├── .gitignore ├── IntuneHydrationKit.psd1 ├── IntuneHydrationKit.psm1 ├── Invoke-IntuneHydration.ps1 ├── LICENSE ├── Private ├── Copy-DeepObject.ps1 ├── Get-GraphErrorMessage.ps1 ├── Get-HydrationTemplates.ps1 ├── Get-ObfuscatedTenantId.ps1 ├── Get-ResultSummary.ps1 ├── New-HydrationResult.ps1 ├── Remove-ReadOnlyGraphProperties.ps1 └── Test-HydrationKitObject.ps1 ├── Public ├── Connect-IntuneHydration.ps1 ├── Get-OpenIntuneBaseline.ps1 ├── Import-HydrationSettings.ps1 ├── Import-IntuneAppProtectionPolicy.ps1 ├── Import-IntuneBaseline.ps1 ├── Import-IntuneCompliancePolicy.ps1 ├── Import-IntuneConditionalAccessPolicy.ps1 ├── Import-IntuneDeviceFilter.ps1 ├── Import-IntuneEnrollmentProfile.ps1 ├── Import-IntuneNotificationTemplate.ps1 ├── Initialize-HydrationLogging.ps1 ├── New-IntuneDynamicGroup.ps1 ├── Test-IntunePrerequisites.ps1 └── Write-HydrationLog.ps1 ├── README.md ├── Templates ├── AppProtection │ ├── Android-App-Protection.json │ └── iOS-App-Protection.json ├── Compliance │ ├── Android-Compliance-FullyManaged-Basic.json │ ├── Android-Compliance-FullyManaged-Strict.json │ ├── Linux-Compliance-Basic.json │ ├── Linux-Compliance-Strict.json │ ├── Windows-Compliance-Policy.json │ ├── Windows-Custom-Compliance.json │ ├── iOS-Compliance-Basic.json │ ├── iOS-Compliance-Strict.json │ ├── macOS-Compliance-Basic.json │ └── macOS-Compliance-Strict.json ├── ConditionalAccess │ ├── Block access for unknown or unsupported device platform.json │ ├── Block legacy authentication.json │ ├── No persistent browser session.json │ ├── Require MDM-enrolled and compliant device to access cloud apps for all users (Preview).json │ ├── Require compliant or hybrid Azure AD joined device for admins.json │ ├── Require compliant or hybrid Azure AD joined device or multifactor authentication for all users.json │ ├── Require multifactor authentication for Azure management.json │ ├── Require multifactor authentication for Microsoft admin portals.json │ ├── Require multifactor authentication for admins.json │ ├── Require multifactor authentication for all users.json │ ├── Require multifactor authentication for guest access.json │ ├── Require phishing-resistant multifactor authentication for admins.json │ ├── Securing security info registration.json │ └── Use application enforced restrictions for O365 apps.json ├── DynamicGroups │ ├── Autopilot-Groups.json │ ├── Manufacturer-Groups.json │ └── OS-Groups.json ├── Enrollment │ ├── Windows-Autopilot-Profile.json │ ├── Windows-ESP-Profile.json │ └── macOS-DEP-Enrollment-Profile.json └── Notifications │ └── First-Warning.json ├── media ├── IHKLogo.png └── SampleOutput.png └── settings.example.json /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/.gitignore -------------------------------------------------------------------------------- /IntuneHydrationKit.psd1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/IntuneHydrationKit.psd1 -------------------------------------------------------------------------------- /IntuneHydrationKit.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/IntuneHydrationKit.psm1 -------------------------------------------------------------------------------- /Invoke-IntuneHydration.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Invoke-IntuneHydration.ps1 -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/LICENSE -------------------------------------------------------------------------------- /Private/Copy-DeepObject.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Private/Copy-DeepObject.ps1 -------------------------------------------------------------------------------- /Private/Get-GraphErrorMessage.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Private/Get-GraphErrorMessage.ps1 -------------------------------------------------------------------------------- /Private/Get-HydrationTemplates.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Private/Get-HydrationTemplates.ps1 -------------------------------------------------------------------------------- /Private/Get-ObfuscatedTenantId.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Private/Get-ObfuscatedTenantId.ps1 -------------------------------------------------------------------------------- /Private/Get-ResultSummary.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Private/Get-ResultSummary.ps1 -------------------------------------------------------------------------------- /Private/New-HydrationResult.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Private/New-HydrationResult.ps1 -------------------------------------------------------------------------------- /Private/Remove-ReadOnlyGraphProperties.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Private/Remove-ReadOnlyGraphProperties.ps1 -------------------------------------------------------------------------------- /Private/Test-HydrationKitObject.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Private/Test-HydrationKitObject.ps1 -------------------------------------------------------------------------------- /Public/Connect-IntuneHydration.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/Connect-IntuneHydration.ps1 -------------------------------------------------------------------------------- /Public/Get-OpenIntuneBaseline.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/Get-OpenIntuneBaseline.ps1 -------------------------------------------------------------------------------- /Public/Import-HydrationSettings.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/Import-HydrationSettings.ps1 -------------------------------------------------------------------------------- /Public/Import-IntuneAppProtectionPolicy.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/Import-IntuneAppProtectionPolicy.ps1 -------------------------------------------------------------------------------- /Public/Import-IntuneBaseline.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/Import-IntuneBaseline.ps1 -------------------------------------------------------------------------------- /Public/Import-IntuneCompliancePolicy.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/Import-IntuneCompliancePolicy.ps1 -------------------------------------------------------------------------------- /Public/Import-IntuneConditionalAccessPolicy.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/Import-IntuneConditionalAccessPolicy.ps1 -------------------------------------------------------------------------------- /Public/Import-IntuneDeviceFilter.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/Import-IntuneDeviceFilter.ps1 -------------------------------------------------------------------------------- /Public/Import-IntuneEnrollmentProfile.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/Import-IntuneEnrollmentProfile.ps1 -------------------------------------------------------------------------------- /Public/Import-IntuneNotificationTemplate.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/Import-IntuneNotificationTemplate.ps1 -------------------------------------------------------------------------------- /Public/Initialize-HydrationLogging.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/Initialize-HydrationLogging.ps1 -------------------------------------------------------------------------------- /Public/New-IntuneDynamicGroup.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/New-IntuneDynamicGroup.ps1 -------------------------------------------------------------------------------- /Public/Test-IntunePrerequisites.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/Test-IntunePrerequisites.ps1 -------------------------------------------------------------------------------- /Public/Write-HydrationLog.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Public/Write-HydrationLog.ps1 -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/README.md -------------------------------------------------------------------------------- /Templates/AppProtection/Android-App-Protection.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/AppProtection/Android-App-Protection.json -------------------------------------------------------------------------------- /Templates/AppProtection/iOS-App-Protection.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/AppProtection/iOS-App-Protection.json -------------------------------------------------------------------------------- /Templates/Compliance/Android-Compliance-FullyManaged-Basic.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Compliance/Android-Compliance-FullyManaged-Basic.json -------------------------------------------------------------------------------- /Templates/Compliance/Android-Compliance-FullyManaged-Strict.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Compliance/Android-Compliance-FullyManaged-Strict.json -------------------------------------------------------------------------------- /Templates/Compliance/Linux-Compliance-Basic.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Compliance/Linux-Compliance-Basic.json -------------------------------------------------------------------------------- /Templates/Compliance/Linux-Compliance-Strict.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Compliance/Linux-Compliance-Strict.json -------------------------------------------------------------------------------- /Templates/Compliance/Windows-Compliance-Policy.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Compliance/Windows-Compliance-Policy.json -------------------------------------------------------------------------------- /Templates/Compliance/Windows-Custom-Compliance.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Compliance/Windows-Custom-Compliance.json -------------------------------------------------------------------------------- /Templates/Compliance/iOS-Compliance-Basic.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Compliance/iOS-Compliance-Basic.json -------------------------------------------------------------------------------- /Templates/Compliance/iOS-Compliance-Strict.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Compliance/iOS-Compliance-Strict.json -------------------------------------------------------------------------------- /Templates/Compliance/macOS-Compliance-Basic.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Compliance/macOS-Compliance-Basic.json -------------------------------------------------------------------------------- /Templates/Compliance/macOS-Compliance-Strict.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Compliance/macOS-Compliance-Strict.json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/Block access for unknown or unsupported device platform.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/Block access for unknown or unsupported device platform.json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/Block legacy authentication.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/Block legacy authentication.json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/No persistent browser session.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/No persistent browser session.json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/Require MDM-enrolled and compliant device to access cloud apps for all users (Preview).json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/Require MDM-enrolled and compliant device to access cloud apps for all users (Preview).json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/Require compliant or hybrid Azure AD joined device for admins.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/Require compliant or hybrid Azure AD joined device for admins.json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/Require compliant or hybrid Azure AD joined device or multifactor authentication for all users.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/Require compliant or hybrid Azure AD joined device or multifactor authentication for all users.json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/Require multifactor authentication for Azure management.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/Require multifactor authentication for Azure management.json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/Require multifactor authentication for Microsoft admin portals.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/Require multifactor authentication for Microsoft admin portals.json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/Require multifactor authentication for admins.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/Require multifactor authentication for admins.json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/Require multifactor authentication for all users.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/Require multifactor authentication for all users.json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/Require multifactor authentication for guest access.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/Require multifactor authentication for guest access.json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/Require phishing-resistant multifactor authentication for admins.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/Require phishing-resistant multifactor authentication for admins.json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/Securing security info registration.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/Securing security info registration.json -------------------------------------------------------------------------------- /Templates/ConditionalAccess/Use application enforced restrictions for O365 apps.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/ConditionalAccess/Use application enforced restrictions for O365 apps.json -------------------------------------------------------------------------------- /Templates/DynamicGroups/Autopilot-Groups.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/DynamicGroups/Autopilot-Groups.json -------------------------------------------------------------------------------- /Templates/DynamicGroups/Manufacturer-Groups.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/DynamicGroups/Manufacturer-Groups.json -------------------------------------------------------------------------------- /Templates/DynamicGroups/OS-Groups.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/DynamicGroups/OS-Groups.json -------------------------------------------------------------------------------- /Templates/Enrollment/Windows-Autopilot-Profile.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Enrollment/Windows-Autopilot-Profile.json -------------------------------------------------------------------------------- /Templates/Enrollment/Windows-ESP-Profile.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Enrollment/Windows-ESP-Profile.json -------------------------------------------------------------------------------- /Templates/Enrollment/macOS-DEP-Enrollment-Profile.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Enrollment/macOS-DEP-Enrollment-Profile.json -------------------------------------------------------------------------------- /Templates/Notifications/First-Warning.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/Templates/Notifications/First-Warning.json -------------------------------------------------------------------------------- /media/IHKLogo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/media/IHKLogo.png -------------------------------------------------------------------------------- /media/SampleOutput.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/media/SampleOutput.png -------------------------------------------------------------------------------- /settings.example.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jorgeasaurus/IntuneHydrationKit/HEAD/settings.example.json --------------------------------------------------------------------------------