almenscorner / IntuneCD

Tool to backup, update and document configurations in Intune
MIT License
290 stars 38 forks source link

[FEATURE] Backup new endpoint security profile types #32

Closed aaronparker closed 2 years ago

aaronparker commented 2 years ago

There are new profile types for endpoint security policies that require a different API to backup/import: https://docs.microsoft.com/en-us/mem/intune/fundamentals/whats-new#new-profile-templates-and-settings-structure-for-endpoint-security-policies

Policy type Platform Profile (template) name
Antivirus Windows 10, Windows 11, and Windows Server Windows Security experience
Antivirus Windows 10, Windows 11, and Windows Server Windows Defender Antivirus
Antivirus Windows 10, Windows 11, and Windows Server Windows Defender Antivirus Exclusions
Firewall Windows 10, Windows 11, and Windows Server Microsoft Defender Firewall
Firewall Windows 10, Windows 11, and Windows Server Microsoft Defender Firewall Rules
Endpoint detection and response Windows 10, Windows 11, and Windows Server Endpoint detection and response
Attack surface reduction Windows 10 and Later Attack surface reduction rules
Attack surface reduction Windows 10 and Later Exploit protection
almenscorner commented 2 years ago

Thank you for reporting Aaron, I will try to have something ready for this at the end of the week :)

almenscorner commented 2 years ago

I did some testing with the new policys and they can be backed up/updated with the current version, although they are placed under Settings Catalog folder as they are using the Configuration Policy API :)

aaronparker commented 2 years ago

Ah, I missed that. Thank-you

almenscorner commented 2 years ago

New profile types for Endpoint Security uses the Configuration Policy API and are placed under the Settings Catalog folder instead of Management Intents, updating values and creating configurations that do not exist works as expected.