search

Micke-K / IntuneManagement

Copy, export, import, delete, document and compare policies and profiles in Intune and Azure with PowerShell script and WPF UI. Import ADMX files and registry settings with ADMX ingestion. View and edit PowerShell script.
MIT License
1.17k stars 210 forks source link

Issues with Endpoint Security and policies with Administrative Templates #280

Open ryanedlund opened 1 month ago

ryanedlund commented 1 month ago

Apologies if this is known/expected behavior, but figured I should report this issue in case it is an actual problem, or I'm just not doing something right/am missing needed rights or something.

In my environment I am working with two tenants, one Production and one QA, and typically build out policies in QA tenant, and need to export from there, and then import to Prod. Finding/using your tool was really the only way to really make that feasible, so thanks a bunch.

I am running into some issues though:

  1. If a specific policy backed up from Settings Catalog section contains Administrative Template items, I can't see that policy at all in the list when attempting to import the backed-up QA items into the Prod tenant.

  2. Endpoint Security: Nothing shows in the Endpoint Security tab at all. Policies such as LAPS, Firewall, and BitLocker configured in their respective Endpoint Security sections in Intune do seem to show in Settings Catalog as exportable items, but likewise are not visible when attempting to do an import of those backed up files - whether that be into the other tenant or back into the same one.

For Settings Catalog items containing Administrative Templates I can always just backup the policy as a JSON in the Intune console and import it that way, but for Endpoint Security items MS seems to not allow export/import in the console, so I end up having to recreate everything from scratch... FW rules are NOT fun to have to replicate manually, and I'm not looking forward to doing that with the Bitlocker policy either. Hoping I'm just doing something wrong and it IS possible to export/import those items, or it's a bug that can be fixed, not simply a "feature" of Intune.

Micke-K commented 3 weeks ago

Hello!

Each menu item is a specific API and not an object in Intune.

  1. Are you sure you are using a Settings Catalog and not an ADMX policy? For ADMX policies, you will have to import the ADMX file in the destination tenant as well. Howerver, you can't export/import them via the Intune portal since IDs are environment specific. It should work for actual Setting s Catalog objects. I did a test of importing json files from a different tenant and they showed up with Administrative Settings included.
  2. Most Endpoint Security policies are using the Settings Catalog APIs so they should be under the Settings Catalog options.

Alos make sure that you have loaded all policies. If you have two buttons at the top, Load All and Load Next, then you have more policies to load. Default page size for Settings Catalog is 25. I have seen where it doesn't actually load 25 anyway. If I had any Endpoint Security objects, it never returned them but included them in the count so I only saw 18 even though page size was 25. Most API has 100 as page size.

Cheers!