $_.Exception 18 | $errorResponse = $ex.Response.GetResponseStream() 19 | $reader = New-Object System.IO.StreamReader($errorResponse) 20 | $reader.BaseStream.Position = 0 21 | $reader.DiscardBufferedData() 22 | $responseBody = $reader.ReadToEnd(); 23 | Write-Log "Response content:`n$responseBody" -Type Error 24 | Write-Log "Request to $Uri failed with HTTP Status $($ex.Response.StatusCode) $($ex.Response.StatusDescription)" -Type Error 25 | 26 | } 27 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Invoke-PrintAssignmentDetail.ps1: -------------------------------------------------------------------------------- 1 | Function Invoke-PrintAssignmentDetail(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to print the assignment information to the word file. 5 | .DESCRIPTION 6 | This function is used to print the assignment information to the word file. It also gets group names. 7 | .EXAMPLE 8 | Invoke-PrintAssignmentDetail -Assignments $assignment 9 | Prints the information from the Assignents Array 10 | .NOTES 11 | NAME: Invoke-PrintAssignmentDetail 12 | #> 13 | param( 14 | $Assignments 15 | ) 16 | 17 | if($Assignments){ 18 | $ExtendedInfo = @() 19 | write-Log "Document assignments..." 20 | Add-Header -level 3 -format $format -Text "Assignments" 21 | if($Assignments.count -gt 1){ 22 | foreach($Assignment in $Assignments){ 23 | $ExtendedInfo += Invoke-PrintAssignmentDetail_Assignment -Assignment $Assignment 24 | } 25 | } else { 26 | $ExtendedInfo += Invoke-PrintAssignmentDetail_Assignment -Assignment $Assignments 27 | } 28 | if($null -ne $ExtendedInfo){ 29 | Add-Table -InputObject $ExtendedInfo -format $format 30 | } else { 31 | Add-Text -format $format -Text "No assignments" 32 | } 33 | } 34 | 35 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Invoke-PrintAssignmentDetail_Assignment.ps1: -------------------------------------------------------------------------------- 1 | Function Invoke-PrintAssignmentDetail_Assignment(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to collect information about assignment and the group. 5 | .DESCRIPTION 6 | This function is used to collect information about assignment and the group. 7 | .EXAMPLE 8 | Invoke-PrintAssignmentDetail_Assignment -Assignment $assignment 9 | Returns the information from the Assignent 10 | 11 | .OUTPUTS 12 | Outputs a custom object with the following structure: 13 | - Name 14 | - MemberCount 15 | - Type 16 | - DynamicRule 17 | 18 | .NOTES 19 | NAME: Invoke-PrintAssignmentDetail_Assignment 20 | #> 21 | param( 22 | $Assignment 23 | ) 24 | if($null -ne $Assignment.target.groupId){ 25 | $GroupObj = Get-Groups -groupid $Assignment.target.groupId 26 | $Name = $GroupObj.displayName 27 | if($GroupObj.groupTypes -contains "DynamicMembership"){ 28 | if($GroupObj.membershipRule -like "*user.*"){ 29 | $GType = "DynamicUser" 30 | } else { 31 | $GType = "DynamicDevice" 32 | } 33 | } else { 34 | $GType = "Static" 35 | } 36 | $Members = Get-Groups_Members -groupId $Assignment.target.groupId 37 | if($null -eq $Members.count){ 38 | if($null -eq $Members){ 39 | $MemberCount = 1 40 | } else { 41 | $MemberCount = 0 42 | } 43 | } else { 44 | $MemberCount = $Members.count 45 | } 46 | $DynamicRule = $GroupObj.membershipRule 47 | if($null -eq $DynamicRule){ 48 | $DynamicRule = "-" 49 | } 50 | $returnObj =[PSCustomObject]@{ 51 | Name = $Name 52 | MemberCount = $MemberCount 53 | GroupType = $GType 54 | DynamicRule = $DynamicRule 55 | } 56 | } else { 57 | 58 | $Name = "$(($Assignment.target.'@odata.type' -replace "#microsoft.graph.",''))" 59 | switch ( $Name ) 60 | { 61 | "allDevicesAssignmentTarget" { $Name = "All Devices" } 62 | "allLicensedUsersAssignmentTarget" { $Name = "All Users" } 63 | } 64 | 65 | $returnObj =[PSCustomObject]@{ 66 | Name = $Name 67 | MemberCount = "-" 68 | GroupType = "BuilIn" 69 | DynamicRule = "-" 70 | } 71 | } 72 | 73 | #Intent if Available 74 | if($null -ne $Assignment.intent){ 75 | $returnObj | Add-Member -MemberType NoteProperty -Name "Intent" -Value $Assignment.intent 76 | } else { 77 | $returnObj | Add-Member -MemberType NoteProperty -Name "Intent" -Value "-" 78 | } 79 | # Source 80 | if($null -ne $Assignment.source){ 81 | $returnObj | Add-Member -MemberType NoteProperty -Name "Source" -Value $Assignment.source 82 | } else { 83 | $returnObj | Add-Member -MemberType NoteProperty -Name "Source" -Value "-" 84 | } 85 | # Include or Exclude 86 | if($Assignment.'@odata.type' -imatch 'exclusion'){ 87 | $returnObj | Add-Member -MemberType NoteProperty -Name "Type" -Value "Exclude" 88 | } else { 89 | $returnObj | Add-Member -MemberType NoteProperty -Name "Type" -Value "Include" 90 | } 91 | 92 | $returnObj 93 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Invoke-PrintGroup.ps1: -------------------------------------------------------------------------------- 1 | Function Invoke-PrintGroup(){ 2 | <# 3 | .SYNOPSIS 4 | This function retrieves details about an AAD group. 5 | .DESCRIPTION 6 | This function retrieves details about an AAD group. 7 | .EXAMPLE 8 | Invoke-PrintGroup -GroupId $assignment 9 | Returns the information from the Group 10 | 11 | .OUTPUTS 12 | Outputs a custom object with the following structure: 13 | - Name 14 | - MemberCount 15 | - GroupType 16 | - DynamicRule 17 | 18 | .NOTES 19 | NAME: Invoke-PrintGroup 20 | #> 21 | param( 22 | $GroupIds 23 | ) 24 | $GroupObjs = @() 25 | foreach($GroupId in ($GroupIds | Select-Object -Unique)){ 26 | $GroupObj = Get-Groups -groupid $GroupId 27 | $Name = $GroupObj.displayName 28 | if($GroupObj.groupTypes -contains "DynamicMembership"){ 29 | if($GroupObj.membershipRule -like "*user.*"){ 30 | $GType = "DynamicUser" 31 | } else { 32 | $GType = "DynamicDevice" 33 | } 34 | } else { 35 | $GType = "Static" 36 | } 37 | $Members = Get-Groups_Members -groupId $GroupId 38 | if($null -eq $Members.count){ 39 | if($null -eq $Members){ 40 | $MemberCount = 1 41 | } else { 42 | $MemberCount = 0 43 | } 44 | } else { 45 | $MemberCount = $Members.count 46 | } 47 | $DynamicRule = $GroupObj.membershipRule 48 | if($null -eq $DynamicRule){ 49 | $DynamicRule = "-" 50 | } 51 | $GroupObjs +=[PSCustomObject]@{ 52 | Name = $Name 53 | MemberCount = $MemberCount 54 | GroupType = $GType 55 | DynamicRule = $DynamicRule 56 | } 57 | } 58 | if($null -ne $GroupObjs){ 59 | Add-Table -InputObject $GroupObjs -format $format 60 | } 61 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Invoke-PrintTable.ps1: -------------------------------------------------------------------------------- 1 | Function Invoke-PrintTable(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to print the assignment information to the word file. 5 | .DESCRIPTION 6 | This function is used to print the assignment information to the word file. It also gets group names. 7 | .EXAMPLE 8 | Invoke-PrintAssignmentDetail -Assignments $assignment 9 | Prints the information from the Assignents Array 10 | .NOTES 11 | NAME: Invoke-TranslatePropertyName 12 | #> 13 | param( 14 | [Parameter(Mandatory=$true)] 15 | $Properties, 16 | [Parameter(Mandatory=$true)] 17 | [String]$TypeName 18 | ) 19 | if($Script:UseTranslation){ 20 | Invoke-PrintTableTranslate -Properties $Properties -TypeName $TypeName 21 | } else { 22 | Invoke-PrintTableNormal -Properties $Properties 23 | } 24 | } -------------------------------------------------------------------------------- /PSModule/IntuneDocumentation/Internal/Invoke-PrintTableNormal.ps1: -------------------------------------------------------------------------------- 1 | Function Invoke-PrintTableNormal(){ 2 | <# 3 | .SYNOPSIS 4 | This function is used to print the configuration without translation to the word file. 5 | .EXAMPLE 6 | Invoke-TableNormal -Properties $p -TypeName $t 7 | Prints the information from the Config Array 8 | .NOTES 9 | NAME: Invoke-TableNormal 10 | #> 11 | param( 12 | [Parameter(Mandatory=$true)] 13 | $Properties 14 | ) 15 | $MaxStringLengthSettings = 350 16 | $ht = @{} 17 | 18 | foreach($p in $Properties) { 19 | $Name = $p.Name 20 | if((Format-MsGraphData "$($p.Value)").Length -gt $MaxStringLengthSettings){ 21 | $Value = "$((Format-MsGraphData "$($p.Value)").substring(0, $MaxStringLengthSettings))..." 22 | } else { 23 | $Value = "$((Format-MsGraphData "$($p.Value)")) " 24 | } 25 | 26 | if($null -eq $Value){ 27 | $Value = "" 28 | } elseif ($format -eq 'md') { 29 | # Markdown has rendering issues with new lines in a table 30 | $Value = ($Value -replace ('\r\n', '')) -replace ('\n','') 31 | # some oma setting values are in xml format, wrap this part to avoid rendering issues 32 | $pattern = [regex]'(.*)value=<(.*)' 33 | if ($Value -match $pattern) { 34 | $Value = $pattern.Replace($Value, '$1value=
<$2', 1)
35 | }
36 | }
37 | $ht[$Name] = $Value
38 | }
39 | Add-Table -InputObject ($ht.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) -format $format
40 | }
--------------------------------------------------------------------------------
/PSModule/IntuneDocumentation/Internal/Invoke-PrintTableTranslate.ps1:
--------------------------------------------------------------------------------
1 | Function Invoke-PrintTableTranslate(){
2 | <#
3 | .SYNOPSIS
4 | This function is used to print the configuration with translation to the word file.
5 | .EXAMPLE
6 | Invoke-TableTranslate -Properties $p -TypeName $t
7 | Prints the information from the Config Array
8 | .NOTES
9 | NAME: Invoke-TableTranslate
10 | #>
11 | param(
12 | [Parameter(Mandatory=$true)]
13 | $Properties,
14 | [Parameter(Mandatory=$true)]
15 | [String]$TypeName
16 | )
17 | $MaxStringLengthSettings = 350
18 | $ht = @{}
19 | $TranslationFile = "$PSScriptRoot\..\Data\LabelTranslation\$TypeName.json"
20 |
21 | $translateJson = Get-Content $TranslationFile -ErrorAction SilentlyContinue
22 | if($null -eq $translateJson){
23 | $translateJson = "{}"
24 | }
25 | $translation = $translateJson | ConvertFrom-Json
26 |
27 | foreach($p in $Properties) {
28 | if([String]::IsNullOrWhiteSpace($translation."$($p.Name)")){
29 | $TranslationValue = switch($p.Name){
30 | "displayName" { "Displayname" }
31 | "lastModifiedDateTime" { "Modified at" }
32 | "@odata.type" { "OData Type" }
33 | "supportsScopeTags" { "Support for Scope Tags" }
34 | "roleScopeTagIds" { "Role Scopes Tags" }
35 | "deviceManagementApplicabilityRuleOsEdition" { "Applicability OS Edition" }
36 | "deviceManagementApplicabilityRuleOsVersion" { "Applicability OS Version" }
37 | "deviceManagementApplicabilityRuleDeviceMode" { "Applicability Device Mode" }
38 | "createdDateTime" { "Created at" }
39 | "description" { "Description" }
40 | "version" { "Version" }
41 | "id" {'ID'}
42 | default { '' }
43 | }
44 | if([String]::IsNullOrWhiteSpace($TranslationValue)){
45 | $Section = " "
46 | } else {
47 | $Section = "Metadata"
48 | }
49 |
50 | if($p.TypeNameOfValue -eq "System.Boolean"){
51 | $TranslationObject = New-Object PSObject -Property @{
52 | Name = $TranslationValue
53 | Section = $Section
54 | DataType = $p.TypeNameOfValue
55 | ValueTrue = "Block"
56 | ValueFalse = "Not Configured"
57 | }
58 | } else {
59 | $TranslationObject = New-Object PSObject -Property @{
60 | Name = $TranslationValue
61 | Section = $Section
62 | DataType = $p.TypeNameOfValue
63 | }
64 | }
65 | #Only use translated value if not empty
66 | if([String]::IsNullOrWhiteSpace($TranslationValue)){
67 | $Name = Convert-CamelCaseToDisplayName -Value $p.Name
68 | } else {
69 | $Name = $TranslationValue
70 | }
71 | $translation | Add-Member Noteproperty -Name $p.Name -Value $TranslationObject -Force
72 | $translation | ConvertTo-Json | Out-File -FilePath $TranslationFile -Force
73 | #Variable set for user information in main function
74 | $Script:NewTranslationFiles += $TranslationFile
75 | } else {
76 | #Only use translated value if not empty
77 | if([String]::IsNullOrWhiteSpace($translation."$($p.Name)".Name)){
78 | $Name = $p.Name
79 | } else {
80 | $Name = $translation."$($p.Name)".Name
81 | }
82 |
83 | }
84 |
85 | # Value
86 | if($p.TypeNameOfValue -eq "System.Boolean"){
87 | if([String]::IsNullOrWhiteSpace($translation."$($p.Name)".Name)){
88 | $Value = $p.Value
89 | } else {
90 | if($p.Value -eq $true){
91 | $Value = $translation."$($p.Name)".ValueTrue
92 | } else {
93 | $Value = $translation."$($p.Name)".ValueFalse
94 | }
95 | }
96 | } else {
97 | if((Format-MsGraphData "$($p.Value)").Length -gt $MaxStringLengthSettings){
98 | $Value = "$((Format-MsGraphData "$($p.Value)").substring(0, $MaxStringLengthSettings))..."
99 | } else {
100 | $Value = "$((Format-MsGraphData "$($p.Value)")) "
101 | }
102 | }
103 | if($null -eq $Value){
104 | $Value = ""
105 | } elseif ($format -eq 'md') {
106 | # Markdown has rendering issues with new lines in a table
107 | $Value = ($Value -replace ('\r\n', '')) -replace ('\n','')
108 | # some oma setting values are in xml format, wrap this part to avoid rendering issues
109 | $pattern = [regex]'(.*)value=<(.*)'
110 | if ($Value -match $pattern) {
111 | $Value = $pattern.Replace($Value, '$1value=<$2', 1)
112 | }
113 | }
114 | $ht[$Name] = $Value
115 | }
116 | Add-Table -InputObject ($ht.GetEnumerator() | Sort-Object -Property Name | Select-Object Name,Value) -format $format
117 | }
--------------------------------------------------------------------------------
/PSModule/IntuneDocumentation/Internal/Invoke-TransponseObject.ps1:
--------------------------------------------------------------------------------
1 | function Invoke-TransposeObject {
2 | <#
3 | .SYNOPSIS
4 | Transpose properties of objects from columns to rows.
5 | .DESCRIPTION
6 | Transpose properties of objects from columns to rows. Useful when the order displayed in a GridView (with
7 | Out-GridView) or in a CSV file (with Export-Csv) should be rotated.
8 | It uses the name property as new property names (column headers) if it exists.
9 | .INPUTS
10 | Object
11 | .OUTPUTS
12 | Transposed object
13 | .EXAMPLE
14 | dir | Transpose-Object | Out-GridView
15 |
16 | Shows directory listing with a column instead of a row for every file/directory
17 | .EXAMPLE
18 | ps | Transpose-Object | Export-Csv Processes.csv -Delimiter ';' -NoTypeInformation
19 |
20 | Creates a CSV file with a column instead of a row for every process
21 | .NOTES
22 | Name: Transpose-Object
23 | Author: Markus Scholtes
24 | Version: 1.0 - Initial version
25 | Creation Date: 01/11/2019
26 | #>
27 | [OutputType('System.Object[]')]
28 | [CmdletBinding()]
29 | Param([OBJECT][Parameter(ValueFromPipeline = $TRUE)]$InputObject)
30 |
31 | BEGIN
32 | { # initialize variables just to be "clean"
33 | $Props = @()
34 | $PropNames = @()
35 | $InstanceNames = @()
36 | }
37 |
38 | PROCESS
39 | {
40 | if ($Props.Length -eq 0)
41 | { # when first object in pipeline arrives retrieve its property names
42 | $PropNames = $InputObject.PSObject.Properties | Select-Object -ExpandProperty Name
43 | # and create a PSCustomobject in an array for each property
44 | $InputObject.PSObject.Properties | ForEach-Object{ $Props += New-Object -TypeName PSObject -Property @{Property = $_.Name} }
45 | }
46 |
47 | if ($InputObject.M_DisplayName)
48 | { # does object have a "Name" property?
49 | $Property = $InputObject.M_DisplayName
50 | } else { # no, take object itself as property name
51 | $Property = $InputObject | Out-String
52 | }
53 |
54 | if ($InstanceNames -contains $Property)
55 | { # does multiple occurence of name exist?
56 | $COUNTER = 0
57 | do { # yes, append a number in brackets to name
58 | $COUNTER++
59 | $Property = "$($InputObject.M_DisplayName) ({0})" -f $COUNTER
60 | } while ($InstanceNames -contains $Property)
61 | }
62 | # add current name to name list for next name check
63 | $InstanceNames += $Property
64 |
65 | # retrieve property values and add them to the property's PSCustomobject
66 | $COUNTER = 0
67 | $PropNames | ForEach-Object{
68 | if ($InputObject.($_))
69 | { # property exists for current object
70 | $Props[$COUNTER] | Add-Member -Name $Property -Type NoteProperty -Value $InputObject.($_)
71 | } else { # property does not exist for current object, add $NULL value
72 | $Props[$COUNTER] | Add-Member -Name $Property -Type NoteProperty -Value $NULL
73 | }
74 | $COUNTER++
75 | }
76 | }
77 |
78 | END
79 | {
80 | # return collection of PSCustomobjects with property values
81 | $Props
82 | }
83 | }
--------------------------------------------------------------------------------
/PSModule/IntuneDocumentation/Internal/Set-AzureADAppPermission.ps1:
--------------------------------------------------------------------------------
1 | Function Set-AzureADAppPermission
2 | {
3 | [CmdletBinding(SupportsShouldProcess, ConfirmImpact='Medium')]
4 | param
5 | (
6 | [string] $targetServicePrincipalName,
7 | $appPermissionsRequired,
8 | $childApp,
9 | $spForApp
10 | )
11 | if ($PSCmdlet.ShouldProcess("Target", "Operation"))
12 | {
13 | $targetSp = Get-AzureADServicePrincipal -Filter "DisplayName eq '$($targetServicePrincipalName)'"
14 |
15 | # Iterate Permissions array
16 | Write-Verbose ('Retrieve Role Assignments objects')
17 | $RoleAssignments = @()
18 | Foreach ($AppPermission in $appPermissionsRequired) {
19 | $RoleAssignment = $targetSp.AppRoles | Where-Object { $_.Value -eq $AppPermission}
20 | $RoleAssignments += $RoleAssignment
21 | }
22 |
23 | $ResourceAccessObjects = New-Object 'System.Collections.Generic.List[Microsoft.Open.AzureAD.Model.ResourceAccess]'
24 | foreach ($RoleAssignment in $RoleAssignments) {
25 | $resourceAccess = New-Object -TypeName "Microsoft.Open.AzureAD.Model.ResourceAccess"
26 | $resourceAccess.Id = $RoleAssignment.Id
27 | $resourceAccess.Type = 'Role'
28 | $ResourceAccessObjects.Add($resourceAccess)
29 | }
30 | $requiredResourceAccess = New-Object -TypeName "Microsoft.Open.AzureAD.Model.RequiredResourceAccess"
31 | $requiredResourceAccess.ResourceAppId = $targetSp.AppId
32 | $requiredResourceAccess.ResourceAccess = $ResourceAccessObjects
33 |
34 | # set the required resource access
35 | Set-AzureADApplication -ObjectId $childApp.ObjectId -RequiredResourceAccess $requiredResourceAccess
36 | Start-Sleep -s 1
37 |
38 | # grant the required resource access
39 | foreach ($RoleAssignment in $RoleAssignments) {
40 | Write-Verbose ('Granting admin consent for App Role: {0}' -f $($RoleAssignment.Value))
41 | New-AzureADServiceAppRoleAssignment -ObjectId $spForApp.ObjectId -Id $RoleAssignment.Id -PrincipalId $spForApp.ObjectId -ResourceId $targetSp.ObjectId
42 | Start-Sleep -s 1
43 | }
44 | } else {
45 | Write-Information "Create Azure AD Application and set permission."
46 | }
47 | }
--------------------------------------------------------------------------------
/PSModule/IntuneDocumentation/Internal/Update-Text.ps1:
--------------------------------------------------------------------------------
1 | function Update-Text {
2 | <#
3 | .SYNOPSIS
4 | This function is used to replace text found in the documentation with a new value.
5 | .EXAMPLE
6 | Update-Text -format 'md' -SearchText "abc" -NewText "def"
7 | Updates all occurences of 'abc' with 'def' in the 'md' format file at $FullDocumentationPath
8 | .NOTES
9 | NAME: Update-Text
10 | #>
11 | param(
12 | [Parameter(Mandatory = $true)]
13 | [String]$format,
14 |
15 | [Parameter(Mandatory = $true)]
16 | [String]$SearchText,
17 |
18 | [Parameter(Mandatory = $true)]
19 | [String]$NewText
20 | )
21 |
22 | if ($format -eq 'md') {
23 | ((Get-Content -path $FullDocumentationPath -Raw) -replace $SearchText, $NewText) | Set-Content -Path $FullDocumentationPath
24 | } else {
25 | Update-WordText -FilePath $FullDocumentationPath -ReplacingText $SearchText -NewText $NewText
26 | }
27 | }
--------------------------------------------------------------------------------
/PSModule/IntuneDocumentation/Internal/Write-Log.ps1:
--------------------------------------------------------------------------------
1 | function Write-Log {
2 | <#
3 | .DESCRIPTION
4 | Write text to a logfile with the current time.
5 |
6 | .PARAMETER Message
7 | Specifies the message to log.
8 |
9 | .PARAMETER Type
10 | Type of Message ("Info","Debug","Warn","Error").
11 |
12 | .PARAMETER OutputMode
13 | Specifies where the log should be written. Possible values are "Console","LogFile" and "Both".
14 |
15 | .PARAMETER Exception
16 | You can write an exception object to the log file if there was an exception.
17 |
18 | .EXAMPLE
19 | Write-Log -Message "Start process XY"
20 |
21 | .NOTES
22 | This function should be used to log information to console or log file.
23 | #>
24 | param(
25 | [Parameter(Mandatory=$true,Position=1)]
26 | [String]
27 | $Message
28 | ,
29 | [Parameter(Mandatory=$false)]
30 | [ValidateSet("Info","Debug","Warn","Error")]
31 | [String]
32 | $Type = "Debug"
33 |
34 | ,
35 | [Parameter(Mandatory=$false)]
36 | [Exception]
37 | $Exception
38 | )
39 | $LogFilePathFolder = Join-Path -Path $Env:TEMP -ChildPath $ScriptName
40 | $OutputMode = "Console" # "Console-LogFile","Console-WindowsEvent","LogFile-WindowsEvent","Console","LogFile","WindowsEvent","All"
41 | $DefaultLogWindowsEventSource = "IntuneDocumentation"
42 | $DefaultLogWindowsEventLog = "CustomPS"
43 | $LogFilePath = "$LogFilePathFolder\IntuneDocumentation_$(Get-Date -uformat %Y%m%d%H%M).log"
44 | $DateTimeString = Get-Date -Format "yyyy-MM-dd HH:mm:sszz"
45 | $Output = ($DateTimeString + "`t" + $Type.ToUpper() + "`t" + $Message)
46 | if($Exception){
47 | $ExceptionString = ("[" + $Exception.GetType().FullName + "] " + $Exception.Message)
48 | $Output = "$Output - $ExceptionString"
49 | }
50 | if ($OutputMode -eq "Console" -OR $OutputMode -eq "Console-LogFile" -OR $OutputMode -eq "Console-WindowsEvent" -OR $OutputMode -eq "All") {
51 | if($Type -eq "Error"){
52 | Write-Error $output
53 | } elseif($Type -eq "Warn"){
54 | Write-Warning $output
55 | } elseif($Type -eq "Debug"){
56 | Write-Debug $output
57 | } else{
58 | Write-Verbose $output -Verbose
59 | }
60 | }
61 | if ($OutputMode -eq "LogFile" -OR $OutputMode -eq "Console-LogFile" -OR $OutputMode -eq "LogFile-WindowsEvent" -OR $OutputMode -eq "All") {
62 | try {
63 | Add-Content $LogFilePath -Value $Output -ErrorAction Stop
64 | } catch {
65 | exit 99001
66 | }
67 | }
68 | if ($OutputMode -eq "Console-WindowsEvent" -OR $OutputMode -eq "WindowsEvent" -OR $OutputMode -eq "LogFile-WindowsEvent" -OR $OutputMode -eq "All") {
69 | try {
70 | New-EventLog -LogName $DefaultLogWindowsEventLog -Source $DefaultLogWindowsEventSource -ErrorAction SilentlyContinue
71 | switch ($Type) {
72 | "Warn" {
73 | $EventType = "Warning"
74 | break
75 | }
76 | "Error" {
77 | $EventType = "Error"
78 | break
79 | }
80 | default {
81 | $EventType = "Information"
82 | }
83 | }
84 | Write-EventLog -LogName $DefaultLogWindowsEventLog -Source $DefaultLogWindowsEventSource -EntryType $EventType -EventId 1 -Message $Output -ErrorAction Stop
85 | } catch {
86 | exit 99002
87 | }
88 | }
89 | }
--------------------------------------------------------------------------------
/PSModule/IntuneDocumentation/IntuneDocumentation.psd1:
--------------------------------------------------------------------------------
1 | #
2 | # Module manifest for module 'IntuneDocumentation'
3 | #
4 | # Generated by: Thomas Kurth
5 | #
6 | # Generated on: 03.02.2021
7 | #
8 |
9 | @{
10 |
11 | # Script module or binary module file associated with this manifest.
12 | RootModule = 'IntuneDocumentation.psm1'
13 |
14 | # Version number of this module.
15 | ModuleVersion = '2.0.19'
16 |
17 | # Supported PSEditions
18 | # CompatiblePSEditions = @()
19 |
20 | # ID used to uniquely identify this module
21 | GUID = '10231a0d-b6a4-2a17-a726-e3b223ad0aa9'
22 |
23 | # Author of this module
24 | Author = 'Thomas Kurth'
25 |
26 | # Company or vendor of this module
27 | CompanyName = 'WorkplaceNinjas'
28 |
29 | # Copyright statement for this module
30 | Copyright = '(c) 2020 Thomas Kurth. All rights reserved.'
31 |
32 | # Description of the functionality provided by this module
33 | Description = 'Automatic Intune and Conditional Access Documentation to simplify the life of admins and consultants.'
34 |
35 | # Minimum version of the Windows PowerShell engine required by this module
36 | PowerShellVersion = '5.0'
37 |
38 | # Name of the Windows PowerShell host required by this module
39 | # PowerShellHostName = ''
40 |
41 | # Minimum version of the Windows PowerShell host required by this module
42 | # PowerShellHostVersion = ''
43 |
44 | # Minimum version of Microsoft .NET Framework required by this module. This prerequisite is valid for the PowerShell Desktop edition only.
45 | # DotNetFrameworkVersion = ''
46 |
47 | # Minimum version of the common language runtime (CLR) required by this module. This prerequisite is valid for the PowerShell Desktop edition only.
48 | # CLRVersion = ''
49 |
50 | # Processor architecture (None, X86, Amd64) required by this module
51 | # ProcessorArchitecture = ''
52 |
53 | # Modules that must be imported into the global environment prior to importing this module
54 | RequiredModules = @('Microsoft.Graph.Intune',
55 | 'PSWord')
56 |
57 | # Assemblies that must be loaded prior to importing this module
58 | # RequiredAssemblies = @()
59 |
60 | # Script files (.ps1) that are run in the caller's environment prior to importing this module.
61 | # ScriptsToProcess = @()
62 |
63 | # Type files (.ps1xml) to be loaded when importing this module
64 | # TypesToProcess = @()
65 |
66 | # Format files (.ps1xml) to be loaded when importing this module
67 | # FormatsToProcess = @()
68 |
69 | # Modules to import as nested modules of the module specified in RootModule/ModuleToProcess
70 | # NestedModules = @()
71 |
72 | # Functions to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no functions to export.
73 | FunctionsToExport = 'Invoke-ConditionalAccessDocumentation',
74 | 'Invoke-IntuneDocumentation',
75 | 'New-IntuneDocumentationAppRegistration'
76 |
77 | # Cmdlets to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no cmdlets to export.
78 | CmdletsToExport = @()
79 |
80 | # Variables to export from this module
81 | # VariablesToExport = @()
82 |
83 | # Aliases to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no aliases to export.
84 | AliasesToExport = @()
85 |
86 | # DSC resources to export from this module
87 | # DscResourcesToExport = @()
88 |
89 | # List of all modules packaged with this module
90 | # ModuleList = @()
91 |
92 | # List of all files packaged with this module
93 | # FileList = @()
94 |
95 | # Private data to pass to the module specified in RootModule/ModuleToProcess. This may also contain a PSData hashtable with additional module metadata used by PowerShell.
96 | PrivateData = @{
97 |
98 | PSData = @{
99 |
100 | # Tags applied to this module. These help with module discovery in online galleries.
101 | Tags = 'Intune','Windows','Documentation','MEM','MSGraph','AzureAD','ConditionalAccess'
102 |
103 | # A URL to the license for this module.
104 | # LicenseUri = ''
105 |
106 | # A URL to the main website for this project.
107 | ProjectUri = 'https://github.com/ThomasKur/IntuneDocumentation'
108 |
109 | # A URL to an icon representing this module.
110 | IconUri = 'https://github.com/ThomasKur/IntuneDocumentation/raw/master/Logo/IntuneDocumentationLogo.png'
111 |
112 | # ReleaseNotes of this module
113 | ReleaseNotes = ' 2.0.19 - 02.02.2021 - Thomas Kurth
114 |
115 | - AD group Assignments are now documented in a table with intent, count of members and more information about the AD Group itself.
116 | - Add translation for 5 new profiles
117 | - If no translation is available use a pretty print method to improve readability of API names.
118 | - Add possibility to translate Security Baseline, MAM and compliance policy
119 | - Bugfix
120 | - Spelling errors
121 | - null byte data in scripts error
122 | - OMA-URI (Custom Policy) fixed
123 | - protectedApps in WIP policy now displayed correctly.
124 | - Firewall rules are now dispayed in word file. Per rule one table row instead of all rules in a single row.
125 |
126 |
127 |
128 | To see the complete history, checkout the Release Notes on Github'
129 |
130 | # Prerelease string of this module
131 | # Prerelease = ''
132 |
133 | # Flag to indicate whether the module requires explicit user acceptance for install/update/save
134 | # RequireLicenseAcceptance = $false
135 |
136 | # External dependent modules of this module
137 | # ExternalModuleDependencies = @()
138 |
139 | } # End of PSData hashtable
140 |
141 | } # End of PrivateData hashtable
142 |
143 | # HelpInfo URI of this module
144 | # HelpInfoURI = ''
145 |
146 | # Default prefix for commands exported from this module. Override the default prefix using Import-Module -Prefix.
147 | # DefaultCommandPrefix = ''
148 |
149 | }
150 |
151 |
--------------------------------------------------------------------------------
/PSModule/IntuneDocumentation/IntuneDocumentation.psm1:
--------------------------------------------------------------------------------
1 | $functionFolders = @('Functions', 'Internal')
2 |
3 | # Importing all the Functions required for the module from the subfolders.
4 | ForEach ($folder in $functionFolders) {
5 | $folderPath = Join-Path -Path $PSScriptRoot -ChildPath $folder
6 | If (Test-Path -Path $folderPath)
7 | {
8 | Write-Verbose -Message "Importing from $folder"
9 | $functions = Get-ChildItem -Path $folderPath -Filter '*.ps1'
10 | ForEach ($function in $functions)
11 | {
12 | Write-Verbose -Message " Loading $($function.FullName)"
13 | . ($function.FullName)
14 | }
15 | } else {
16 | Write-Warning "Path $folderPath not found. Some parts of the module will not work."
17 | }
18 | }
19 |
20 | $PSWord = Get-Module -Name PSWord
21 | if($PSWord){
22 | Write-Verbose -Message "PSWord module is loaded."
23 | } else {
24 | Write-Warning -Message "PSWord module is not loaded, trying to import it."
25 | Import-Module -Name PSWord
26 | }
27 |
28 | $PSModuleIntune = Get-Module -Name Microsoft.Graph.Intune
29 | if($PSModuleIntune){
30 | Write-Verbose -Message "Intune PowerShell module is loaded."
31 | } else {
32 | Write-Warning -Message "Intune PowerShell module is not loaded, trying to import it."
33 | Import-Module -Name Microsoft.Graph.Intune
34 | }
35 | # SIG # Begin signature block
36 | # MIIZwgYJKoZIhvcNAQcCoIIZszCCGa8CAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB
37 | # gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR
38 | # AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUrVlBFG9PKIBD0gpNLcI2AXDX
39 | # 06igghUDMIID7jCCA1egAwIBAgIQfpPr+3zGTlnqS5p31Ab8OzANBgkqhkiG9w0B
40 | # AQUFADCBizELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTEUMBIG
41 | # A1UEBxMLRHVyYmFudmlsbGUxDzANBgNVBAoTBlRoYXd0ZTEdMBsGA1UECxMUVGhh
42 | # d3RlIENlcnRpZmljYXRpb24xHzAdBgNVBAMTFlRoYXd0ZSBUaW1lc3RhbXBpbmcg
43 | # Q0EwHhcNMTIxMjIxMDAwMDAwWhcNMjAxMjMwMjM1OTU5WjBeMQswCQYDVQQGEwJV
44 | # UzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xMDAuBgNVBAMTJ1N5bWFu
45 | # dGVjIFRpbWUgU3RhbXBpbmcgU2VydmljZXMgQ0EgLSBHMjCCASIwDQYJKoZIhvcN
46 | # AQEBBQADggEPADCCAQoCggEBALGss0lUS5ccEgrYJXmRIlcqb9y4JsRDc2vCvy5Q
47 | # WvsUwnaOQwElQ7Sh4kX06Ld7w3TMIte0lAAC903tv7S3RCRrzV9FO9FEzkMScxeC
48 | # i2m0K8uZHqxyGyZNcR+xMd37UWECU6aq9UksBXhFpS+JzueZ5/6M4lc/PcaS3Er4
49 | # ezPkeQr78HWIQZz/xQNRmarXbJ+TaYdlKYOFwmAUxMjJOxTawIHwHw103pIiq8r3
50 | # +3R8J+b3Sht/p8OeLa6K6qbmqicWfWH3mHERvOJQoUvlXfrlDqcsn6plINPYlujI
51 | # fKVOSET/GeJEB5IL12iEgF1qeGRFzWBGflTBE3zFefHJwXECAwEAAaOB+jCB9zAd
52 | # BgNVHQ4EFgQUX5r1blzMzHSa1N197z/b7EyALt0wMgYIKwYBBQUHAQEEJjAkMCIG
53 | # CCsGAQUFBzABhhZodHRwOi8vb2NzcC50aGF3dGUuY29tMBIGA1UdEwEB/wQIMAYB
54 | # Af8CAQAwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2NybC50aGF3dGUuY29tL1Ro
55 | # YXd0ZVRpbWVzdGFtcGluZ0NBLmNybDATBgNVHSUEDDAKBggrBgEFBQcDCDAOBgNV
56 | # HQ8BAf8EBAMCAQYwKAYDVR0RBCEwH6QdMBsxGTAXBgNVBAMTEFRpbWVTdGFtcC0y
57 | # MDQ4LTEwDQYJKoZIhvcNAQEFBQADgYEAAwmbj3nvf1kwqu9otfrjCR27T4IGXTdf
58 | # plKfFo3qHJIJRG71betYfDDo+WmNI3MLEm9Hqa45EfgqsZuwGsOO61mWAK3ODE2y
59 | # 0DGmCFwqevzieh1XTKhlGOl5QGIllm7HxzdqgyEIjkHq3dlXPx13SYcqFgZepjhq
60 | # IhKjURmDfrYwggSjMIIDi6ADAgECAhAOz/Q4yP6/NW4E2GqYGxpQMA0GCSqGSIb3
61 | # DQEBBQUAMF4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3Jh
62 | # dGlvbjEwMC4GA1UEAxMnU3ltYW50ZWMgVGltZSBTdGFtcGluZyBTZXJ2aWNlcyBD
63 | # QSAtIEcyMB4XDTEyMTAxODAwMDAwMFoXDTIwMTIyOTIzNTk1OVowYjELMAkGA1UE
64 | # BhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMTQwMgYDVQQDEytT
65 | # eW1hbnRlYyBUaW1lIFN0YW1waW5nIFNlcnZpY2VzIFNpZ25lciAtIEc0MIIBIjAN
66 | # BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomMLOUS4uyOnREm7Dv+h8GEKU5Ow
67 | # mNutLA9KxW7/hjxTVQ8VzgQ/K/2plpbZvmF5C1vJTIZ25eBDSyKV7sIrQ8Gf2Gi0
68 | # jkBP7oU4uRHFI/JkWPAVMm9OV6GuiKQC1yoezUvh3WPVF4kyW7BemVqonShQDhfu
69 | # ltthO0VRHc8SVguSR/yrrvZmPUescHLnkudfzRC5xINklBm9JYDh6NIipdC6Anqh
70 | # d5NbZcPuF3S8QYYq3AhMjJKMkS2ed0QfaNaodHfbDlsyi1aLM73ZY8hJnTrFxeoz
71 | # C9Lxoxv0i77Zs1eLO94Ep3oisiSuLsdwxb5OgyYI+wu9qU+ZCOEQKHKqzQIDAQAB
72 | # o4IBVzCCAVMwDAYDVR0TAQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAO
73 | # BgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQEEZzBlMCoGCCsGAQUFBzABhh5odHRw
74 | # Oi8vdHMtb2NzcC53cy5zeW1hbnRlYy5jb20wNwYIKwYBBQUHMAKGK2h0dHA6Ly90
75 | # cy1haWEud3Muc3ltYW50ZWMuY29tL3Rzcy1jYS1nMi5jZXIwPAYDVR0fBDUwMzAx
76 | # oC+gLYYraHR0cDovL3RzLWNybC53cy5zeW1hbnRlYy5jb20vdHNzLWNhLWcyLmNy
77 | # bDAoBgNVHREEITAfpB0wGzEZMBcGA1UEAxMQVGltZVN0YW1wLTIwNDgtMjAdBgNV
78 | # HQ4EFgQURsZpow5KFB7VTNpSYxc/Xja8DeYwHwYDVR0jBBgwFoAUX5r1blzMzHSa
79 | # 1N197z/b7EyALt0wDQYJKoZIhvcNAQEFBQADggEBAHg7tJEqAEzwj2IwN3ijhCcH
80 | # bxiy3iXcoNSUA6qGTiWfmkADHN3O43nLIWgG2rYytG2/9CwmYzPkSWRtDebDZw73
81 | # BaQ1bHyJFsbpst+y6d0gxnEPzZV03LZc3r03H0N45ni1zSgEIKOq8UvEiCmRDoDR
82 | # EfzdXHZuT14ORUZBbg2w6jiasTraCXEQ/Bx5tIB7rGn0/Zy2DBYr8X9bCT2bW+IW
83 | # yhOBbQAuOA2oKY8s4bL0WqkBrxWcLC9JG9siu8P+eJRRw4axgohd8D20UaF5Mysu
84 | # e7ncIAkTcetqGVvP6KUwVyyJST+5z3/Jvz4iaGNTmr1pdKzFHTx/kuDDvBzYBHUw
85 | # ggWtMIIElaADAgECAhAEP0tn9l4Sf9gdog2gb/SWMA0GCSqGSIb3DQEBBQUAMGUx
86 | # CzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3
87 | # dy5kaWdpY2VydC5jb20xJDAiBgNVBAMTG0RpZ2lDZXJ0IEVWIENvZGUgU2lnbmlu
88 | # ZyBDQTAeFw0yMDAzMDYwMDAwMDBaFw0yMzAzMTUxMjAwMDBaMIHOMRMwEQYLKwYB
89 | # BAGCNzwCAQMTAkNIMRowGAYLKwYBBAGCNzwCAQITCVNvbG90aHVybjEdMBsGA1UE
90 | # DwwUUHJpdmF0ZSBPcmdhbml6YXRpb24xGDAWBgNVBAUTD0NIRS0zMTQuNjM5LjUy
91 | # MzELMAkGA1UEBhMCQ0gxEjAQBgNVBAgTCVNvbG90aHVybjERMA8GA1UEBwwIRMOk
92 | # bmlrZW4xFjAUBgNVBAoTDWJhc2VWSVNJT04gQUcxFjAUBgNVBAMTDWJhc2VWSVNJ
93 | # T04gQUcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0xZCT8yT681H
94 | # ZVY8gtUlURKywy8Nfq8uiv/jJJU+/Tf4HHXXJzHo96ZFo/WOWMD3WMWRYRnpj95P
95 | # ZbfLaF+ki/PURRhp9/oT/p5O3zTv4Jqnig7AOeIL5dt9W5Uij9rDOEZhmFpVT08K
96 | # CKhMNMMu7MhBs+uHBlyQ70j5H2IjBjePtEDYcakbv1RNDK5hU+k2UqKZEQSaqt2+
97 | # riewxS2R4RUvZJ5nRraf4pNYqDdem2H0vJ17zHsG+ZB0YFLk/P3i6r4tJEAksYAU
98 | # kuJsFDt0Yz9xM2qmG2Rr4iw7AUTfE5Gx0NNWD/fMWFP/2sD3VkHA8Mz8PAokDfFz
99 | # 21OqYrXPAgMBAAGjggHtMIIB6TAfBgNVHSMEGDAWgBStaQZw/IAbFrOpGJRrlAKG
100 | # XvcnjDAdBgNVHQ4EFgQURdlk/2RkqKDvZs8sol0UhzmJTCowNwYDVR0RBDAwLqAs
101 | # BggrBgEFBQcIA6AgMB4MHENILVNPTE9USFVSTi1DSEUtMzE0LjYzOS41MjMwDgYD
102 | # VR0PAQH/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMDMHMGA1UdHwRsMGowM6Ax
103 | # oC+GLWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9FVkNvZGVTaWduaW5nLWcxLmNy
104 | # bDAzoDGgL4YtaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0VWQ29kZVNpZ25pbmct
105 | # ZzEuY3JsMEsGA1UdIAREMEIwNwYJYIZIAYb9bAMCMCowKAYIKwYBBQUHAgEWHGh0
106 | # dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwBwYFZ4EMAQMweQYIKwYBBQUHAQEE
107 | # bTBrMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQwYIKwYB
108 | # BQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEVWQ29k
109 | # ZVNpZ25pbmdDQS5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOCAQEA
110 | # GYerL9YA8gW4cx7nWEaDFpN2XnaY4+90Nl8gaj6aeQj6kwIfjWLWAzByDdVNvxSk
111 | # rwXdfo3dkG5DNNI3wPR2SE2iyImDF6zXTThccBqkwE1x1Tb5qfhaA48jf18f8Jbv
112 | # VgvtbZWXph1b+ALyD2911b34Qt6cYmolg19vkmWXZUADRjA11S3VHhhH4GLKeHoE
113 | # 23jSSs69tQPNC1jdS+Rx6yO/Ya14UrDwOrJo1qSn2xTilf9s77mSxRJCpL8Cd1PU
114 | # HPvugUFHLw9nqOQAMUb7cHdDUREs7Brvfcyo0qRx7lyKjIM1d0wGtiBz+8kQJcSC
115 | # dK9S8HGSD3y4R1N++Y8gYTCCBrUwggWdoAMCAQICEA3Q4zdKyVvb+mtDSypI7AYw
116 | # DQYJKoZIhvcNAQEFBQAwbDELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0
117 | # IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNl
118 | # cnQgSGlnaCBBc3N1cmFuY2UgRVYgUm9vdCBDQTAeFw0xMjA0MTgxMjAwMDBaFw0y
119 | # NzA0MTgxMjAwMDBaMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ
120 | # bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNVBAMTG0RpZ2lDZXJ0
121 | # IEVWIENvZGUgU2lnbmluZyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
122 | # ggEBALkGdBxdtCCqqSGoKkJGqyUgFyXLIo+QoqAxa4MFda+yDnwSSXtqhmSED4Pc
123 | # ZLmxbhYFPhyVuefniG24YoGQedTd9eKW+cO1iCNXShrPcSnpCACPtZjjpzL9rC64
124 | # 9JNT9Ao5Q5Gv1Wvo1J9GvY49q+L5K9TqAEBmJLfof7REdY14mq4xwTfPTh9b+EVK
125 | # 1z/CyZIGZL7eBoqv0OiKsfAsiABvC9yFp0zLBr/WLioybilxr44i8w/Q2JhILagI
126 | # y7aLI8Jj4LZz6299Jk+L9zQ9N4YMt3gn9MKG20NrWvg9PfTosGJWxufteKH7/Xpy
127 | # TzJlxHzDxHegBDIy7Y8/r4bdftECAwEAAaOCA1gwggNUMBIGA1UdEwEB/wQIMAYB
128 | # Af8CAQAwDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUFBwMDMH8GCCsG
129 | # AQUFBwEBBHMwcTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t
130 | # MEkGCCsGAQUFBzAChj1odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl
131 | # cnRIaWdoQXNzdXJhbmNlRVZSb290Q0EuY3J0MIGPBgNVHR8EgYcwgYQwQKA+oDyG
132 | # Omh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEhpZ2hBc3N1cmFuY2VF
133 | # VlJvb3RDQS5jcmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdp
134 | # Q2VydEhpZ2hBc3N1cmFuY2VFVlJvb3RDQS5jcmwwggHEBgNVHSAEggG7MIIBtzCC
135 | # AbMGCWCGSAGG/WwDAjCCAaQwOgYIKwYBBQUHAgEWLmh0dHA6Ly93d3cuZGlnaWNl
136 | # cnQuY29tL3NzbC1jcHMtcmVwb3NpdG9yeS5odG0wggFkBggrBgEFBQcCAjCCAVYe
137 | # ggFSAEEAbgB5ACAAdQBzAGUAIABvAGYAIAB0AGgAaQBzACAAQwBlAHIAdABpAGYA
138 | # aQBjAGEAdABlACAAYwBvAG4AcwB0AGkAdAB1AHQAZQBzACAAYQBjAGMAZQBwAHQA
139 | # YQBuAGMAZQAgAG8AZgAgAHQAaABlACAARABpAGcAaQBDAGUAcgB0ACAAQwBQAC8A
140 | # QwBQAFMAIABhAG4AZAAgAHQAaABlACAAUgBlAGwAeQBpAG4AZwAgAFAAYQByAHQA
141 | # eQAgAEEAZwByAGUAZQBtAGUAbgB0ACAAdwBoAGkAYwBoACAAbABpAG0AaQB0ACAA
142 | # bABpAGEAYgBpAGwAaQB0AHkAIABhAG4AZAAgAGEAcgBlACAAaQBuAGMAbwByAHAA
143 | # bwByAGEAdABlAGQAIABoAGUAcgBlAGkAbgAgAGIAeQAgAHIAZQBmAGUAcgBlAG4A
144 | # YwBlAC4wHQYDVR0OBBYEFK1pBnD8gBsWs6kYlGuUAoZe9yeMMB8GA1UdIwQYMBaA
145 | # FLE+w2kD+L9HAdSYJhoIAu9jZCvDMA0GCSqGSIb3DQEBBQUAA4IBAQCeW5Y6LhKI
146 | # rKsBbaSfdeQBh6OlMte8uql+o9YUF/fCE2t8c48rauUPJllosI4lm2zv+myTkgjB
147 | # Tc9FnpxG1h50oZsUo/oBL0qxAeFyQEgRE2i5Np2RS9fCORIQwcTcu2IUFCphXU84
148 | # fGYfxhv/rb5Pf5Rbc0MAD01zt1HPDvZ3wFvNNIzZYxOqDmER1vKOJ/y0e7i5ESCR
149 | # hnjqDtQo/yrVJDjoN7LslrufvEoWUOFev1F9I6Ayx8GUnnrJwCaizCWHoBJ+dJ8t
150 | # jbHI54S+udHp3rtqTohzceEiOMskh+lzflGy/5jrTn4v4MoO+rNe0boFQqhIn4P2
151 | # P8TKqN9ooFBhMYIEKTCCBCUCAQEweTBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMM
152 | # RGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQD
153 | # ExtEaWdpQ2VydCBFViBDb2RlIFNpZ25pbmcgQ0ECEAQ/S2f2XhJ/2B2iDaBv9JYw
154 | # CQYFKw4DAhoFAKB4MBgGCisGAQQBgjcCAQwxCjAIoAKAAKECgAAwGQYJKoZIhvcN
155 | # AQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUw
156 | # IwYJKoZIhvcNAQkEMRYEFPg2H1LaLO4J1JRq2UG1JFwz+XMgMA0GCSqGSIb3DQEB
157 | # AQUABIIBAFmCFx17Hryn2af72FL4Rbu4hsZipZG4mD6zGyaqQuPyYCT4IFIKE433
158 | # gLMbl7drzOKALXmubDat7tF19hpxMi66vbw0nQaMDo2XTZhnJMnSKLnqLjh4ynCK
159 | # VLDHLBVd9KdQfQGBQgJm5O4ZhrYL5qMudt9HuuGuxCnRy3pAP3f6NGGUovGfXDdS
160 | # bkojPmdWx3pnlZ0LSjY6Kma2uVG7dWqEdhtMU8B/4lYaRvJGGHIuKkOFht8525mf
161 | # sOmRMf1W8Ilqh62n5j8xWuwzvePZDWjpBpiatptEF7WAgrvd5oH2rRzw2WDuDL5W
162 | # 8pMKAl45aM5/MeqEOr+Rghr6pilCo3qhggILMIICBwYJKoZIhvcNAQkGMYIB+DCC
163 | # AfQCAQEwcjBeMQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9y
164 | # YXRpb24xMDAuBgNVBAMTJ1N5bWFudGVjIFRpbWUgU3RhbXBpbmcgU2VydmljZXMg
165 | # Q0EgLSBHMgIQDs/0OMj+vzVuBNhqmBsaUDAJBgUrDgMCGgUAoF0wGAYJKoZIhvcN
166 | # AQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNDI2MTE0NTMzWjAj
167 | # BgkqhkiG9w0BCQQxFgQUQ4RqGnbt+JQxUTs1pRkUXcGpS40wDQYJKoZIhvcNAQEB
168 | # BQAEggEAOpyvJKDD3WM8YMP/7S5q8fxmCuB8W0Rr563WuAv4bKvc5aMbska/jK8G
169 | # L3ETTd7QC8hHrrRvBJEou8yEys7UfeZnTVbm/ND7Ms+A14BBSiwMZuT0mUoPu//G
170 | # 9Rxfk5NYRKgjDdXNa8yx/cQD8pkexZpqKzQ7lQQb5YG92ScBddUJfq7r09HM7cD/
171 | # 5AU16Se/E09bfbKcamW3Vv+YRRzXU8bYPk5EQ42OVqhbvmciUeLfhW67obFvIak9
172 | # dvbP/HErGGBzdpcfeC/74NXl5BFrey0blutg/BqhamiTbkjLcn8pdnWSXvlGodFq
173 | # n8bNAofRomWwz3Lq47zteTnVYm0+DQ==
174 | # SIG # End signature block
175 |
--------------------------------------------------------------------------------
/PSModule/build.ps1:
--------------------------------------------------------------------------------
1 | $ModulePath = ".\PSModule\IntuneDocumentation"
2 | $Icon = "https://github.com/ThomasKur/IntuneDocumentation/raw/master/Logo/IntuneDocumentationLogo.png"
3 | $License = "https://github.com/ThomasKur/IntuneDocumentation/blob/master/LICENSE"
4 | #region UI
5 | $yes = New-Object System.Management.Automation.Host.ChoiceDescription "&Yes","Description."
6 | $no = New-Object System.Management.Automation.Host.ChoiceDescription "&No","Description."
7 | $cancel = New-Object System.Management.Automation.Host.ChoiceDescription "&Cancel","Description."
8 | $options = [System.Management.Automation.Host.ChoiceDescription[]]($yes, $no, $cancel)
9 |
10 | $title = "Version History"
11 | $message = "Have you updated the Release Notes for the new Version?"
12 | $result = $host.ui.PromptForChoice($title, $message, $options, 1)
13 | switch ($result) {
14 | 0{
15 |
16 | }
17 | 1{
18 | Write-Error "Canceled Publishing Process" -ErrorAction Stop
19 | }
20 | 2{
21 | Write-Error "Canceled Publishing Process" -ErrorAction Stop
22 | }
23 | }
24 | #endregion
25 |
26 | #region Code Analyzer
27 | Import-Module -Name PSScriptAnalyzer -Force
28 | $ScriptAnalyzerResult = Invoke-ScriptAnalyzer -Path $ModulePath -Recurse -ErrorAction Stop -ExcludeRule @("PSAvoidTrailingWhitespace")
29 |
30 | if($ScriptAnalyzerResult){
31 | $ScriptAnalyzerResult
32 | Write-Error "Scripts contains errors. PSScriptAnalyzer provided results above."
33 | }
34 | #endregion
35 |
36 | #region Build Manifest
37 | $ExportableFunctions = (Get-ChildItem -Path "$ModulePath\Functions" -Filter '*.ps1').BaseName
38 | $ReleaseNotes = ((Get-Content ".\ReleaseNotes.md" -Raw) -split "##")
39 | $ReleaseNote = ($ReleaseNotes[1] + "`n`n To see the complete history, checkout the Release Notes on Github")
40 |
41 | #Update Version
42 | $ModuelManifestTest = Test-ModuleManifest -Path "$ModulePath\IntuneDocumentation.psd1" -ErrorAction Stop
43 | $CurrentVersion = $ModuelManifestTest.Version
44 | $SuggestedNewVersion = [Version]::new($CurrentVersion.Major,$CurrentVersion.Minor,$CurrentVersion.Build + 1)
45 | $title = "Increment Version"
46 | $message = "Would you like to increase Module Version from $($CurrentVersion) to $($SuggestedNewVersion)?"
47 | $result = $host.ui.PromptForChoice($title, $message, $options, 1)
48 | switch ($result) {
49 | 0{
50 | Write-Information "You selected yes to increase the version. Updating Mnaifest..."
51 | Update-ModuleManifest -Path "$ModulePath\IntuneDocumentation.psd1" `
52 | -FunctionsToExport $ExportableFunctions `
53 | -ReleaseNotes $ReleaseNote `
54 | -RequiredModules @("Microsoft.Graph.Intune","PSWord") `
55 | -IconUri $Icon `
56 | -ModuleVersion $SuggestedNewVersion
57 | }
58 | 1{
59 | Write-Host "You selected no. The version will not be increased."
60 | Update-ModuleManifest -Path "$ModulePath\IntuneDocumentation.psd1" `
61 | -FunctionsToExport $ExportableFunctions `
62 | -ReleaseNotes $ReleaseNote `
63 | -RequiredModules @("Microsoft.Graph.Intune","PSWord") `
64 | -IconUri $Icon `
65 | -ModuleVersion $CurrentVersion
66 | }
67 | 2{
68 | Write-Error "Canceled Publishing Process" -ErrorAction Stop
69 | }
70 | }
71 | Test-ModuleManifest -Path "$ModulePath\IntuneDocumentation.psd1" -ErrorAction Stop
72 | #endregion
73 |
74 | #region Sign Scripts
75 | Copy-Item -Path $ModulePath -Destination $env:TEMP -Recurse -Force
76 | $cert = get-item Cert:\CurrentUser\My\* -CodeSigningCert | Out-GridView -OutputMode Single
77 | $PSFiles = Get-ChildItem -Path $env:TEMP\IntuneDocumentation -Recurse | Where-Object {$_.Extension -eq ".ps1" -or $_.Extension -eq ".psm1"}
78 | foreach($PSFile in $PSFiles){
79 | Set-AuthenticodeSignature -Certificate $cert -TimestampServer http://timestamp.verisign.com/scripts/timstamp.dll -FilePath ($PSFile.FullName) -Verbose
80 | }
81 | #endregion
82 | $PSGallerAPIKey = Read-Host "Insert PSGallery API Key"
83 | Publish-Module -Path $env:TEMP\IntuneDocumentation -NuGetApiKey $PSGallerAPIKey -IconUri $Icon -LicenseUri $License -Verbose
84 |
--------------------------------------------------------------------------------
/PSModule/test.ps1:
--------------------------------------------------------------------------------
1 | $scriptPath = split-path -parent $MyInvocation.MyCommand.Definition
2 | import-module "$scriptPath\IntuneDocumentation\IntuneDocumentation.psm1" -force
3 | #Connect-MSGraph -ForceInteractive
4 | $rand = Get-Random -Minimum 0 -Maximum 100
5 | Invoke-IntuneDocumentation -FullDocumentationPath "C:\temp\docu$rand.docx" -UseTranslationBeta
6 | Write-Host "Created Documentation C:\temp\docu$rand.docx"
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # Intune & Azure AD Conditional Access Documentation (Depreciated)
2 |
3 | 4 | 5 | > Please use the evolved [M365Documentation](https://github.com/ThomasKur/M365Documentation) script which provides more options. 6 | 7 |
8 | 9 |
Automatic Intune and Conditional Access Documentation to simplify the life of admins and consultants.
10 |
11 | This function Invoke-IntuneDocumentation will document:
12 |
13 | - Configuration Policies
14 | - Compliance Policies
15 | - Device Enrollment Restrictions
16 | - Terms and Conditions
17 | - Applications (Only Assigned)
18 | - Application Protection Policies
19 | - AutoPilot Configuration
20 | - Enrollment Page Configuration
21 | - Apple Push Certificate
22 | - Apple VPP
23 | - Device Categories
24 | - Exchange Connector
25 | - Application Configuration
26 | - PowerShell Scripts
27 | - ADMX backed Configuration Profiles
28 | - Security Baseline
29 | - Custom Roles
30 |
31 | The function Invoke-ConditionalAccessDocumentation will document:
32 |
33 | - Azure AD Conditional Access Policies
34 | - Translate referenced id's to real object names (users, groups, roles and applications)
35 |
36 | ## Usage Intune Documentation
37 |
38 | Since version 2.0.0 the Automatic Intune Documentation script is available in th PowerShell Gallery and therefore its much simpler to install and use it. You can just use these two commands:
39 |
40 | ```powershell
41 |
42 | Install-Module IntuneDocumentation
43 | Invoke-IntuneDocumentation -FullDocumentationPath c:\temp\IntuneDoc.docx
44 |
45 | ```
46 |
47 | **Important:** Before using the Script the first time, you have to ensure, that you have installed the Microsoft.Graph.Intune and PSWord Module. To do that, you have to start PowerShell as an Adminstrator and install them:
48 |
49 | ```powershell
50 |
51 | Install-Module Microsoft.Graph.Intune
52 | Install-Module PSWord
53 |
54 | ```
55 |
56 | ## Usage Conditional Access Documentation
57 |
58 | You can just use these two commands:
59 |
60 | **Important:** The Conditional Access Policy Documentation does not support login with interactive credentials. Therefore, it's required to create a custom app which can be done by calling 'New-IntuneDocumentationAppRegistration'. I recommend saving the result in a password vault and using always the same client secret.
61 |
62 | ```powershell
63 |
64 | # If you have already have the modulte installed then you can skip the first command.
65 | Install-Module IntuneDocumentation
66 | # If App registration already exists it will only creade new CLient Secret. If you know the existing from a previous execution you can skip the next line.
67 | $clientCreds = New-IntuneDocumentationAppRegistration -TokenLifetimeDays 5
68 | Invoke-ConditionalAccessDocumentation -FullDocumentationPath c:\temp\CADoc.docx -ClientId $clientCreds.ClientId -Tenant $clientCreds.TenantId -ClientSecret $clientCreds.ClientSecret
69 |
70 | ```
71 |
72 | ## Additional Options
73 |
74 | ### UseTranslationBeta
75 |
76 | When using this parameter the API names will be translated to the labels used in the Intune Portal.
77 | Note:
78 | These Translations need to be created manually, only a few are translated yet. If you are willing
79 | to support this project. You can do this by [translating the json files](https://github.com/ThomasKur/IntuneDocumentation/blob/master/AddTranslation.md) which are mentioned to you when you generate the documentation in your tenant.
80 |
81 | ```powershell
82 |
83 | Invoke-IntuneDocumentation -FullDocumentationPath c:\temp\IntuneDoc.docx -UseTranslationBeta
84 |
85 | ```
86 |
87 | ### Use script silently
88 |
89 | In the past I got requests that users would like to execute the Intune Documentation script silently. I have now extended the script by two new option and a new functions which can automatically create the App Registration in Azure AD for you.
90 |
91 | #### Automatically Create App Registration
92 |
93 | Your account requires Global Admin privileges to execute these commands and you need to have the AzureAD Module installed.
94 |
95 | ```powershell
96 |
97 | $p = New-IntuneDocumentationAppRegistration
98 | $p | fl
99 |
100 | ```
101 |
102 | The following result will be displayed and can then be used. Safe the ClientSecret in your password vault.
103 |
104 | ```powershell
105 |
106 | ClientID : d5cf6364-82f7-4024-9ac1-73a9fd2a6ec3
107 | ClientSecret : S03AESdMlhLQIPYYw/cYtLkGkQS0H49jXh02AS6Ek0U=
108 | ClientSecretExpiration : 21.07.2025 21:39:02
109 | TenantId : d873f16a-73a2-4ccf-9d36-67b8243ab99a
110 |
111 | ```
112 |
113 | #### Manually Create App Registration
114 |
115 | You can follow the manual of Michael Niehaus https://oofhours.com/2019/11/29/app-based-authentication-with-intune/
116 |
117 | But select also the following permission scopes:
118 |
119 | - 'Policy.Read.All'
120 | - 'Directory.Read.All'
121 | - 'DeviceManagementServiceConfig.Read.All'
122 | - 'DeviceManagementRBAC.Read.All'
123 | - 'DeviceManagementManagedDevices.Read.All'
124 | - 'DeviceManagementConfiguration.Read.All'
125 | - 'DeviceManagementApps.Read.All'
126 | - 'Device.Read.All'
127 | - 'Agreement.Read.All'
128 | - 'Application.Read.All'
129 |
130 | #### Generate Documentation without user interaction
131 |
132 | You can now call the Intune Documentation with the new parameters:
133 |
134 | ```powershell
135 |
136 | Invoke-IntuneDocumentation `
137 | -FullDocumentationPath c:\temp\IntuneDoc.docx `
138 | -ClientId d5cf6364-82f7-4024-9ac1-73a9fd2a6ec3 `
139 | -ClientSecret S03AESdMlhLQIPYYw/cYtLkGkQS0H49jXh02AS6Ek0U= `
140 | -Tenant d873f16a-73a2-4ccf-9d36-67b8243ab99a
141 |
142 | ```
143 |
144 | ## Issues / Feedback
145 |
146 | For any issues or feedback related to this module, please register for GitHub, and post your inquiry to this project's issue tracker.
147 |
148 | ## Thanks to
149 |
150 | @Microsoftgraph for the PowerShell Examples: