search

microsoft / Microsoft365DSC

Manages, configures, extracts and monitors Microsoft 365 tenant configurations
https://aka.ms/M365DSC
MIT License
1.59k stars 500 forks source link

IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10: "Cannot bind argument to parameter 'ReferenceObject' because it is null." when deploying #3355

Closed ps-nz closed 1 year ago

ps-nz commented 1 year ago

Details of the scenario you tried and the problem that is occurring

Configuration from a tenancy has been exported for deployment to another tenancy via Start-DscConfiguration. Steps taken:

  1. Ensured latest versions being used with Update-M365DSCModule and Update-M365DSCDependencies
  2. Export configuration from existing tenancy, grabbing IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 resources
  3. Run M365TenantConfig.ps1. .mof file created successfully when running M365TenantConfig.ps1
  4. Run Start-DscConfiguration -Path -wait -Verbose -force
  5. Deployment of deployment fails, on IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 resources with message: Cannot bind argument to parameter 'ReferenceObject' because it is null.

The policy is created in the target tenancy, but no settings are added:

image

Note that this occurs regardless of trying to deploy the IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 by themselves, or as part of a configuration with other resources (the other resources deploy successfully, only IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 fails.

Verbose logs showing the problem

VERBOSE: Perform operation 'Invoke CimMethod' with following parameters, ''methodName' =
SendConfigurationApply,'className' = MSFT_DSCLocalConfigurationManager,'namespaceName' =
root/Microsoft/Windows/DesiredStateConfiguration'.
VERBOSE: An LCM method call arrived from computer vm-server01 with user sid
<removed>.
VERBOSE: [vm-server01]: LCM:  [ Start  Set      ]
VERBOSE: [vm-server01]: LCM:  [ Start  Resource ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings]
VERBOSE: [vm-server01]: LCM:  [ Start  Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Testing configuration of the Intune Device Configuration
Administrative Template Policy for Windows10 with Id {5416d97f-54d5-4f21-a82f-b2bf2d3efdc3} and DisplayName {TEST |
Admin Template | Control Pannel Settings}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Could not find an Intune Device Configuration Administrative
Template Policy for Windows10 with Id {5416d97f-54d5-4f21-a82f-b2bf2d3efdc3}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] An Intune Device Configuration Administrative Template Policy
 for Windows10 with Id {3d9b1ff1-819b-4416-957b-7996369580d3} and DisplayName {TEST | Admin Template | Control Pannel
Settings} was found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Current Values: ApplicationId=***
ApplicationSecret=***
Assignments=()
CertificateThumbprint=***
Credential=$null
DefinitionValues=()
Description=
DisplayName=TEST | Admin Template | Control Pannel Settings
Ensure=Present
Id=3d9b1ff1-819b-4416-957b-7996369580d3
Managedidentity=False
PolicyConfigurationIngestionType=builtIn
TenantId=***
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Target Values: Assignments=()
DefinitionValues=({ConfigurationType=policy; Enabled=True; Id=13b64afd-c505-4f1f-abe2-d85b1c6957c2;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=06c988a9-4d2c-4f18-a059-fd5d47865607; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=2390950b-8ef9-4b36-87bf-8617a3386cf5;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition; PresentationValues=},{ConfigurationType=policy;
Enabled=True; Id=ad73dae7-b5b7-483a-bad7-a50d90d00955; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=f83afc1c-b0ed-4f42-99b1-5d43591d94a1;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition; PresentationValues=})
Description=
DisplayName=TEST | Admin Template | Control Pannel Settings
Ensure=Present
PolicyConfigurationIngestionType=unknown
Verbose=True
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Test-TargetResource returned False
VERBOSE: [vm-server01]: LCM:  [ End    Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings]  in 18.3690 seconds.
VERBOSE: [vm-server01]: LCM:  [ Start  Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Could not find an Intune Device Configuration Administrative
Template Policy for Windows10 with Id {5416d97f-54d5-4f21-a82f-b2bf2d3efdc3}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] An Intune Device Configuration Administrative Template Policy
 for Windows10 with Id {3d9b1ff1-819b-4416-957b-7996369580d3} and DisplayName {TEST | Admin Template | Control Pannel
Settings} was found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Updating the Intune Device Configuration Administrative
Template Policy for Windows10 with Id {3d9b1ff1-819b-4416-957b-7996369580d3}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] POST
https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/3d9b1ff1-819b-4416-957b-7996369580d3/assign
 with 52-byte payload
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] received 121-byte response of content type application/json
Cannot bind argument to parameter 'ReferenceObject' because it is null.
    + CategoryInfo          : InvalidData: (:) [], CimException
    + FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Microsoft.PowerShell.Commands.CompareObje
   ctCommand
    + PSComputerName        : localhost

VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] POST
https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/3d9b1ff1-819b-4416-957b-7996369580d3/update
DefinitionValues with 128-byte payload
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] received 0-byte response of content type
VERBOSE: [vm-server01]: LCM:  [ End    Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings]  in 3.0390 seconds.
The PowerShell DSC resource '[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationA
dministrativeTemplatePolicyWindows10-TEST | Admin Template | Control Pannel Settings' with SourceInfo 'C:\M365DSC\Admin
TemplateOnly\M365TenantConfig.ps1::21::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10' threw one or
more non-terminating errors while running the Set-TargetResource functionality. These errors are logged to the ETW
channel called Microsoft-Windows-DSC/Operational. Refer to this channel for more details.
    + CategoryInfo          : InvalidOperation: (:) [], CimException
    + FullyQualifiedErrorId : NonTerminatingErrorFromProvider
    + PSComputerName        : localhost

VERBOSE: [vm-server01]: LCM:  [ End    Set      ]
The SendConfigurationApply function did not succeed.
    + CategoryInfo          : NotSpecified: (root/Microsoft/...gurationManager:String) [], CimException
    + FullyQualifiedErrorId : MI RESULT 1
    + PSComputerName        : localhost

VERBOSE: Operation 'Invoke CimMethod' complete.
VERBOSE: Time taken for configuration job to complete is 22.203 seconds

Suggested solution to the issue

Unknown

The DSC configuration that is used to reproduce the issue (as detailed as possible)

M365TenantConfig.ps1 File:

# Generated with Microsoft365DSC version 1.23.517.1
# For additional information on how to use Microsoft365DSC, please visit https://aka.ms/M365DSC
param (
)

Configuration M365TenantConfig
{
    param (
    )

    $OrganizationName = $ConfigurationData.NonNodeData.OrganizationName

    Import-DscResource -ModuleName 'Microsoft365DSC' -ModuleVersion '1.23.517.1'

    Node localhost
    {

        # For information on how to use this resource, please refer to:
        # https://github.com/microsoft/Microsoft365DSC/wiki/IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10

        IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 "IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-TEST | Admin Template | Control Pannel Settings"
        {
            ApplicationId                    = $ConfigurationData.NonNodeData.ApplicationId;
            ApplicationSecret                = New-Object System.Management.Automation.PSCredential ('ApplicationSecret', (ConvertTo-SecureString $ConfigurationData.NonNodeData.ApplicationSecret -AsPlainText -Force));
            Assignments                      = @();
            DefinitionValues                 = @(
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '634e9279-e044-48d5-8ed8-a9b14dc10a77'
                            presentationDefinitionLabel = 'Restrict users to the following language:'
                            StringValue = 'en-US'
                            Id = '95d97ed3-0582-47e9-b178-b822c83f1739'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = '13b64afd-c505-4f1f-abe2-d85b1c6957c2'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'c2563085-8373-4c6a-b379-114cfb958d3a'
                        DisplayName = 'Restricts the UI language Windows uses for all logged users'
                        CategoryPath = '\Control Panel\Regional and Language Options'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '06c988a9-4d2c-4f18-a059-fd5d47865607'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'b17cf23b-30e7-48c6-9608-418043515c82'
                        DisplayName = 'Prevent changing lock screen and logon image'
                        CategoryPath = '\Control Panel\Personalization'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2012, Windows 8 or Windows RT'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '2390950b-8ef9-4b36-87bf-8617a3386cf5'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '8000b4e7-20fb-439f-b6c8-71c5e447a698'
                        DisplayName = 'Prevent enabling lock screen camera'
                        CategoryPath = '\Control Panel\Personalization'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'ad73dae7-b5b7-483a-bad7-a50d90d00955'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'ee2d734f-044d-4689-b610-769ce47eaa80'
                        DisplayName = 'Prevent enabling lock screen slide show'
                        CategoryPath = '\Control Panel\Personalization'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'f83afc1c-b0ed-4f42-99b1-5d43591d94a1'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '9f9a827e-c7e6-47c5-9186-cf3bcec38491'
                        DisplayName = 'Prevent changing start menu background'
                        CategoryPath = '\Control Panel\Personalization'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2012, Windows 8 or Windows RT'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
            );
            Description                      = "";
            DisplayName                      = "TEST | Admin Template | Control Pannel Settings";
            Ensure                           = "Present";
            Id                               = "5416d97f-54d5-4f21-a82f-b2bf2d3efdc3";
            PolicyConfigurationIngestionType = "unknown";
            TenantId                         = $OrganizationName;
        }

    }
}

M365TenantConfig -ConfigurationData .\ConfigurationData.psd1

Resulting .mof file:

/*
@TargetNode='localhost'
@GeneratedBy=<removed>
@GenerationDate=06/02/2023 11:21:48
@GenerationHost=<removed>
*/

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue1ref
{
PresentationDefinitionId = "634e9279-e044-48d5-8ed8-a9b14dc10a77";
 PresentationDefinitionLabel = "Restrict users to the following language:";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "95d97ed3-0582-47e9-b178-b822c83f1739";
 StringValue = "en-US";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition1ref
{
CategoryPath = "\\Control Panel\\Regional and Language Options";
 Id = "c2563085-8373-4c6a-b379-114cfb958d3a";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Restricts the UI language Windows uses for all logged users";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue1ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue1ref
};
 Id = "13b64afd-c505-4f1f-abe2-d85b1c6957c2";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition1ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition2ref
{
CategoryPath = "\\Control Panel\\Personalization";
 Id = "b17cf23b-30e7-48c6-9608-418043515c82";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2012, Windows 8 or Windows RT";
 ClassType = "machine";
 DisplayName = "Prevent changing lock screen and logon image";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue2ref
{
ConfigurationType = "policy";
 Id = "06c988a9-4d2c-4f18-a059-fd5d47865607";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition2ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition3ref
{
CategoryPath = "\\Control Panel\\Personalization";
 Id = "8000b4e7-20fb-439f-b6c8-71c5e447a698";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1";
 ClassType = "machine";
 DisplayName = "Prevent enabling lock screen camera";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue3ref
{
ConfigurationType = "policy";
 Id = "2390950b-8ef9-4b36-87bf-8617a3386cf5";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition3ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition4ref
{
CategoryPath = "\\Control Panel\\Personalization";
 Id = "ee2d734f-044d-4689-b610-769ce47eaa80";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1";
 ClassType = "machine";
 DisplayName = "Prevent enabling lock screen slide show";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue4ref
{
ConfigurationType = "policy";
 Id = "ad73dae7-b5b7-483a-bad7-a50d90d00955";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition4ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition5ref
{
CategoryPath = "\\Control Panel\\Personalization";
 Id = "9f9a827e-c7e6-47c5-9186-cf3bcec38491";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2012, Windows 8 or Windows RT";
 ClassType = "machine";
 DisplayName = "Prevent changing start menu background";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue5ref
{
ConfigurationType = "policy";
 Id = "f83afc1c-b0ed-4f42-99b1-5d43591d94a1";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition5ref;
 Enabled = True;

};

instance of MSFT_Credential as $MSFT_Credential1ref
{
Password = "<removed>";
 UserName = "ApplicationSecret";

};

instance of MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 as $MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows101ref
{
PolicyConfigurationIngestionType = "unknown";
 Id = "5416d97f-54d5-4f21-a82f-b2bf2d3efdc3";
 TenantId = "cclm365service.onmicrosoft.com";
 DisplayName = "TEST | Admin Template | Control Pannel Settings";
 ResourceID = "[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-TEST | Admin Template | Control Pannel Settings";
 ApplicationSecret = $MSFT_Credential1ref;
 Assignments = {
};
 Description = "";
 Ensure = "Present";
 SourceInfo = "C:\\M365DSC\\AdminTemplateOnly\\M365TenantConfig.ps1::21::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10";
 ApplicationId = "<removed>";
 ModuleVersion = "1.23.517.1";
 ModuleName = "Microsoft365DSC";
 DefinitionValues = {
    $MSFT_IntuneGroupPolicyDefinitionValue1ref,
    $MSFT_IntuneGroupPolicyDefinitionValue2ref,
    $MSFT_IntuneGroupPolicyDefinitionValue3ref,
    $MSFT_IntuneGroupPolicyDefinitionValue4ref,
    $MSFT_IntuneGroupPolicyDefinitionValue5ref
};

 ConfigurationName = "M365TenantConfig";

};
instance of OMI_ConfigurationDocument

                    {
 Version="2.0.0";

                        MinimumCompatibleVersion = "1.0.0";

                        CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"};

                        Author="<removed>";

                        GenerationDate="06/02/2023 11:21:48";

                        GenerationHost="<removed>";

                        Name="M365TenantConfig";

                    };

The operating system the target node is running

OsName : Microsoft Windows Server 2019 Datacenter OsOperatingSystemSKU : DatacenterServerEdition OsArchitecture : 64-bit WindowsVersion : 1809 WindowsBuildLabEx : 17763.1.amd64fre.rs5_release.180914-1434 OsLanguage : en-US OsMuiLanguages : {en-US}

Version of the DSC module that was used ('dev' if using current dev branch)

1.23.517.1

William-Francillette commented 1 year ago

Thanks, for the details - I'll try to reproduce the error and revert back asap

ricmestre commented 1 year ago

Looking at the logs it looks like it's failing here https://github.com/microsoft/Microsoft365DSC/blob/64d3af5c803e0600039ed844426fc10e1038dc76/Modules/Microsoft365DSC/DSCResources/MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10/MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10.psm1#L461

This is because the assignment on L458 is $null, maybe a check is in order before assuming it has a non-null value?

[Array]$currentDefinitionValues = $currentInstance.DefinitionValues
William-Francillette commented 1 year ago

thanks @ricmestre : I've used a compare-object to compare 2 arrays of Id but it doesn't support $null - replacing $null by @() should do the trick I'll enforce it tonight image

ps-nz commented 1 year ago

Thank you for your assistance with this. Unfortunately, after installing the new version, the issue is still persisting - however, one of the policies is deploying correctly (WIN | Admin Template | Disable System Restore)

Steps take:

  1. Uninstall old module version
  2. Install module and confirm it's the new version (1.23.607.1)
  3. Update dependencies and uninstall outdated dependencies (using Update-M365DSCDependencies and Uninstall-M365DSCOutdatedDependencies)
  4. Recreate configuration files (below)
  5. Run Start-DscConfiguration -Path C:\M365DSC\AdminTemplateOnly\M365TenantConfig -wait -Verbose -force
  6. Same errors are encountered, however, one policy does apply correctly (WIN | Admin Template | Disable System Restore)

I can't spot what's different between the successfully deployed policy and the others.

M365TenantConfig.ps1 File

# Generated with Microsoft365DSC version 1.23.607.1
# For additional information on how to use Microsoft365DSC, please visit https://aka.ms/M365DSC
param (
)

Configuration M365TenantConfig
{
    param (
    )

    $OrganizationName = $ConfigurationData.NonNodeData.OrganizationName

    Import-DscResource -ModuleName 'Microsoft365DSC' -ModuleVersion '1.23.607.1'

    Node localhost
    {

        # For information on how to use this resource, please refer to:
        # https://github.com/microsoft/Microsoft365DSC/wiki/IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10
        IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 "IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-WIN | Edge Customisation | Users"
        {
            ApplicationId                    = $ConfigurationData.NonNodeData.ApplicationId;
            ApplicationSecret                = New-Object System.Management.Automation.PSCredential ('ApplicationSecret', (ConvertTo-SecureString $ConfigurationData.NonNodeData.ApplicationSecret -AsPlainText -Force));
            Assignments                      = @();
            DefinitionValues                 = @(
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = 'b6c6af51-90aa-4a77-b096-093a7d1e3811'
                            presentationDefinitionLabel = 'Action to take on startup'
                            StringValue = '5'
                            Id = '3ec701f9-dcbf-4088-839a-69ec48a7c049'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = '3a64fed8-508a-4022-a2df-819e0b7308da'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'a36e8608-52c2-4cc3-8488-32206719f62f'
                        DisplayName = 'Action to take on startup'
                        CategoryPath = '\Microsoft Edge\Startup, home page and new tab page'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Windows 7 or later'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'fd3e4e73-bede-4103-97de-6e8724b39bc9'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'a1ce0577-ea6d-4950-bcf3-3342256a7fb4'
                        DisplayName = 'Show Microsoft Rewards experiences'
                        CategoryPath = '\Microsoft Edge'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Edge version 88, Windows 7 or later'
                        ClassType = 'user'
                    }
                    Enabled = $False
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '472b252c-0a33-4e79-b421-84085b59ad5c'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '212afc7f-a0e9-4496-94bf-46075026f109'
                        DisplayName = 'Microsoft Edge Insider Promotion Enabled'
                        CategoryPath = '\Microsoft Edge'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Edge version 98, Windows 7 or later'
                        ClassType = 'user'
                    }
                    Enabled = $False
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '9dfb796a-ce07-4c9d-9f90-f78149189665'
                            presentationDefinitionLabel = 'Default search provider URL for suggestions'
                            StringValue = '{google:baseURL}complete/search?output=chrome&q={searchTerms}'
                            Id = '8604ae8b-5a5e-4f97-be03-f14579745061'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = '655ef1de-d54b-4640-b36c-763e2f23a4e1'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'f8324242-18c0-40bf-ae08-52db57201372'
                        DisplayName = 'Default search provider URL for suggestions'
                        CategoryPath = '\Microsoft Edge\Default search provider'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Windows 7 or later'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'ccf6c675-3f8b-4403-82db-3aef712e4ff3'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'a0727084-663b-443e-ae17-5c0392bce4a4'
                        DisplayName = 'Allow users to configure Family safety and Kids Mode'
                        CategoryPath = '\Microsoft Edge'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Edge version 83, Windows 7 or later'
                        ClassType = 'user'
                    }
                    Enabled = $False
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'a364c93a-75a9-45ae-b52b-4996dff7ac15'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '3a2c1db4-2b9f-4b7c-8a20-8b1e0616f7da'
                        DisplayName = 'Force synchronization of browser data and do not show the sync consent prompt'
                        CategoryPath = '\Microsoft Edge'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Edge version 86, Windows 7 or later'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'a1a0208a-a356-407a-9a63-88f89cc8988f'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '1b177a44-68f2-40c3-b706-8e581e422470'
                        DisplayName = 'Allow Microsoft News content on the new tab page'
                        CategoryPath = '\Microsoft Edge\Startup, home page and new tab page'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Edge version 91, Windows 7 or later'
                        ClassType = 'machine'
                    }
                    Enabled = $False
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = 'aa36fa17-7a02-48c7-bd3a-c4278e671d57'
                            presentationDefinitionLabel = 'Browser sign-in settings'
                            StringValue = '2'
                            Id = 'aba39355-bc17-42e5-ab3e-0df7ae49d738'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = '5fa8f659-93da-44ba-bd6e-9b5107c6ba34'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'b6224bac-9571-4ff9-b478-9337b898bab9'
                        DisplayName = 'Browser sign-in settings'
                        CategoryPath = '\Microsoft Edge'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Windows 7 or later'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '068b0640-d70e-40ae-8336-c9324376de1e'
                            presentationDefinitionLabel = 'Default search provider name'
                            StringValue = 'GoogleForFrostyOutdoors'
                            Id = 'ecbcd73c-d28a-40eb-b9e4-9855cab47f72'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = '5693d669-66f4-4bfe-a438-ff7a3e91193b'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '5eb1769d-4cea-4bce-87b9-bb549f8288d3'
                        DisplayName = 'Default search provider name'
                        CategoryPath = '\Microsoft Edge\Default search provider'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Windows 7 or later'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'e1e84c51-cd42-470c-b090-8c2d1cfd6a36'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '2d7e81ba-27f0-4f29-b91e-c73cf9daf0a1'
                        DisplayName = 'Allow users to access the games menu'
                        CategoryPath = '\Microsoft Edge'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Edge version 99, Windows 7 or later'
                        ClassType = 'user'
                    }
                    Enabled = $False
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '17c9dbeb-1f3c-4d63-854b-c49790dddc53'
                            presentationDefinitionLabel = 'Extension/App IDs and update URLs to be silently installed'
                            KeyValuePairValues = @(
                                MSFT_IntuneGroupPolicyDefinitionValuePresentationValueKeyValuePair{
                                    Name = 'odfafepnkmbhccpbejgmiehpchacaeak'
                                }
                            )
                            Id = 'dd315eaa-89ba-4312-8003-1458a8bcc2ba'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueList'
                        }
                    )
                    Id = '85852432-b5d2-4720-b043-1fc9b9d1dba0'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '706bdf4e-6cef-48cc-a55b-cc07b9967611'
                        DisplayName = 'Control which extensions are installed silently'
                        CategoryPath = '\Microsoft Edge\Extensions'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Windows 7 or later'
                        ClassType = 'user'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'f62d8b3b-3333-469a-88e9-27bb793b7f54'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '97b941fd-4e08-4672-9aa0-db0606256a06'
                        DisplayName = 'Enable the default search provider'
                        CategoryPath = '\Microsoft Edge\Default search provider'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Windows 7 or later'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '6e02112b-cd96-448b-9c43-2a1b632ad039'
                            presentationDefinitionLabel = 'Default search provider search URL'
                            StringValue = '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'
                            Id = 'd143dcf4-e556-4469-8976-ee4c84ae56f3'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = '97838afd-1bf3-438a-80a6-9c03b22974a2'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '8d9348dc-84f7-4e3d-8fd5-e18ce444708c'
                        DisplayName = 'Default search provider search URL'
                        CategoryPath = '\Microsoft Edge\Default search provider'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Windows 7 or later'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '2d14b507-3d77-4a92-9f5b-168a00302bd5'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '39ef784a-fe52-4e8c-ad87-e51fcc881461'
                        DisplayName = 'Configure whether a user always has a default profile automatically signed in with their work or school account'
                        CategoryPath = '\Microsoft Edge'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Edge version 78, Windows 7 or later'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '72d538d5-bacc-43b8-be1f-d9e3aaa1d904'
                            presentationDefinitionLabel = 'Ads setting for sites with intrusive ads'
                            StringValue = '2'
                            Id = '96930330-381e-4ac6-b07a-39297872c0f7'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = 'bec2c8e2-739a-4b51-a186-76b6f3d0d70d'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '3e91c0d9-722f-4deb-8403-ee65f59f1910'
                        DisplayName = 'Ads setting for sites with intrusive ads'
                        CategoryPath = '\Microsoft Edge'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Edge version 78, Windows 7 or later'
                        ClassType = 'user'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'cc6f20dc-4439-49ee-a297-e15cf4f94af3'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'fab50500-383f-4a98-882f-f1568f5c69bb'
                        DisplayName = 'Show Hubs Sidebar'
                        CategoryPath = '\Microsoft Edge - Default Settings (users can override)'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Edge version 99, Windows 7 or later'
                        ClassType = 'user'
                    }
                    Enabled = $False
                }
            );
            Description                      = "";
            DisplayName                      = "WIN | Edge Customisation | Users";
            Ensure                           = "Present";
            Id                               = "0652321d-368e-489a-8ef4-9d802843d810";
            PolicyConfigurationIngestionType = "builtIn";
            TenantId                         = $OrganizationName;
        }
        IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 "IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-WIN | Admin Template | Device Security"
        {
            ApplicationId                    = $ConfigurationData.NonNodeData.ApplicationId;
            ApplicationSecret                = New-Object System.Management.Automation.PSCredential ('ApplicationSecret', (ConvertTo-SecureString $ConfigurationData.NonNodeData.ApplicationSecret -AsPlainText -Force));
            Assignments                      = @();
            DefinitionValues                 = @(
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = 'f64d5399-b62c-41c2-9a1c-05f8826bb225'
                            presentationDefinitionLabel = 'Maximum Log Size (KB)'
                            DecimalValue = 65536
                            Id = '42e54c3e-9ac9-434c-90db-68c39e42774b'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueDecimal'
                        }
                    )
                    Id = '084c630f-b571-45d8-82f8-af9c31731eed'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '9c9f7914-04b2-4fd0-9d45-0ce4005fd681'
                        DisplayName = 'Specify the maximum log file size (KB)'
                        CategoryPath = '\Windows Components\Event Log Service\Application'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '64eeb42c-8f75-4e44-883c-cadc3e35599f'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'c261d127-5d9c-4f7c-bdca-10a81da639e8'
                        DisplayName = 'Allow Basic authentication'
                        CategoryPath = '\Windows Components\Windows Remote Management (WinRM)\WinRM Service'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $False
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'cf1c82cf-328e-43b5-8eaa-276049127deb'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'e5b61f1a-5bef-47ab-b85a-178ad8747d50'
                        DisplayName = 'Remote host allows delegation of non-exportable credentials'
                        CategoryPath = '\System\Credentials Delegation'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2016, Windows 10 Version 1703'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '55844204-3fbc-452c-810f-e26fb9350a0c'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '0ed0607f-2dc8-4d1b-8472-1da2f8c9f9db'
                        DisplayName = 'Allow Basic authentication'
                        CategoryPath = '\Windows Components\Windows Remote Management (WinRM)\WinRM Client'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $False
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '9464412e-8297-46f1-a740-2f43d52acdf4'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '09359968-e4da-4393-9ff4-25c5b1148bdb'
                        DisplayName = 'Require a password when a computer wakes (on battery)'
                        CategoryPath = '\System\Power Management\Sleep Settings'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'a0883b77-c210-4da8-8e8c-2d3937ace906'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'a3bd23b5-dfd8-4dee-95b3-29f149a175a6'
                        DisplayName = 'Prohibit installation and configuration of Network Bridge on your DNS domain network'
                        CategoryPath = '\Network\Network Connections'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2003 operating systems or Windows XP Professional'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '259c61b7-1684-4374-8065-4f55336bb975'
                            presentationDefinitionLabel = 'Turn off Autoplay on:'
                            StringValue = '255'
                            Id = '60c2bdd0-f5e4-4858-8164-23f48431a846'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = '64988ef7-daf6-4cc7-a0fd-5173be540f80'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '7e0840a0-a002-45fd-b597-2a1db22ceccb'
                        DisplayName = 'Turn off Autoplay'
                        CategoryPath = '\Windows Components\AutoPlay Policies'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows 2000'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '3e9a9f1b-7d8f-44ff-87ba-d3f320c38d04'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '91d2acb3-bed9-4460-8dbf-2ae8587dcddc'
                        DisplayName = 'Disallow Autoplay for non-volume devices'
                        CategoryPath = '\Windows Components\AutoPlay Policies'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2008 R2 or Windows 7'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '5f80774a-f2bb-44b4-a6f1-fbb8e3fc46a4'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'cfac692b-fc00-490c-91ca-38d4372ddcbb'
                        DisplayName = 'Turn off blocking of outdated ActiveX controls for Internet Explorer'
                        CategoryPath = '\Windows Components\Internet Explorer\Security Features\Add-on Management'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Internet Explorer 8.0'
                        ClassType = 'machine'
                    }
                    Enabled = $False
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'd4cd8995-5271-40ab-890a-bceb72274e1f'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '02336087-30fd-4263-8b7c-45b4187e4bbc'
                        DisplayName = 'Prohibit use of Internet Connection Sharing on your DNS domain network'
                        CategoryPath = '\Network\Network Connections'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = 'ce3b368f-a96e-4545-b028-6c3a4231f500'
                            presentationDefinitionLabel = 'Log script block invocation start / stop events:'
                            BooleanValue = $False
                            Id = '6dd05ddd-8874-4435-8efb-8bbe8a8fa4c3'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueBoolean'
                        }
                    )
                    Id = 'b8f1136e-d16f-4c7e-bdf6-90f4cff140dd'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '834fba45-0fc5-4e70-b710-483b1cbd40cb'
                        DisplayName = 'Turn on PowerShell Script Block Logging'
                        CategoryPath = '\Windows Components\Windows PowerShell'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Microsoft Windows 7 or Windows Server 2008 family'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '44d5055f-b364-405e-809b-ebf6007e8df3'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '097e6dc9-ed13-4e75-90a3-4d43d15613dc'
                        DisplayName = 'Apply UAC restrictions to local accounts on network logons'
                        CategoryPath = '\MS Security Guide'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '30061552-413e-4708-b863-683bd4712660'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '9fcbf93e-504c-471d-a3b8-4ebb7e89d9dd'
                        DisplayName = 'Require a password when a computer wakes (plugged in)'
                        CategoryPath = '\System\Power Management\Sleep Settings'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '84cfd191-8130-4b29-a4c5-8a545368a7b5'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '7baccae7-8b48-40cf-b808-67e2def86ff1'
                        DisplayName = 'Turn on session logging'
                        CategoryPath = '\System\Remote Assistance'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = 'd08c0bd8-b753-4a5b-8447-68d1070e8d5d'
                            presentationDefinitionLabel = 'RPC Runtime Unauthenticated Client Restriction to Apply:'
                            StringValue = '1'
                            Id = 'b8710a8f-01ec-441d-8a0d-b54b2e3a78c6'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = 'd3581a01-a002-4b7a-b21e-05ec37e924cf'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '1b7b2747-63bb-42d0-b79f-82012226a925'
                        DisplayName = 'Restrict Unauthenticated RPC clients'
                        CategoryPath = '\System\Remote Procedure Call'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows XP Professional with SP2'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = 'c8c0ee63-bb3a-4fa3-b34d-ab4212ae07ed'
                            presentationDefinitionLabel = 'Maximum Log Size (KB)'
                            DecimalValue = 2097152
                            Id = '9bbc6fbe-c452-429f-9024-e3ccb3043ec0'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueDecimal'
                        }
                    )
                    Id = '3a6ec0c0-da2a-4813-8a07-2b50be9f8dc7'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '2aab8c95-553b-4534-94ef-a0b5f6fe8156'
                        DisplayName = 'Specify the maximum log file size (KB)'
                        CategoryPath = '\Windows Components\Event Log Service\Security'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '176bb9ff-b268-4f22-8c51-166caaa8cdff'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'aaa21b87-e380-425d-a9c2-c0b02f1d45f0'
                        DisplayName = 'Enumerate administrator accounts on elevation'
                        CategoryPath = '\Windows Components\Credential User Interface'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $False
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'e2a7dc5f-1706-45e5-8414-5cc840f4ae58'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '25bd11fa-5bff-48f1-8be0-c6e8a1d72c02'
                        DisplayName = 'Turn off heap termination on corruption'
                        CategoryPath = '\Windows Components\File Explorer'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'd56e68d8-6a97-4225-b9b1-3489023e3303'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'a6e1839c-6fb7-4cd6-9017-cf68accef2f8'
                        DisplayName = 'Configure Solicited Remote Assistance'
                        CategoryPath = '\System\Remote Assistance'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2003 operating systems or Windows XP Professional'
                        ClassType = 'machine'
                    }
                    Enabled = $False
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '5c8d10ad-8a28-4fe2-bd16-170d88dceb82'
                            presentationDefinitionLabel = 'Maximum Log Size (KB)'
                            DecimalValue = 65536
                            Id = 'b9165400-d32a-4a3d-9456-b5779946a31a'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueDecimal'
                        }
                    )
                    Id = '42af05a5-a03b-47c6-9f39-4c107f8e4eeb'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '98d69f26-2201-4aed-8927-d20c29b24ed5'
                        DisplayName = 'Specify the maximum log file size (KB)'
                        CategoryPath = '\Windows Components\Event Log Service\System'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '6fb01b31-35c6-4b2a-a6dc-f7f9056e9bf3'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '593aefc2-8d43-44c3-90e4-d3e26ea3395b'
                        DisplayName = 'Require secure RPC communication'
                        CategoryPath = '\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2003'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '07e2ed7f-33b8-44b6-8c23-7d4d260c2e3b'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'c0f3c9c3-4916-49cc-9f5a-dc0dbc1f55a4'
                        DisplayName = 'Turn off Data Execution Prevention for Explorer'
                        CategoryPath = '\Windows Components\File Explorer'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2008 R2 or Windows 7'
                        ClassType = 'machine'
                    }
                    Enabled = $False
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'dea7d174-1d0f-499a-b65e-3270b671eceb'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '1568d956-c5a1-47b5-a3bf-e442f877ffbb'
                        DisplayName = 'Require user authentication for remote connections by using Network Level Authentication'
                        CategoryPath = '\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = 'cc951c06-9e96-4fbf-9752-3a16dc1a1896'
                            presentationDefinitionLabel = 'Default AutoRun Behavior'
                            StringValue = '1'
                            Id = 'a791f718-23d7-4788-88c7-5e01ea61d359'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = '2009f542-4301-4f55-bf25-3fda9eb7b730'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '9eeafbe1-1a87-4d06-b7c9-ff299ae302e4'
                        DisplayName = 'Set the default behavior for AutoRun'
                        CategoryPath = '\Windows Components\AutoPlay Policies'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
            );
            Description                      = "";
            DisplayName                      = "WIN | Admin Template | Device Security";
            Ensure                           = "Present";
            Id                               = "28041f30-cd26-4785-baf8-0cb2ee489a0a";
            PolicyConfigurationIngestionType = "builtIn";
            TenantId                         = $OrganizationName;
        }
        IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 "IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-WIN | Edge Protection | Workstations"
        {
            ApplicationId                    = $ConfigurationData.NonNodeData.ApplicationId;
            ApplicationSecret                = New-Object System.Management.Automation.PSCredential ('ApplicationSecret', (ConvertTo-SecureString $ConfigurationData.NonNodeData.ApplicationSecret -AsPlainText -Force));
            Assignments                      = @();
            DefinitionValues                 = @(
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '8ff7eaca-5414-461b-be02-ef035d338628'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '270e643f-a1dd-49eb-8365-8292e9d6c7f7'
                        DisplayName = 'Configure Microsoft Defender SmartScreen to block potentially unwanted apps'
                        CategoryPath = '\Microsoft Edge\SmartScreen settings'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Edge version 80, Windows 7 or later'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '6c956448-109d-479a-a0d6-0690014d3a89'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'f9de5937-2ff5-4c34-a5ec-d0d997787b68'
                        DisplayName = 'Configure Microsoft Defender SmartScreen'
                        CategoryPath = '\Microsoft Edge\SmartScreen settings'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Windows 7 or later'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
            );
            Description                      = "";
            DisplayName                      = "WIN | Edge Protection | Workstations";
            Ensure                           = "Present";
            Id                               = "7bd283d9-c644-460a-a802-e1f0b3ce77df";
            PolicyConfigurationIngestionType = "builtIn";
            TenantId                         = $OrganizationName;
        }
        IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 "IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-WIN | Admin Template | OneDrive Config"
        {
            ApplicationId                    = $ConfigurationData.NonNodeData.ApplicationId;
            ApplicationSecret                = New-Object System.Management.Automation.PSCredential ('ApplicationSecret', (ConvertTo-SecureString $ConfigurationData.NonNodeData.ApplicationSecret -AsPlainText -Force));
            Assignments                      = @();
            DefinitionValues                 = @(
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '77289eef-b774-4474-acaa-5d4316687fa6'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '81c07ba0-7512-402d-b1f6-00856975cfab'
                        DisplayName = 'Silently sign in users to the OneDrive sync app with their Windows credentials'
                        CategoryPath = '\OneDrive'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'At least Windows Server 2008 R2 or Windows 7'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '14af66fc-aa83-4445-a6a2-953f75c09e73'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'f8aa915a-96a0-44e2-a108-1e9e9e2a2f8f'
                        DisplayName = 'Prevent users from syncing libraries and folders shared from other organizations'
                        CategoryPath = '\OneDrive'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'At least Windows Server 2008 R2 or Windows 7'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '90d7eb32-a406-4cf0-9cb5-f76b5808df35'
                            presentationDefinitionLabel = 'Minimum available disk space:'
                            DecimalValue = 1000
                            Id = '87d0c06f-db34-4074-ad58-bffd4748ced7'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueDecimal'
                        }
                    )
                    Id = '6893d4a7-7757-4a90-a030-5e67a58581a7'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'a62f11f9-ccdf-4adb-95f2-71ab7415a976'
                        DisplayName = 'Warn users who are low on disk space'
                        CategoryPath = '\OneDrive'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'At least Windows Server 2008 R2 or Windows 7'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '13b3f51c-9f48-4ab9-8724-abcc948e2ba7'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '8cbfae18-90d8-467f-8b46-8180010bbece'
                        DisplayName = 'Require users to confirm large delete operations'
                        CategoryPath = '\OneDrive'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'At least Windows Server 2008 R2 or Windows 7'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '9b39fd82-23c9-48f0-9fbd-9bcbee7380d7'
                            presentationDefinitionLabel = 'Tenant ID:'
                            StringValue = '36833b16-38af-4f26-952b-9993fa864af7'
                            Id = 'a5cba6e5-4261-4630-8b74-019e3945fcb1'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }

                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '948a1d59-8746-4859-82b1-46b16d6dd0d3'
                            presentationDefinitionLabel = 'Desktop'
                            BooleanValue = $True
                            Id = '2ec6eb6b-ee09-4c57-82d5-7b8658694cb5'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueBoolean'
                        }

                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '5f0ec54d-0abf-4559-8e5a-624e5a21e52d'
                            presentationDefinitionLabel = 'Show notification to users after folders have been redirected:'
                            StringValue = '1'
                            Id = '56998eac-c2c5-4f61-a253-50238c5d31c7'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }

                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = 'ec6c4518-1a67-4124-aa92-5e4a64d77aed'
                            presentationDefinitionLabel = 'Documents'
                            BooleanValue = $True
                            Id = '73df3000-ea53-4ea4-8a0c-f45870232133'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueBoolean'
                        }

                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '9345dfaf-8259-42cf-bf02-e56905ee50f1'
                            presentationDefinitionLabel = 'Pictures'
                            BooleanValue = $True
                            Id = '7ff0b5a1-e9a6-43ac-ad39-4a6e9138d940'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueBoolean'
                        }
                    )
                    Id = '34ed3458-eea2-4c01-bde7-7a936af16ba3'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '4875d227-e4c3-4bf3-a1e2-a7f41591fdb8'
                        DisplayName = 'Silently move Windows known folders to OneDrive'
                        CategoryPath = '\OneDrive'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'At least Windows Server 2008 R2 or Windows 7'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '284d591a-2ad2-4b06-92d1-8f896e2a90e9'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'c9c00765-d6c4-47f5-a793-c4f9f11d3291'
                        DisplayName = 'Enable sync health reporting for OneDrive'
                        CategoryPath = '\OneDrive'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'At least Windows Server 2016, Windows 10 Version 1709'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '03081a27-07d6-4982-b31d-0937259d64a0'
                            presentationDefinitionLabel = 'Update ring:'
                            StringValue = '5'
                            Id = 'c3432f30-c090-445a-b1ba-20103cef949e'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = 'f46cf4e2-7ae1-4ce4-9651-d4008fcd6f62'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '120400ba-f245-46c6-9f84-c91b1500d706'
                        DisplayName = 'Set the sync app update ring'
                        CategoryPath = '\OneDrive'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'At least Windows Server 2008 R2 or Windows 7'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '5dcb84f0-fb31-47e8-b11e-22e093400a29'
                            presentationDefinitionLabel = 'Tenant ID: '
                            KeyValuePairValues = @(
                                MSFT_IntuneGroupPolicyDefinitionValuePresentationValueKeyValuePair{
                                    Name = '36833b16-38af-4f26-952b-9993fa864af7'
                                }
                            )
                            Id = '6a01fc25-f70b-406c-8b21-1966e5f91780'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueList'
                        }
                    )
                    Id = '96be64f7-bd09-4e61-9118-c56e0be238e0'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '94752281-f54c-4370-aff8-eaaee4296b7f'
                        DisplayName = 'Allow syncing OneDrive accounts for only specific organizations'
                        CategoryPath = '\OneDrive'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'At least Windows Server 2008 R2 or Windows 7'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '27357ba3-679c-42a6-9245-edf354de7a07'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '61b07a01-7e60-4127-b086-f6b32458a5c5'
                        DisplayName = 'Use OneDrive Files On-Demand'
                        CategoryPath = '\OneDrive'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'At least Windows Server 2016, Windows 10 Version 1709'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
            );
            Description                      = "";
            DisplayName                      = "WIN | Admin Template | OneDrive Config";
            Ensure                           = "Present";
            Id                               = "c95e5081-9a2a-406c-a10f-73dc4b5c7ed5";
            PolicyConfigurationIngestionType = "builtIn";
            TenantId                         = $OrganizationName;
        }
        IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 "IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-TEST | Admin Template | Control Pannel Settings"
        {
            ApplicationId                    = $ConfigurationData.NonNodeData.ApplicationId;
            ApplicationSecret                = New-Object System.Management.Automation.PSCredential ('ApplicationSecret', (ConvertTo-SecureString $ConfigurationData.NonNodeData.ApplicationSecret -AsPlainText -Force));
            Assignments                      = @();
            DefinitionValues                 = @(
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '634e9279-e044-48d5-8ed8-a9b14dc10a77'
                            presentationDefinitionLabel = 'Restrict users to the following language:'
                            StringValue = 'en-US'
                            Id = '95d97ed3-0582-47e9-b178-b822c83f1739'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = '13b64afd-c505-4f1f-abe2-d85b1c6957c2'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'c2563085-8373-4c6a-b379-114cfb958d3a'
                        DisplayName = 'Restricts the UI language Windows uses for all logged users'
                        CategoryPath = '\Control Panel\Regional and Language Options'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Vista'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '06c988a9-4d2c-4f18-a059-fd5d47865607'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'b17cf23b-30e7-48c6-9608-418043515c82'
                        DisplayName = 'Prevent changing lock screen and logon image'
                        CategoryPath = '\Control Panel\Personalization'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2012, Windows 8 or Windows RT'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '2390950b-8ef9-4b36-87bf-8617a3386cf5'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '8000b4e7-20fb-439f-b6c8-71c5e447a698'
                        DisplayName = 'Prevent enabling lock screen camera'
                        CategoryPath = '\Control Panel\Personalization'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'ad73dae7-b5b7-483a-bad7-a50d90d00955'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'ee2d734f-044d-4689-b610-769ce47eaa80'
                        DisplayName = 'Prevent enabling lock screen slide show'
                        CategoryPath = '\Control Panel\Personalization'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'f83afc1c-b0ed-4f42-99b1-5d43591d94a1'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '9f9a827e-c7e6-47c5-9186-cf3bcec38491'
                        DisplayName = 'Prevent changing start menu background'
                        CategoryPath = '\Control Panel\Personalization'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2012, Windows 8 or Windows RT'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
            );
            Description                      = "";
            DisplayName                      = "TEST | Admin Template | Control Pannel Settings";
            Ensure                           = "Present";
            Id                               = "5416d97f-54d5-4f21-a82f-b2bf2d3efdc3";
            PolicyConfigurationIngestionType = "unknown";
            TenantId                         = $OrganizationName;
        }
        IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 "IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-WIN | Edge Configuration | IE Mode "
        {
            ApplicationId                    = $ConfigurationData.NonNodeData.ApplicationId;
            ApplicationSecret                = New-Object System.Management.Automation.PSCredential ('ApplicationSecret', (ConvertTo-SecureString $ConfigurationData.NonNodeData.ApplicationSecret -AsPlainText -Force));
            Assignments                      = @();
            DefinitionValues                 = @(
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = '00e4651b-8ac6-4bb8-bc23-e0fdf7ccd1c7'
                            presentationDefinitionLabel = 'Configure Internet Explorer integration'
                            StringValue = '1'
                            Id = '76287053-42fe-477a-8007-afb6d98cd5ae'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = 'b8920654-507b-4fae-b797-5284950e60a9'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = 'd5398382-7e0e-4507-b4cb-3838989a126d'
                        DisplayName = 'Configure Internet Explorer integration'
                        CategoryPath = '\Microsoft Edge'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Windows 7 or later'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    PresentationValues = @(
                        MSFT_IntuneGroupPolicyDefinitionValuePresentationValue{
                            presentationDefinitionId = 'b8f15bf7-d390-4ed6-bb19-88a0e8f32144'
                            presentationDefinitionLabel = 'Configure the Enterprise Mode Cloud Site List'
                            StringValue = '7e09858b-6eee-43d7-a5fb-203c98172511'
                            Id = 'ce0fb021-0bae-47ba-8791-3e5620ecbab6'
                            odataType = '#microsoft.graph.groupPolicyPresentationValueText'
                        }
                    )
                    Id = 'd3cef550-623d-47d2-9d9e-a353572e74a6'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '0a2e8856-42ec-4247-be30-9ac15c56b4fa'
                        DisplayName = 'Configure the Enterprise Mode Cloud Site List'
                        CategoryPath = '\Microsoft Edge'
                        PolicyType = 'admxIngested'
                        SupportedOn = 'Microsoft Edge version 93, Windows 7 or later'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
            );
            Description                      = " ";
            DisplayName                      = "WIN | Edge Configuration | IE Mode ";
            Ensure                           = "Present";
            Id                               = "c8d72f17-078a-4982-9804-275393493f72";
            PolicyConfigurationIngestionType = "builtIn";
            TenantId                         = $OrganizationName;
        }
        IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 "IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-WIN | Admin Template | Disable System Restore"
        {
            ApplicationId                    = $ConfigurationData.NonNodeData.ApplicationId;
            ApplicationSecret                = New-Object System.Management.Automation.PSCredential ('ApplicationSecret', (ConvertTo-SecureString $ConfigurationData.NonNodeData.ApplicationSecret -AsPlainText -Force));
            Assignments                      = @();
            DefinitionValues                 = @(
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = 'e97b6f82-2822-4dd2-b6ec-2e281c6ea44e'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '708c7858-28b1-4f87-b255-5eac42d48051'
                        DisplayName = 'Turn off Configuration'
                        CategoryPath = '\System\System Restore'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2008 R2 or Windows 7'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
                MSFT_IntuneGroupPolicyDefinitionValue{
                    ConfigurationType = 'policy'
                    Id = '31129c10-2adc-4f25-a5de-895827b4c0eb'
                    Definition = MSFT_IntuneGroupPolicyDefinitionValueDefinition{
                        Id = '0403ebf8-0d33-45ce-a581-63ee6416a76d'
                        DisplayName = 'Turn off System Restore'
                        CategoryPath = '\System\System Restore'
                        PolicyType = 'admxBacked'
                        SupportedOn = 'At least Windows Server 2008 R2 or Windows 7'
                        ClassType = 'machine'
                    }
                    Enabled = $True
                }
            );
            Description                      = "";
            DisplayName                      = "WIN | Admin Template | Disable System Restore";
            Ensure                           = "Present";
            Id                               = "bd40c6ae-8b65-4f21-a2ba-3cd93f80810c";
            PolicyConfigurationIngestionType = "builtIn";
            TenantId                         = $OrganizationName;
        }
    }
}

M365TenantConfig -ConfigurationData .\ConfigurationData.psd1

Resulting .mof file

/*
@TargetNode='localhost'
@GeneratedBy=ladm
@GenerationDate=06/09/2023 14:40:00
@GenerationHost=vm-server01
*/

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue1ref
{
PresentationDefinitionId = "b6c6af51-90aa-4a77-b096-093a7d1e3811";
 PresentationDefinitionLabel = "Action to take on startup";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "3ec701f9-dcbf-4088-839a-69ec48a7c049";
 StringValue = "5";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition1ref
{
CategoryPath = "\\Microsoft Edge\\Startup, home page and new tab page";
 Id = "a36e8608-52c2-4cc3-8488-32206719f62f";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Windows 7 or later";
 ClassType = "machine";
 DisplayName = "Action to take on startup";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue1ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue1ref
};
 Id = "3a64fed8-508a-4022-a2df-819e0b7308da";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition1ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition2ref
{
CategoryPath = "\\Microsoft Edge";
 Id = "a1ce0577-ea6d-4950-bcf3-3342256a7fb4";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Edge version 88, Windows 7 or later";
 ClassType = "user";
 DisplayName = "Show Microsoft Rewards experiences";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue2ref
{
ConfigurationType = "policy";
 Id = "fd3e4e73-bede-4103-97de-6e8724b39bc9";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition2ref;
 Enabled = False;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition3ref
{
CategoryPath = "\\Microsoft Edge";
 Id = "212afc7f-a0e9-4496-94bf-46075026f109";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Edge version 98, Windows 7 or later";
 ClassType = "user";
 DisplayName = "Microsoft Edge Insider Promotion Enabled";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue3ref
{
ConfigurationType = "policy";
 Id = "472b252c-0a33-4e79-b421-84085b59ad5c";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition3ref;
 Enabled = False;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue2ref
{
PresentationDefinitionId = "9dfb796a-ce07-4c9d-9f90-f78149189665";
 PresentationDefinitionLabel = "Default search provider URL for suggestions";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "8604ae8b-5a5e-4f97-be03-f14579745061";
 StringValue = "{google:baseURL}complete/search?output=chrome&q={searchTerms}";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition4ref
{
CategoryPath = "\\Microsoft Edge\\Default search provider";
 Id = "f8324242-18c0-40bf-ae08-52db57201372";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Windows 7 or later";
 ClassType = "machine";
 DisplayName = "Default search provider URL for suggestions";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue4ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue2ref
};
 Id = "655ef1de-d54b-4640-b36c-763e2f23a4e1";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition4ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition5ref
{
CategoryPath = "\\Microsoft Edge";
 Id = "a0727084-663b-443e-ae17-5c0392bce4a4";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Edge version 83, Windows 7 or later";
 ClassType = "user";
 DisplayName = "Allow users to configure Family safety and Kids Mode";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue5ref
{
ConfigurationType = "policy";
 Id = "ccf6c675-3f8b-4403-82db-3aef712e4ff3";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition5ref;
 Enabled = False;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition6ref
{
CategoryPath = "\\Microsoft Edge";
 Id = "3a2c1db4-2b9f-4b7c-8a20-8b1e0616f7da";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Edge version 86, Windows 7 or later";
 ClassType = "machine";
 DisplayName = "Force synchronization of browser data and do not show the sync consent prompt";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue6ref
{
ConfigurationType = "policy";
 Id = "a364c93a-75a9-45ae-b52b-4996dff7ac15";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition6ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition7ref
{
CategoryPath = "\\Microsoft Edge\\Startup, home page and new tab page";
 Id = "1b177a44-68f2-40c3-b706-8e581e422470";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Edge version 91, Windows 7 or later";
 ClassType = "machine";
 DisplayName = "Allow Microsoft News content on the new tab page";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue7ref
{
ConfigurationType = "policy";
 Id = "a1a0208a-a356-407a-9a63-88f89cc8988f";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition7ref;
 Enabled = False;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue3ref
{
PresentationDefinitionId = "aa36fa17-7a02-48c7-bd3a-c4278e671d57";
 PresentationDefinitionLabel = "Browser sign-in settings";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "aba39355-bc17-42e5-ab3e-0df7ae49d738";
 StringValue = "2";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition8ref
{
CategoryPath = "\\Microsoft Edge";
 Id = "b6224bac-9571-4ff9-b478-9337b898bab9";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Windows 7 or later";
 ClassType = "machine";
 DisplayName = "Browser sign-in settings";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue8ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue3ref
};
 Id = "5fa8f659-93da-44ba-bd6e-9b5107c6ba34";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition8ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue4ref
{
PresentationDefinitionId = "068b0640-d70e-40ae-8336-c9324376de1e";
 PresentationDefinitionLabel = "Default search provider name";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "ecbcd73c-d28a-40eb-b9e4-9855cab47f72";
 StringValue = "GoogleForFrostyOutdoors";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition9ref
{
CategoryPath = "\\Microsoft Edge\\Default search provider";
 Id = "5eb1769d-4cea-4bce-87b9-bb549f8288d3";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Windows 7 or later";
 ClassType = "machine";
 DisplayName = "Default search provider name";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue9ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue4ref
};
 Id = "5693d669-66f4-4bfe-a438-ff7a3e91193b";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition9ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition10ref
{
CategoryPath = "\\Microsoft Edge";
 Id = "2d7e81ba-27f0-4f29-b91e-c73cf9daf0a1";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Edge version 99, Windows 7 or later";
 ClassType = "user";
 DisplayName = "Allow users to access the games menu";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue10ref
{
ConfigurationType = "policy";
 Id = "e1e84c51-cd42-470c-b090-8c2d1cfd6a36";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition10ref;
 Enabled = False;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValueKeyValuePair as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValueKeyValuePair1ref
{
Name = "odfafepnkmbhccpbejgmiehpchacaeak";

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue5ref
{
PresentationDefinitionId = "17c9dbeb-1f3c-4d63-854b-c49790dddc53";
 odataType = "#microsoft.graph.groupPolicyPresentationValueList";
 KeyValuePairValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValueKeyValuePair1ref
};
 Id = "dd315eaa-89ba-4312-8003-1458a8bcc2ba";
 PresentationDefinitionLabel = "Extension/App IDs and update URLs to be silently installed";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition11ref
{
CategoryPath = "\\Microsoft Edge\\Extensions";
 Id = "706bdf4e-6cef-48cc-a55b-cc07b9967611";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Windows 7 or later";
 ClassType = "user";
 DisplayName = "Control which extensions are installed silently";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue11ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue5ref
};
 Id = "85852432-b5d2-4720-b043-1fc9b9d1dba0";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition11ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition12ref
{
CategoryPath = "\\Microsoft Edge\\Default search provider";
 Id = "97b941fd-4e08-4672-9aa0-db0606256a06";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Windows 7 or later";
 ClassType = "machine";
 DisplayName = "Enable the default search provider";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue12ref
{
ConfigurationType = "policy";
 Id = "f62d8b3b-3333-469a-88e9-27bb793b7f54";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition12ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue6ref
{
PresentationDefinitionId = "6e02112b-cd96-448b-9c43-2a1b632ad039";
 PresentationDefinitionLabel = "Default search provider search URL";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "d143dcf4-e556-4469-8976-ee4c84ae56f3";
 StringValue = "{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition13ref
{
CategoryPath = "\\Microsoft Edge\\Default search provider";
 Id = "8d9348dc-84f7-4e3d-8fd5-e18ce444708c";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Windows 7 or later";
 ClassType = "machine";
 DisplayName = "Default search provider search URL";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue13ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue6ref
};
 Id = "97838afd-1bf3-438a-80a6-9c03b22974a2";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition13ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition14ref
{
CategoryPath = "\\Microsoft Edge";
 Id = "39ef784a-fe52-4e8c-ad87-e51fcc881461";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Edge version 78, Windows 7 or later";
 ClassType = "machine";
 DisplayName = "Configure whether a user always has a default profile automatically signed in with their work or school account";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue14ref
{
ConfigurationType = "policy";
 Id = "2d14b507-3d77-4a92-9f5b-168a00302bd5";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition14ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue7ref
{
PresentationDefinitionId = "72d538d5-bacc-43b8-be1f-d9e3aaa1d904";
 PresentationDefinitionLabel = "Ads setting for sites with intrusive ads";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "96930330-381e-4ac6-b07a-39297872c0f7";
 StringValue = "2";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition15ref
{
CategoryPath = "\\Microsoft Edge";
 Id = "3e91c0d9-722f-4deb-8403-ee65f59f1910";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Edge version 78, Windows 7 or later";
 ClassType = "user";
 DisplayName = "Ads setting for sites with intrusive ads";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue15ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue7ref
};
 Id = "bec2c8e2-739a-4b51-a186-76b6f3d0d70d";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition15ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition16ref
{
CategoryPath = "\\Microsoft Edge - Default Settings (users can override)";
 Id = "fab50500-383f-4a98-882f-f1568f5c69bb";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Edge version 99, Windows 7 or later";
 ClassType = "user";
 DisplayName = "Show Hubs Sidebar";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue16ref
{
ConfigurationType = "policy";
 Id = "cc6f20dc-4439-49ee-a297-e15cf4f94af3";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition16ref;
 Enabled = False;

};

instance of MSFT_Credential as $MSFT_Credential1ref
{
Password = "";
 UserName = "ApplicationSecret";

};

instance of MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 as $MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows101ref
{
PolicyConfigurationIngestionType = "builtIn";
 Id = "0652321d-368e-489a-8ef4-9d802843d810";
 TenantId = "cclm365service.onmicrosoft.com";
 DisplayName = "WIN | Edge Customisation | Users";
 ResourceID = "[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-WIN | Edge Customisation | Users";
 ApplicationSecret = $MSFT_Credential1ref;
 Assignments = {
};
 Description = "";
 Ensure = "Present";
 SourceInfo = "C:\\M365DSC\\AdminTemplateOnly\\M365TenantConfig.ps1::20::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10";
 ApplicationId = "5d1a91b7-d027-4d48-bd68-2ddc0f1fbc3d";
 ModuleVersion = "1.23.607.1";
 ModuleName = "Microsoft365DSC";
 DefinitionValues = {
    $MSFT_IntuneGroupPolicyDefinitionValue1ref,
    $MSFT_IntuneGroupPolicyDefinitionValue2ref,
    $MSFT_IntuneGroupPolicyDefinitionValue3ref,
    $MSFT_IntuneGroupPolicyDefinitionValue4ref,
    $MSFT_IntuneGroupPolicyDefinitionValue5ref,
    $MSFT_IntuneGroupPolicyDefinitionValue6ref,
    $MSFT_IntuneGroupPolicyDefinitionValue7ref,
    $MSFT_IntuneGroupPolicyDefinitionValue8ref,
    $MSFT_IntuneGroupPolicyDefinitionValue9ref,
    $MSFT_IntuneGroupPolicyDefinitionValue10ref,
    $MSFT_IntuneGroupPolicyDefinitionValue11ref,
    $MSFT_IntuneGroupPolicyDefinitionValue12ref,
    $MSFT_IntuneGroupPolicyDefinitionValue13ref,
    $MSFT_IntuneGroupPolicyDefinitionValue14ref,
    $MSFT_IntuneGroupPolicyDefinitionValue15ref,
    $MSFT_IntuneGroupPolicyDefinitionValue16ref
};

 ConfigurationName = "M365TenantConfig";

};
instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue8ref
{
PresentationDefinitionId = "f64d5399-b62c-41c2-9a1c-05f8826bb225";
 odataType = "#microsoft.graph.groupPolicyPresentationValueDecimal";
 DecimalValue = 65536;
 Id = "42e54c3e-9ac9-434c-90db-68c39e42774b";
 PresentationDefinitionLabel = "Maximum Log Size (KB)";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition17ref
{
CategoryPath = "\\Windows Components\\Event Log Service\\Application";
 Id = "9c9f7914-04b2-4fd0-9d45-0ce4005fd681";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Specify the maximum log file size (KB)";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue17ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue8ref
};
 Id = "084c630f-b571-45d8-82f8-af9c31731eed";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition17ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition18ref
{
CategoryPath = "\\Windows Components\\Windows Remote Management (WinRM)\\WinRM Service";
 Id = "c261d127-5d9c-4f7c-bdca-10a81da639e8";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Allow Basic authentication";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue18ref
{
ConfigurationType = "policy";
 Id = "64eeb42c-8f75-4e44-883c-cadc3e35599f";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition18ref;
 Enabled = False;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition19ref
{
CategoryPath = "\\System\\Credentials Delegation";
 Id = "e5b61f1a-5bef-47ab-b85a-178ad8747d50";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2016, Windows 10 Version 1703";
 ClassType = "machine";
 DisplayName = "Remote host allows delegation of non-exportable credentials";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue19ref
{
ConfigurationType = "policy";
 Id = "cf1c82cf-328e-43b5-8eaa-276049127deb";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition19ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition20ref
{
CategoryPath = "\\Windows Components\\Windows Remote Management (WinRM)\\WinRM Client";
 Id = "0ed0607f-2dc8-4d1b-8472-1da2f8c9f9db";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Allow Basic authentication";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue20ref
{
ConfigurationType = "policy";
 Id = "55844204-3fbc-452c-810f-e26fb9350a0c";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition20ref;
 Enabled = False;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition21ref
{
CategoryPath = "\\System\\Power Management\\Sleep Settings";
 Id = "09359968-e4da-4393-9ff4-25c5b1148bdb";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Require a password when a computer wakes (on battery)";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue21ref
{
ConfigurationType = "policy";
 Id = "9464412e-8297-46f1-a740-2f43d52acdf4";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition21ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition22ref
{
CategoryPath = "\\Network\\Network Connections";
 Id = "a3bd23b5-dfd8-4dee-95b3-29f149a175a6";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2003 operating systems or Windows XP Professional";
 ClassType = "machine";
 DisplayName = "Prohibit installation and configuration of Network Bridge on your DNS domain network";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue22ref
{
ConfigurationType = "policy";
 Id = "a0883b77-c210-4da8-8e8c-2d3937ace906";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition22ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue9ref
{
PresentationDefinitionId = "259c61b7-1684-4374-8065-4f55336bb975";
 PresentationDefinitionLabel = "Turn off Autoplay on:";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "60c2bdd0-f5e4-4858-8164-23f48431a846";
 StringValue = "255";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition23ref
{
CategoryPath = "\\Windows Components\\AutoPlay Policies";
 Id = "7e0840a0-a002-45fd-b597-2a1db22ceccb";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows 2000";
 ClassType = "machine";
 DisplayName = "Turn off Autoplay";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue23ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue9ref
};
 Id = "64988ef7-daf6-4cc7-a0fd-5173be540f80";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition23ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition24ref
{
CategoryPath = "\\Windows Components\\AutoPlay Policies";
 Id = "91d2acb3-bed9-4460-8dbf-2ae8587dcddc";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2008 R2 or Windows 7";
 ClassType = "machine";
 DisplayName = "Disallow Autoplay for non-volume devices";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue24ref
{
ConfigurationType = "policy";
 Id = "3e9a9f1b-7d8f-44ff-87ba-d3f320c38d04";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition24ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition25ref
{
CategoryPath = "\\Windows Components\\Internet Explorer\\Security Features\\Add-on Management";
 Id = "cfac692b-fc00-490c-91ca-38d4372ddcbb";
 PolicyType = "admxBacked";
 SupportedOn = "At least Internet Explorer 8.0";
 ClassType = "machine";
 DisplayName = "Turn off blocking of outdated ActiveX controls for Internet Explorer";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue25ref
{
ConfigurationType = "policy";
 Id = "5f80774a-f2bb-44b4-a6f1-fbb8e3fc46a4";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition25ref;
 Enabled = False;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition26ref
{
CategoryPath = "\\Network\\Network Connections";
 Id = "02336087-30fd-4263-8b7c-45b4187e4bbc";
 PolicyType = "admxBacked";
 SupportedOn = "Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only";
 ClassType = "machine";
 DisplayName = "Prohibit use of Internet Connection Sharing on your DNS domain network";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue26ref
{
ConfigurationType = "policy";
 Id = "d4cd8995-5271-40ab-890a-bceb72274e1f";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition26ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue10ref
{
PresentationDefinitionId = "ce3b368f-a96e-4545-b028-6c3a4231f500";
 odataType = "#microsoft.graph.groupPolicyPresentationValueBoolean";
 BooleanValue = False;
 Id = "6dd05ddd-8874-4435-8efb-8bbe8a8fa4c3";
 PresentationDefinitionLabel = "Log script block invocation start / stop events:";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition27ref
{
CategoryPath = "\\Windows Components\\Windows PowerShell";
 Id = "834fba45-0fc5-4e70-b710-483b1cbd40cb";
 PolicyType = "admxBacked";
 SupportedOn = "At least Microsoft Windows 7 or Windows Server 2008 family";
 ClassType = "machine";
 DisplayName = "Turn on PowerShell Script Block Logging";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue27ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue10ref
};
 Id = "b8f1136e-d16f-4c7e-bdf6-90f4cff140dd";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition27ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition28ref
{
CategoryPath = "\\MS Security Guide";
 Id = "097e6dc9-ed13-4e75-90a3-4d43d15613dc";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Apply UAC restrictions to local accounts on network logons";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue28ref
{
ConfigurationType = "policy";
 Id = "44d5055f-b364-405e-809b-ebf6007e8df3";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition28ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition29ref
{
CategoryPath = "\\System\\Power Management\\Sleep Settings";
 Id = "9fcbf93e-504c-471d-a3b8-4ebb7e89d9dd";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Require a password when a computer wakes (plugged in)";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue29ref
{
ConfigurationType = "policy";
 Id = "30061552-413e-4708-b863-683bd4712660";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition29ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition30ref
{
CategoryPath = "\\System\\Remote Assistance";
 Id = "7baccae7-8b48-40cf-b808-67e2def86ff1";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Turn on session logging";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue30ref
{
ConfigurationType = "policy";
 Id = "84cfd191-8130-4b29-a4c5-8a545368a7b5";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition30ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue11ref
{
PresentationDefinitionId = "d08c0bd8-b753-4a5b-8447-68d1070e8d5d";
 PresentationDefinitionLabel = "RPC Runtime Unauthenticated Client Restriction to Apply:";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "b8710a8f-01ec-441d-8a0d-b54b2e3a78c6";
 StringValue = "1";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition31ref
{
CategoryPath = "\\System\\Remote Procedure Call";
 Id = "1b7b2747-63bb-42d0-b79f-82012226a925";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows XP Professional with SP2";
 ClassType = "machine";
 DisplayName = "Restrict Unauthenticated RPC clients";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue31ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue11ref
};
 Id = "d3581a01-a002-4b7a-b21e-05ec37e924cf";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition31ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue12ref
{
PresentationDefinitionId = "c8c0ee63-bb3a-4fa3-b34d-ab4212ae07ed";
 odataType = "#microsoft.graph.groupPolicyPresentationValueDecimal";
 DecimalValue = 2097152;
 Id = "9bbc6fbe-c452-429f-9024-e3ccb3043ec0";
 PresentationDefinitionLabel = "Maximum Log Size (KB)";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition32ref
{
CategoryPath = "\\Windows Components\\Event Log Service\\Security";
 Id = "2aab8c95-553b-4534-94ef-a0b5f6fe8156";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Specify the maximum log file size (KB)";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue32ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue12ref
};
 Id = "3a6ec0c0-da2a-4813-8a07-2b50be9f8dc7";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition32ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition33ref
{
CategoryPath = "\\Windows Components\\Credential User Interface";
 Id = "aaa21b87-e380-425d-a9c2-c0b02f1d45f0";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Enumerate administrator accounts on elevation";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue33ref
{
ConfigurationType = "policy";
 Id = "176bb9ff-b268-4f22-8c51-166caaa8cdff";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition33ref;
 Enabled = False;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition34ref
{
CategoryPath = "\\Windows Components\\File Explorer";
 Id = "25bd11fa-5bff-48f1-8be0-c6e8a1d72c02";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Turn off heap termination on corruption";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue34ref
{
ConfigurationType = "policy";
 Id = "e2a7dc5f-1706-45e5-8414-5cc840f4ae58";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition34ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition35ref
{
CategoryPath = "\\System\\Remote Assistance";
 Id = "a6e1839c-6fb7-4cd6-9017-cf68accef2f8";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2003 operating systems or Windows XP Professional";
 ClassType = "machine";
 DisplayName = "Configure Solicited Remote Assistance";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue35ref
{
ConfigurationType = "policy";
 Id = "d56e68d8-6a97-4225-b9b1-3489023e3303";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition35ref;
 Enabled = False;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue13ref
{
PresentationDefinitionId = "5c8d10ad-8a28-4fe2-bd16-170d88dceb82";
 odataType = "#microsoft.graph.groupPolicyPresentationValueDecimal";
 DecimalValue = 65536;
 Id = "b9165400-d32a-4a3d-9456-b5779946a31a";
 PresentationDefinitionLabel = "Maximum Log Size (KB)";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition36ref
{
CategoryPath = "\\Windows Components\\Event Log Service\\System";
 Id = "98d69f26-2201-4aed-8927-d20c29b24ed5";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Specify the maximum log file size (KB)";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue36ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue13ref
};
 Id = "42af05a5-a03b-47c6-9f39-4c107f8e4eeb";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition36ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition37ref
{
CategoryPath = "\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Security";
 Id = "593aefc2-8d43-44c3-90e4-d3e26ea3395b";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2003";
 ClassType = "machine";
 DisplayName = "Require secure RPC communication";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue37ref
{
ConfigurationType = "policy";
 Id = "6fb01b31-35c6-4b2a-a6dc-f7f9056e9bf3";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition37ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition38ref
{
CategoryPath = "\\Windows Components\\File Explorer";
 Id = "c0f3c9c3-4916-49cc-9f5a-dc0dbc1f55a4";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2008 R2 or Windows 7";
 ClassType = "machine";
 DisplayName = "Turn off Data Execution Prevention for Explorer";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue38ref
{
ConfigurationType = "policy";
 Id = "07e2ed7f-33b8-44b6-8c23-7d4d260c2e3b";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition38ref;
 Enabled = False;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition39ref
{
CategoryPath = "\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Security";
 Id = "1568d956-c5a1-47b5-a3bf-e442f877ffbb";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Require user authentication for remote connections by using Network Level Authentication";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue39ref
{
ConfigurationType = "policy";
 Id = "dea7d174-1d0f-499a-b65e-3270b671eceb";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition39ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue14ref
{
PresentationDefinitionId = "cc951c06-9e96-4fbf-9752-3a16dc1a1896";
 PresentationDefinitionLabel = "Default AutoRun Behavior";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "a791f718-23d7-4788-88c7-5e01ea61d359";
 StringValue = "1";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition40ref
{
CategoryPath = "\\Windows Components\\AutoPlay Policies";
 Id = "9eeafbe1-1a87-4d06-b7c9-ff299ae302e4";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Set the default behavior for AutoRun";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue40ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue14ref
};
 Id = "2009f542-4301-4f55-bf25-3fda9eb7b730";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition40ref;
 Enabled = True;

};

instance of MSFT_Credential as $MSFT_Credential2ref
{
Password = "";
 UserName = "ApplicationSecret";

};

instance of MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 as $MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows102ref
{
PolicyConfigurationIngestionType = "builtIn";
 Id = "28041f30-cd26-4785-baf8-0cb2ee489a0a";
 TenantId = "cclm365service.onmicrosoft.com";
 DisplayName = "WIN | Admin Template | Device Security";
 ResourceID = "[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-WIN | Admin Template | Device Security";
 ApplicationSecret = $MSFT_Credential2ref;
 Assignments = {
};
 Description = "";
 Ensure = "Present";
 SourceInfo = "C:\\M365DSC\\AdminTemplateOnly\\M365TenantConfig.ps1::309::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10";
 ApplicationId = "5d1a91b7-d027-4d48-bd68-2ddc0f1fbc3d";
 ModuleVersion = "1.23.607.1";
 ModuleName = "Microsoft365DSC";
 DefinitionValues = {
    $MSFT_IntuneGroupPolicyDefinitionValue17ref,
    $MSFT_IntuneGroupPolicyDefinitionValue18ref,
    $MSFT_IntuneGroupPolicyDefinitionValue19ref,
    $MSFT_IntuneGroupPolicyDefinitionValue20ref,
    $MSFT_IntuneGroupPolicyDefinitionValue21ref,
    $MSFT_IntuneGroupPolicyDefinitionValue22ref,
    $MSFT_IntuneGroupPolicyDefinitionValue23ref,
    $MSFT_IntuneGroupPolicyDefinitionValue24ref,
    $MSFT_IntuneGroupPolicyDefinitionValue25ref,
    $MSFT_IntuneGroupPolicyDefinitionValue26ref,
    $MSFT_IntuneGroupPolicyDefinitionValue27ref,
    $MSFT_IntuneGroupPolicyDefinitionValue28ref,
    $MSFT_IntuneGroupPolicyDefinitionValue29ref,
    $MSFT_IntuneGroupPolicyDefinitionValue30ref,
    $MSFT_IntuneGroupPolicyDefinitionValue31ref,
    $MSFT_IntuneGroupPolicyDefinitionValue32ref,
    $MSFT_IntuneGroupPolicyDefinitionValue33ref,
    $MSFT_IntuneGroupPolicyDefinitionValue34ref,
    $MSFT_IntuneGroupPolicyDefinitionValue35ref,
    $MSFT_IntuneGroupPolicyDefinitionValue36ref,
    $MSFT_IntuneGroupPolicyDefinitionValue37ref,
    $MSFT_IntuneGroupPolicyDefinitionValue38ref,
    $MSFT_IntuneGroupPolicyDefinitionValue39ref,
    $MSFT_IntuneGroupPolicyDefinitionValue40ref
};

 ConfigurationName = "M365TenantConfig";

};
instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition41ref
{
CategoryPath = "\\Microsoft Edge\\SmartScreen settings";
 Id = "270e643f-a1dd-49eb-8365-8292e9d6c7f7";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Edge version 80, Windows 7 or later";
 ClassType = "machine";
 DisplayName = "Configure Microsoft Defender SmartScreen to block potentially unwanted apps";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue41ref
{
ConfigurationType = "policy";
 Id = "8ff7eaca-5414-461b-be02-ef035d338628";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition41ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition42ref
{
CategoryPath = "\\Microsoft Edge\\SmartScreen settings";
 Id = "f9de5937-2ff5-4c34-a5ec-d0d997787b68";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Windows 7 or later";
 ClassType = "machine";
 DisplayName = "Configure Microsoft Defender SmartScreen";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue42ref
{
ConfigurationType = "policy";
 Id = "6c956448-109d-479a-a0d6-0690014d3a89";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition42ref;
 Enabled = True;

};

instance of MSFT_Credential as $MSFT_Credential3ref
{
Password = "";
 UserName = "ApplicationSecret";

};

instance of MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 as $MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows103ref
{
PolicyConfigurationIngestionType = "builtIn";
 Id = "7bd283d9-c644-460a-a802-e1f0b3ce77df";
 TenantId = "cclm365service.onmicrosoft.com";
 DisplayName = "WIN | Edge Protection | Workstations";
 ResourceID = "[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-WIN | Edge Protection | Workstations";
 ApplicationSecret = $MSFT_Credential3ref;
 Assignments = {
};
 Description = "";
 Ensure = "Present";
 SourceInfo = "C:\\M365DSC\\AdminTemplateOnly\\M365TenantConfig.ps1::698::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10";
 ApplicationId = "5d1a91b7-d027-4d48-bd68-2ddc0f1fbc3d";
 ModuleVersion = "1.23.607.1";
 ModuleName = "Microsoft365DSC";
 DefinitionValues = {
    $MSFT_IntuneGroupPolicyDefinitionValue41ref,
    $MSFT_IntuneGroupPolicyDefinitionValue42ref
};

 ConfigurationName = "M365TenantConfig";

};
instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition43ref
{
CategoryPath = "\\OneDrive";
 Id = "81c07ba0-7512-402d-b1f6-00856975cfab";
 PolicyType = "admxIngested";
 SupportedOn = "At least Windows Server 2008 R2 or Windows 7";
 ClassType = "machine";
 DisplayName = "Silently sign in users to the OneDrive sync app with their Windows credentials";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue43ref
{
ConfigurationType = "policy";
 Id = "77289eef-b774-4474-acaa-5d4316687fa6";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition43ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition44ref
{
CategoryPath = "\\OneDrive";
 Id = "f8aa915a-96a0-44e2-a108-1e9e9e2a2f8f";
 PolicyType = "admxIngested";
 SupportedOn = "At least Windows Server 2008 R2 or Windows 7";
 ClassType = "machine";
 DisplayName = "Prevent users from syncing libraries and folders shared from other organizations";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue44ref
{
ConfigurationType = "policy";
 Id = "14af66fc-aa83-4445-a6a2-953f75c09e73";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition44ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue15ref
{
PresentationDefinitionId = "90d7eb32-a406-4cf0-9cb5-f76b5808df35";
 odataType = "#microsoft.graph.groupPolicyPresentationValueDecimal";
 DecimalValue = 1000;
 Id = "87d0c06f-db34-4074-ad58-bffd4748ced7";
 PresentationDefinitionLabel = "Minimum available disk space:";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition45ref
{
CategoryPath = "\\OneDrive";
 Id = "a62f11f9-ccdf-4adb-95f2-71ab7415a976";
 PolicyType = "admxIngested";
 SupportedOn = "At least Windows Server 2008 R2 or Windows 7";
 ClassType = "machine";
 DisplayName = "Warn users who are low on disk space";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue45ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue15ref
};
 Id = "6893d4a7-7757-4a90-a030-5e67a58581a7";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition45ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition46ref
{
CategoryPath = "\\OneDrive";
 Id = "8cbfae18-90d8-467f-8b46-8180010bbece";
 PolicyType = "admxIngested";
 SupportedOn = "At least Windows Server 2008 R2 or Windows 7";
 ClassType = "machine";
 DisplayName = "Require users to confirm large delete operations";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue46ref
{
ConfigurationType = "policy";
 Id = "13b3f51c-9f48-4ab9-8724-abcc948e2ba7";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition46ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue16ref
{
PresentationDefinitionId = "9b39fd82-23c9-48f0-9fbd-9bcbee7380d7";
 PresentationDefinitionLabel = "Tenant ID:";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "a5cba6e5-4261-4630-8b74-019e3945fcb1";
 StringValue = "36833b16-38af-4f26-952b-9993fa864af7";

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue17ref
{
PresentationDefinitionId = "948a1d59-8746-4859-82b1-46b16d6dd0d3";
 odataType = "#microsoft.graph.groupPolicyPresentationValueBoolean";
 BooleanValue = True;
 Id = "2ec6eb6b-ee09-4c57-82d5-7b8658694cb5";
 PresentationDefinitionLabel = "Desktop";

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue18ref
{
PresentationDefinitionId = "5f0ec54d-0abf-4559-8e5a-624e5a21e52d";
 PresentationDefinitionLabel = "Show notification to users after folders have been redirected:";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "56998eac-c2c5-4f61-a253-50238c5d31c7";
 StringValue = "1";

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue19ref
{
PresentationDefinitionId = "ec6c4518-1a67-4124-aa92-5e4a64d77aed";
 odataType = "#microsoft.graph.groupPolicyPresentationValueBoolean";
 BooleanValue = True;
 Id = "73df3000-ea53-4ea4-8a0c-f45870232133";
 PresentationDefinitionLabel = "Documents";

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue20ref
{
PresentationDefinitionId = "9345dfaf-8259-42cf-bf02-e56905ee50f1";
 odataType = "#microsoft.graph.groupPolicyPresentationValueBoolean";
 BooleanValue = True;
 Id = "7ff0b5a1-e9a6-43ac-ad39-4a6e9138d940";
 PresentationDefinitionLabel = "Pictures";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition47ref
{
CategoryPath = "\\OneDrive";
 Id = "4875d227-e4c3-4bf3-a1e2-a7f41591fdb8";
 PolicyType = "admxIngested";
 SupportedOn = "At least Windows Server 2008 R2 or Windows 7";
 ClassType = "machine";
 DisplayName = "Silently move Windows known folders to OneDrive";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue47ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue16ref,
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue17ref,
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue18ref,
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue19ref,
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue20ref
};
 Id = "34ed3458-eea2-4c01-bde7-7a936af16ba3";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition47ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition48ref
{
CategoryPath = "\\OneDrive";
 Id = "c9c00765-d6c4-47f5-a793-c4f9f11d3291";
 PolicyType = "admxIngested";
 SupportedOn = "At least Windows Server 2016, Windows 10 Version 1709";
 ClassType = "machine";
 DisplayName = "Enable sync health reporting for OneDrive";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue48ref
{
ConfigurationType = "policy";
 Id = "284d591a-2ad2-4b06-92d1-8f896e2a90e9";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition48ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue21ref
{
PresentationDefinitionId = "03081a27-07d6-4982-b31d-0937259d64a0";
 PresentationDefinitionLabel = "Update ring:";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "c3432f30-c090-445a-b1ba-20103cef949e";
 StringValue = "5";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition49ref
{
CategoryPath = "\\OneDrive";
 Id = "120400ba-f245-46c6-9f84-c91b1500d706";
 PolicyType = "admxIngested";
 SupportedOn = "At least Windows Server 2008 R2 or Windows 7";
 ClassType = "machine";
 DisplayName = "Set the sync app update ring";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue49ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue21ref
};
 Id = "f46cf4e2-7ae1-4ce4-9651-d4008fcd6f62";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition49ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValueKeyValuePair as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValueKeyValuePair2ref
{
Name = "36833b16-38af-4f26-952b-9993fa864af7";

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue22ref
{
PresentationDefinitionId = "5dcb84f0-fb31-47e8-b11e-22e093400a29";
 odataType = "#microsoft.graph.groupPolicyPresentationValueList";
 KeyValuePairValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValueKeyValuePair2ref
};
 Id = "6a01fc25-f70b-406c-8b21-1966e5f91780";
 PresentationDefinitionLabel = "Tenant ID: ";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition50ref
{
CategoryPath = "\\OneDrive";
 Id = "94752281-f54c-4370-aff8-eaaee4296b7f";
 PolicyType = "admxIngested";
 SupportedOn = "At least Windows Server 2008 R2 or Windows 7";
 ClassType = "machine";
 DisplayName = "Allow syncing OneDrive accounts for only specific organizations";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue50ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue22ref
};
 Id = "96be64f7-bd09-4e61-9118-c56e0be238e0";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition50ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition51ref
{
CategoryPath = "\\OneDrive";
 Id = "61b07a01-7e60-4127-b086-f6b32458a5c5";
 PolicyType = "admxIngested";
 SupportedOn = "At least Windows Server 2016, Windows 10 Version 1709";
 ClassType = "machine";
 DisplayName = "Use OneDrive Files On-Demand";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue51ref
{
ConfigurationType = "policy";
 Id = "27357ba3-679c-42a6-9245-edf354de7a07";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition51ref;
 Enabled = True;

};

instance of MSFT_Credential as $MSFT_Credential4ref
{
Password = "";
 UserName = "ApplicationSecret";

};

instance of MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 as $MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows104ref
{
PolicyConfigurationIngestionType = "builtIn";
 Id = "c95e5081-9a2a-406c-a10f-73dc4b5c7ed5";
 TenantId = "cclm365service.onmicrosoft.com";
 DisplayName = "WIN | Admin Template | OneDrive Config";
 ResourceID = "[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-WIN | Admin Template | OneDrive Config";
 ApplicationSecret = $MSFT_Credential4ref;
 Assignments = {
};
 Description = "";
 Ensure = "Present";
 SourceInfo = "C:\\M365DSC\\AdminTemplateOnly\\M365TenantConfig.ps1::738::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10";
 ApplicationId = "5d1a91b7-d027-4d48-bd68-2ddc0f1fbc3d";
 ModuleVersion = "1.23.607.1";
 ModuleName = "Microsoft365DSC";
 DefinitionValues = {
    $MSFT_IntuneGroupPolicyDefinitionValue43ref,
    $MSFT_IntuneGroupPolicyDefinitionValue44ref,
    $MSFT_IntuneGroupPolicyDefinitionValue45ref,
    $MSFT_IntuneGroupPolicyDefinitionValue46ref,
    $MSFT_IntuneGroupPolicyDefinitionValue47ref,
    $MSFT_IntuneGroupPolicyDefinitionValue48ref,
    $MSFT_IntuneGroupPolicyDefinitionValue49ref,
    $MSFT_IntuneGroupPolicyDefinitionValue50ref,
    $MSFT_IntuneGroupPolicyDefinitionValue51ref
};

 ConfigurationName = "M365TenantConfig";

};
instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue23ref
{
PresentationDefinitionId = "634e9279-e044-48d5-8ed8-a9b14dc10a77";
 PresentationDefinitionLabel = "Restrict users to the following language:";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "95d97ed3-0582-47e9-b178-b822c83f1739";
 StringValue = "en-US";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition52ref
{
CategoryPath = "\\Control Panel\\Regional and Language Options";
 Id = "c2563085-8373-4c6a-b379-114cfb958d3a";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Vista";
 ClassType = "machine";
 DisplayName = "Restricts the UI language Windows uses for all logged users";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue52ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue23ref
};
 Id = "13b64afd-c505-4f1f-abe2-d85b1c6957c2";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition52ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition53ref
{
CategoryPath = "\\Control Panel\\Personalization";
 Id = "b17cf23b-30e7-48c6-9608-418043515c82";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2012, Windows 8 or Windows RT";
 ClassType = "machine";
 DisplayName = "Prevent changing lock screen and logon image";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue53ref
{
ConfigurationType = "policy";
 Id = "06c988a9-4d2c-4f18-a059-fd5d47865607";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition53ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition54ref
{
CategoryPath = "\\Control Panel\\Personalization";
 Id = "8000b4e7-20fb-439f-b6c8-71c5e447a698";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1";
 ClassType = "machine";
 DisplayName = "Prevent enabling lock screen camera";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue54ref
{
ConfigurationType = "policy";
 Id = "2390950b-8ef9-4b36-87bf-8617a3386cf5";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition54ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition55ref
{
CategoryPath = "\\Control Panel\\Personalization";
 Id = "ee2d734f-044d-4689-b610-769ce47eaa80";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1";
 ClassType = "machine";
 DisplayName = "Prevent enabling lock screen slide show";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue55ref
{
ConfigurationType = "policy";
 Id = "ad73dae7-b5b7-483a-bad7-a50d90d00955";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition55ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition56ref
{
CategoryPath = "\\Control Panel\\Personalization";
 Id = "9f9a827e-c7e6-47c5-9186-cf3bcec38491";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2012, Windows 8 or Windows RT";
 ClassType = "machine";
 DisplayName = "Prevent changing start menu background";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue56ref
{
ConfigurationType = "policy";
 Id = "f83afc1c-b0ed-4f42-99b1-5d43591d94a1";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition56ref;
 Enabled = True;

};

instance of MSFT_Credential as $MSFT_Credential5ref
{
Password = "";
 UserName = "ApplicationSecret";

};

instance of MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 as $MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows105ref
{
PolicyConfigurationIngestionType = "unknown";
 Id = "5416d97f-54d5-4f21-a82f-b2bf2d3efdc3";
 TenantId = "cclm365service.onmicrosoft.com";
 DisplayName = "TEST | Admin Template | Control Pannel Settings";
 ResourceID = "[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-TEST | Admin Template | Control Pannel Settings";
 ApplicationSecret = $MSFT_Credential5ref;
 Assignments = {
};
 Description = "";
 Ensure = "Present";
 SourceInfo = "C:\\M365DSC\\AdminTemplateOnly\\M365TenantConfig.ps1::941::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10";
 ApplicationId = "5d1a91b7-d027-4d48-bd68-2ddc0f1fbc3d";
 ModuleVersion = "1.23.607.1";
 ModuleName = "Microsoft365DSC";
 DefinitionValues = {
    $MSFT_IntuneGroupPolicyDefinitionValue52ref,
    $MSFT_IntuneGroupPolicyDefinitionValue53ref,
    $MSFT_IntuneGroupPolicyDefinitionValue54ref,
    $MSFT_IntuneGroupPolicyDefinitionValue55ref,
    $MSFT_IntuneGroupPolicyDefinitionValue56ref
};

 ConfigurationName = "M365TenantConfig";

};
instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue24ref
{
PresentationDefinitionId = "00e4651b-8ac6-4bb8-bc23-e0fdf7ccd1c7";
 PresentationDefinitionLabel = "Configure Internet Explorer integration";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "76287053-42fe-477a-8007-afb6d98cd5ae";
 StringValue = "1";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition57ref
{
CategoryPath = "\\Microsoft Edge";
 Id = "d5398382-7e0e-4507-b4cb-3838989a126d";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Windows 7 or later";
 ClassType = "machine";
 DisplayName = "Configure Internet Explorer integration";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue57ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue24ref
};
 Id = "b8920654-507b-4fae-b797-5284950e60a9";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition57ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValuePresentationValue as $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue25ref
{
PresentationDefinitionId = "b8f15bf7-d390-4ed6-bb19-88a0e8f32144";
 PresentationDefinitionLabel = "Configure the Enterprise Mode Cloud Site List";
 odataType = "#microsoft.graph.groupPolicyPresentationValueText";
 Id = "ce0fb021-0bae-47ba-8791-3e5620ecbab6";
 StringValue = "7e09858b-6eee-43d7-a5fb-203c98172511";

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition58ref
{
CategoryPath = "\\Microsoft Edge";
 Id = "0a2e8856-42ec-4247-be30-9ac15c56b4fa";
 PolicyType = "admxIngested";
 SupportedOn = "Microsoft Edge version 93, Windows 7 or later";
 ClassType = "machine";
 DisplayName = "Configure the Enterprise Mode Cloud Site List";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue58ref
{
ConfigurationType = "policy";
 PresentationValues = {
    $MSFT_IntuneGroupPolicyDefinitionValuePresentationValue25ref
};
 Id = "d3cef550-623d-47d2-9d9e-a353572e74a6";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition58ref;
 Enabled = True;

};

instance of MSFT_Credential as $MSFT_Credential6ref
{
Password = "";
 UserName = "ApplicationSecret";

};

instance of MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 as $MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows106ref
{
PolicyConfigurationIngestionType = "builtIn";
 Id = "c8d72f17-078a-4982-9804-275393493f72";
 TenantId = "cclm365service.onmicrosoft.com";
 DisplayName = "WIN | Edge Configuration | IE Mode ";
 ResourceID = "[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-WIN | Edge Configuration | IE Mode ";
 ApplicationSecret = $MSFT_Credential6ref;
 Assignments = {
};
 Description = " ";
 Ensure = "Present";
 SourceInfo = "C:\\M365DSC\\AdminTemplateOnly\\M365TenantConfig.ps1::1029::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10";
 ApplicationId = "5d1a91b7-d027-4d48-bd68-2ddc0f1fbc3d";
 ModuleVersion = "1.23.607.1";
 ModuleName = "Microsoft365DSC";
 DefinitionValues = {
    $MSFT_IntuneGroupPolicyDefinitionValue57ref,
    $MSFT_IntuneGroupPolicyDefinitionValue58ref
};

 ConfigurationName = "M365TenantConfig";

};
instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition59ref
{
CategoryPath = "\\System\\System Restore";
 Id = "708c7858-28b1-4f87-b255-5eac42d48051";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2008 R2 or Windows 7";
 ClassType = "machine";
 DisplayName = "Turn off Configuration";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue59ref
{
ConfigurationType = "policy";
 Id = "e97b6f82-2822-4dd2-b6ec-2e281c6ea44e";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition59ref;
 Enabled = True;

};

instance of MSFT_IntuneGroupPolicyDefinitionValueDefinition as $MSFT_IntuneGroupPolicyDefinitionValueDefinition60ref
{
CategoryPath = "\\System\\System Restore";
 Id = "0403ebf8-0d33-45ce-a581-63ee6416a76d";
 PolicyType = "admxBacked";
 SupportedOn = "At least Windows Server 2008 R2 or Windows 7";
 ClassType = "machine";
 DisplayName = "Turn off System Restore";

};

instance of MSFT_IntuneGroupPolicyDefinitionValue as $MSFT_IntuneGroupPolicyDefinitionValue60ref
{
ConfigurationType = "policy";
 Id = "31129c10-2adc-4f25-a5de-895827b4c0eb";
 Definition = $MSFT_IntuneGroupPolicyDefinitionValueDefinition60ref;
 Enabled = True;

};

instance of MSFT_Credential as $MSFT_Credential7ref
{
Password = "";
 UserName = "ApplicationSecret";

};

instance of MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10 as $MSFT_IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows107ref
{
PolicyConfigurationIngestionType = "builtIn";
 Id = "bd40c6ae-8b65-4f21-a2ba-3cd93f80810c";
 TenantId = "cclm365service.onmicrosoft.com";
 DisplayName = "WIN | Admin Template | Disable System Restore";
 ResourceID = "[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-WIN | Admin Template | Disable System Restore";
 ApplicationSecret = $MSFT_Credential7ref;
 Assignments = {
};
 Description = "";
 Ensure = "Present";
 SourceInfo = "C:\\M365DSC\\AdminTemplateOnly\\M365TenantConfig.ps1::1087::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10";
 ApplicationId = "5d1a91b7-d027-4d48-bd68-2ddc0f1fbc3d";
 ModuleVersion = "1.23.607.1";
 ModuleName = "Microsoft365DSC";
 DefinitionValues = {
    $MSFT_IntuneGroupPolicyDefinitionValue59ref,
    $MSFT_IntuneGroupPolicyDefinitionValue60ref
};

 ConfigurationName = "M365TenantConfig";

};
instance of OMI_ConfigurationDocument

                    {
 Version="2.0.0";

                        MinimumCompatibleVersion = "1.0.0";

                        CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"};

                        Author="ladm";

                        GenerationDate="06/09/2023 14:40:00";

                        GenerationHost="vm-server01";

                        Name="M365TenantConfig";

                    };

Output when deploying

VERBOSE: Perform operation 'Invoke CimMethod' with following parameters, ''methodName' =
SendConfigurationApply,'className' = MSFT_DSCLocalConfigurationManager,'namespaceName' =
root/Microsoft/Windows/DesiredStateConfiguration'.
VERBOSE: An LCM method call arrived from computer vm-server01 with user sid
S-1-5-21-2024411150-3919128996-1352317073-500.
VERBOSE: [vm-server01]: LCM:  [ Start  Set      ]
VERBOSE: [vm-server01]: LCM:  [ Start  Resource ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users]
VERBOSE: [vm-server01]: LCM:  [ Start  Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users] Testing configuration of the Intune Device Configuration Administrative
Template Policy for Windows10 with Id {0652321d-368e-489a-8ef4-9d802843d810} and DisplayName {WIN | Edge Customisation
| Users}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users] Could not find an Intune Device Configuration Administrative Template Policy
 for Windows10 with Id {0652321d-368e-489a-8ef4-9d802843d810}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users] An Intune Device Configuration Administrative Template Policy for Windows10
with Id {f2fee6fb-828a-4a3c-a0f4-6089492a1bc3} and DisplayName {WIN | Edge Customisation | Users} was found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users] Current Values: ApplicationId=***
ApplicationSecret=***
Assignments=()
CertificateThumbprint=***
Credential=$null
DefinitionValues=()
Description=
DisplayName=WIN | Edge Customisation | Users
Ensure=Present
Id=f2fee6fb-828a-4a3c-a0f4-6089492a1bc3
Managedidentity=False
PolicyConfigurationIngestionType=builtIn
TenantId=***
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users] Target Values: Assignments=()
DefinitionValues=({ConfigurationType=policy; Enabled=True; Id=3a64fed8-508a-4022-a2df-819e0b7308da;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=False;
Id=fd3e4e73-bede-4103-97de-6e8724b39bc9; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=False; Id=472b252c-0a33-4e79-b421-84085b59ad5c;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition; PresentationValues=},{ConfigurationType=policy;
Enabled=True; Id=655ef1de-d54b-4640-b36c-763e2f23a4e1; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=False;
Id=ccf6c675-3f8b-4403-82db-3aef712e4ff3; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=a364c93a-75a9-45ae-b52b-4996dff7ac15;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition; PresentationValues=},{ConfigurationType=policy;
Enabled=False; Id=a1a0208a-a356-407a-9a63-88f89cc8988f; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=5fa8f659-93da-44ba-bd6e-9b5107c6ba34;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=5693d669-66f4-4bfe-a438-ff7a3e91193b; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=False;
Id=e1e84c51-cd42-470c-b090-8c2d1cfd6a36; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=85852432-b5d2-4720-b043-1fc9b9d1dba0;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=f62d8b3b-3333-469a-88e9-27bb793b7f54; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=97838afd-1bf3-438a-80a6-9c03b22974a2;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=2d14b507-3d77-4a92-9f5b-168a00302bd5; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=bec2c8e2-739a-4b51-a186-76b6f3d0d70d;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=False;
Id=cc6f20dc-4439-49ee-a297-e15cf4f94af3; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=})
Description=
DisplayName=WIN | Edge Customisation | Users
Ensure=Present
PolicyConfigurationIngestionType=builtIn
Verbose=True
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users] Test-TargetResource returned False
VERBOSE: [vm-server01]: LCM:  [ End    Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users]  in 23.6090 seconds.
VERBOSE: [vm-server01]: LCM:  [ Start  Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users] Could not find an Intune Device Configuration Administrative Template Policy
 for Windows10 with Id {0652321d-368e-489a-8ef4-9d802843d810}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users] An Intune Device Configuration Administrative Template Policy for Windows10
with Id {f2fee6fb-828a-4a3c-a0f4-6089492a1bc3} and DisplayName {WIN | Edge Customisation | Users} was found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users] Updating the Intune Device Configuration Administrative Template Policy for
Windows10 with Id {f2fee6fb-828a-4a3c-a0f4-6089492a1bc3}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users] POST
https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/f2fee6fb-828a-4a3c-a0f4-6089492a1bc3/assign
 with 52-byte payload
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users] received 121-byte response of content type application/json
Cannot bind argument to parameter 'ReferenceObject' because it is null.
    + CategoryInfo          : InvalidData: (:) [], CimException
    + FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Microsoft.PowerShell.Commands.CompareObje
   ctCommand
    + PSComputerName        : localhost

VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users] POST
https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/f2fee6fb-828a-4a3c-a0f4-6089492a1bc3/update
DefinitionValues with 128-byte payload
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users] received 0-byte response of content type
VERBOSE: [vm-server01]: LCM:  [ End    Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Customisation | Users]  in 4.2660 seconds.
The PowerShell DSC resource '[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationA
dministrativeTemplatePolicyWindows10-WIN | Edge Customisation | Users' with SourceInfo 'C:\M365DSC\AdminTemplateOnly\M3
65TenantConfig.ps1::20::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10' threw one or more
non-terminating errors while running the Set-TargetResource functionality. These errors are logged to the ETW channel
called Microsoft-Windows-DSC/Operational. Refer to this channel for more details.
    + CategoryInfo          : InvalidOperation: (:) [], CimException
    + FullyQualifiedErrorId : NonTerminatingErrorFromProvider
    + PSComputerName        : localhost

VERBOSE: [vm-server01]: LCM:  [ Start  Resource ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security]
VERBOSE: [vm-server01]: LCM:  [ Start  Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security] Testing configuration of the Intune Device Configuration
Administrative Template Policy for Windows10 with Id {28041f30-cd26-4785-baf8-0cb2ee489a0a} and DisplayName {WIN |
Admin Template | Device Security}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security] Could not find an Intune Device Configuration Administrative Template
Policy for Windows10 with Id {28041f30-cd26-4785-baf8-0cb2ee489a0a}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security] An Intune Device Configuration Administrative Template Policy for
Windows10 with Id {bb3661f5-4a65-4a58-878f-95b080ca0d0f} and DisplayName {WIN | Admin Template | Device Security} was
found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security] Current Values: ApplicationId=***
ApplicationSecret=***
Assignments=()
CertificateThumbprint=***
Credential=$null
DefinitionValues=()
Description=
DisplayName=WIN | Admin Template | Device Security
Ensure=Present
Id=bb3661f5-4a65-4a58-878f-95b080ca0d0f
Managedidentity=False
PolicyConfigurationIngestionType=builtIn
TenantId=***
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security] Target Values: Assignments=()
DefinitionValues=({ConfigurationType=policy; Enabled=True; Id=084c630f-b571-45d8-82f8-af9c31731eed;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=False;
Id=64eeb42c-8f75-4e44-883c-cadc3e35599f; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=cf1c82cf-328e-43b5-8eaa-276049127deb;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition; PresentationValues=},{ConfigurationType=policy;
Enabled=False; Id=55844204-3fbc-452c-810f-e26fb9350a0c; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=9464412e-8297-46f1-a740-2f43d52acdf4;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition; PresentationValues=},{ConfigurationType=policy;
Enabled=True; Id=a0883b77-c210-4da8-8e8c-2d3937ace906; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=64988ef7-daf6-4cc7-a0fd-5173be540f80;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=3e9a9f1b-7d8f-44ff-87ba-d3f320c38d04; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=False; Id=5f80774a-f2bb-44b4-a6f1-fbb8e3fc46a4;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition; PresentationValues=},{ConfigurationType=policy;
Enabled=True; Id=d4cd8995-5271-40ab-890a-bceb72274e1f; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=b8f1136e-d16f-4c7e-bdf6-90f4cff140dd;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=44d5055f-b364-405e-809b-ebf6007e8df3; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=30061552-413e-4708-b863-683bd4712660;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition; PresentationValues=},{ConfigurationType=policy;
Enabled=True; Id=84cfd191-8130-4b29-a4c5-8a545368a7b5; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=d3581a01-a002-4b7a-b21e-05ec37e924cf;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=3a6ec0c0-da2a-4813-8a07-2b50be9f8dc7; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=False;
Id=176bb9ff-b268-4f22-8c51-166caaa8cdff; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=e2a7dc5f-1706-45e5-8414-5cc840f4ae58;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition; PresentationValues=},{ConfigurationType=policy;
Enabled=False; Id=d56e68d8-6a97-4225-b9b1-3489023e3303; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=42af05a5-a03b-47c6-9f39-4c107f8e4eeb;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=6fb01b31-35c6-4b2a-a6dc-f7f9056e9bf3; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=False; Id=07e2ed7f-33b8-44b6-8c23-7d4d260c2e3b;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition; PresentationValues=},{ConfigurationType=policy;
Enabled=True; Id=dea7d174-1d0f-499a-b65e-3270b671eceb; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=2009f542-4301-4f55-bf25-3fda9eb7b730;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue})
Description=
DisplayName=WIN | Admin Template | Device Security
Ensure=Present
PolicyConfigurationIngestionType=builtIn
Verbose=True
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security] Test-TargetResource returned False
VERBOSE: [vm-server01]: LCM:  [ End    Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security]  in 2.2340 seconds.
VERBOSE: [vm-server01]: LCM:  [ Start  Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security] Could not find an Intune Device Configuration Administrative Template
Policy for Windows10 with Id {28041f30-cd26-4785-baf8-0cb2ee489a0a}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security] An Intune Device Configuration Administrative Template Policy for
Windows10 with Id {bb3661f5-4a65-4a58-878f-95b080ca0d0f} and DisplayName {WIN | Admin Template | Device Security} was
found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security] Updating the Intune Device Configuration Administrative Template
Policy for Windows10 with Id {bb3661f5-4a65-4a58-878f-95b080ca0d0f}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security] POST
https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/bb3661f5-4a65-4a58-878f-95b080ca0d0f/assign
 with 52-byte payload
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security] received 121-byte response of content type application/json
Cannot bind argument to parameter 'ReferenceObject' because it is null.
    + CategoryInfo          : InvalidData: (:) [], CimException
    + FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Microsoft.PowerShell.Commands.CompareObje
   ctCommand
    + PSComputerName        : localhost

VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security] POST
https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/bb3661f5-4a65-4a58-878f-95b080ca0d0f/update
DefinitionValues with 128-byte payload
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security] received 0-byte response of content type
VERBOSE: [vm-server01]: LCM:  [ End    Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Device Security]  in 3.4530 seconds.
The PowerShell DSC resource '[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationA
dministrativeTemplatePolicyWindows10-WIN | Admin Template | Device Security' with SourceInfo 'C:\M365DSC\AdminTemplateO
nly\M365TenantConfig.ps1::309::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10' threw one or more
non-terminating errors while running the Set-TargetResource functionality. These errors are logged to the ETW channel
called Microsoft-Windows-DSC/Operational. Refer to this channel for more details.
    + CategoryInfo          : InvalidOperation: (:) [], CimException
    + FullyQualifiedErrorId : NonTerminatingErrorFromProvider
    + PSComputerName        : localhost

VERBOSE: [vm-server01]: LCM:  [ Start  Resource ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Protection | Workstations]
VERBOSE: [vm-server01]: LCM:  [ Start  Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Protection | Workstations]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Protection | Workstations] Testing configuration of the Intune Device Configuration Administrative
Template Policy for Windows10 with Id {7bd283d9-c644-460a-a802-e1f0b3ce77df} and DisplayName {WIN | Edge Protection |
Workstations}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Protection | Workstations] Could not find an Intune Device Configuration Administrative Template
Policy for Windows10 with Id {7bd283d9-c644-460a-a802-e1f0b3ce77df}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Protection | Workstations] An Intune Device Configuration Administrative Template Policy for
Windows10 with Id {adec841e-dd78-410c-b638-b4c9349f5f17} and DisplayName {WIN | Edge Protection | Workstations} was
found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Protection | Workstations] Configuration drift - simple object key: Id Source
{6c956448-109d-479a-a0d6-0690014d3a89} Target {8ff7eaca-5414-461b-be02-ef035d338628}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Protection | Workstations] Current Values: ApplicationId=***
ApplicationSecret=***
Assignments=()
CertificateThumbprint=***
Credential=$null
DefinitionValues=({ConfigurationType=policy
Definition={CategoryPath=\Microsoft Edge\SmartScreen settings
ClassType=machine
DisplayName=Configure Microsoft Defender SmartScreen to block potentially unwanted apps
Id=270e643f-a1dd-49eb-8365-8292e9d6c7f7
PolicyType=admxIngested
SupportedOn=Microsoft Edge version 80, Windows 7 or later}
Enabled=True
Id=8ff7eaca-5414-461b-be02-ef035d338628
PresentationValues=()},{ConfigurationType=policy
Definition={CategoryPath=\Microsoft Edge\SmartScreen settings
ClassType=machine
DisplayName=Configure Microsoft Defender SmartScreen
Id=f9de5937-2ff5-4c34-a5ec-d0d997787b68
PolicyType=admxIngested
SupportedOn=Microsoft Windows 7 or later}
Enabled=True
Id=6c956448-109d-479a-a0d6-0690014d3a89
PresentationValues=()})
Description=
DisplayName=WIN | Edge Protection | Workstations
Ensure=Present
Id=adec841e-dd78-410c-b638-b4c9349f5f17
Managedidentity=False
PolicyConfigurationIngestionType=builtIn
TenantId=***
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Protection | Workstations] Target Values: Description=
DisplayName=WIN | Edge Protection | Workstations
Ensure=Present
PolicyConfigurationIngestionType=builtIn
Verbose=True
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Protection | Workstations] Test-TargetResource returned True
VERBOSE: [vm-server01]: LCM:  [ End    Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Protection | Workstations]  in 2.9060 seconds.
VERBOSE: [vm-server01]: LCM:  [ Skip   Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Protection | Workstations]
VERBOSE: [vm-server01]: LCM:  [ End    Resource ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Protection | Workstations]
VERBOSE: [vm-server01]: LCM:  [ Start  Resource ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config]
VERBOSE: [vm-server01]: LCM:  [ Start  Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config] Testing configuration of the Intune Device Configuration
Administrative Template Policy for Windows10 with Id {c95e5081-9a2a-406c-a10f-73dc4b5c7ed5} and DisplayName {WIN |
Admin Template | OneDrive Config}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config] Could not find an Intune Device Configuration Administrative Template
Policy for Windows10 with Id {c95e5081-9a2a-406c-a10f-73dc4b5c7ed5}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config] An Intune Device Configuration Administrative Template Policy for
Windows10 with Id {7d90b4c9-1a4c-409a-bd03-db3cdbe20363} and DisplayName {WIN | Admin Template | OneDrive Config} was
found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config] Current Values: ApplicationId=***
ApplicationSecret=***
Assignments=()
CertificateThumbprint=***
Credential=$null
DefinitionValues=()
Description=
DisplayName=WIN | Admin Template | OneDrive Config
Ensure=Present
Id=7d90b4c9-1a4c-409a-bd03-db3cdbe20363
Managedidentity=False
PolicyConfigurationIngestionType=builtIn
TenantId=***
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config] Target Values: Assignments=()
DefinitionValues=({ConfigurationType=policy; Enabled=True; Id=77289eef-b774-4474-acaa-5d4316687fa6;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition; PresentationValues=},{ConfigurationType=policy;
Enabled=True; Id=14af66fc-aa83-4445-a6a2-953f75c09e73; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=6893d4a7-7757-4a90-a030-5e67a58581a7;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=13b3f51c-9f48-4ab9-8724-abcc948e2ba7; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=34ed3458-eea2-4c01-bde7-7a936af16ba3;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue
MSFT_IntuneGroupPolicyDefinitionValuePresentationValue MSFT_IntuneGroupPolicyDefinitionValuePresentationValue
MSFT_IntuneGroupPolicyDefinitionValuePresentationValue
MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=284d591a-2ad2-4b06-92d1-8f896e2a90e9; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=f46cf4e2-7ae1-4ce4-9651-d4008fcd6f62;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=96be64f7-bd09-4e61-9118-c56e0be238e0; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=27357ba3-679c-42a6-9245-edf354de7a07; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=})
Description=
DisplayName=WIN | Admin Template | OneDrive Config
Ensure=Present
PolicyConfigurationIngestionType=builtIn
Verbose=True
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config] Test-TargetResource returned False
VERBOSE: [vm-server01]: LCM:  [ End    Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config]  in 1.8930 seconds.
VERBOSE: [vm-server01]: LCM:  [ Start  Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config] Could not find an Intune Device Configuration Administrative Template
Policy for Windows10 with Id {c95e5081-9a2a-406c-a10f-73dc4b5c7ed5}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config] An Intune Device Configuration Administrative Template Policy for
Windows10 with Id {7d90b4c9-1a4c-409a-bd03-db3cdbe20363} and DisplayName {WIN | Admin Template | OneDrive Config} was
found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config] Updating the Intune Device Configuration Administrative Template
Policy for Windows10 with Id {7d90b4c9-1a4c-409a-bd03-db3cdbe20363}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config] POST
https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/7d90b4c9-1a4c-409a-bd03-db3cdbe20363/assign
 with 52-byte payload
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config] received 121-byte response of content type application/json
Cannot bind argument to parameter 'ReferenceObject' because it is null.
    + CategoryInfo          : InvalidData: (:) [], CimException
    + FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Microsoft.PowerShell.Commands.CompareObje
   ctCommand
    + PSComputerName        : localhost

VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config] POST
https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/7d90b4c9-1a4c-409a-bd03-db3cdbe20363/update
DefinitionValues with 128-byte payload
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config] received 0-byte response of content type
VERBOSE: [vm-server01]: LCM:  [ End    Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | OneDrive Config]  in 3.4570 seconds.
The PowerShell DSC resource '[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationA
dministrativeTemplatePolicyWindows10-WIN | Admin Template | OneDrive Config' with SourceInfo 'C:\M365DSC\AdminTemplateO
nly\M365TenantConfig.ps1::738::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10' threw one or more
non-terminating errors while running the Set-TargetResource functionality. These errors are logged to the ETW channel
called Microsoft-Windows-DSC/Operational. Refer to this channel for more details.
    + CategoryInfo          : InvalidOperation: (:) [], CimException
    + FullyQualifiedErrorId : NonTerminatingErrorFromProvider
    + PSComputerName        : localhost

VERBOSE: [vm-server01]: LCM:  [ Start  Resource ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings]
VERBOSE: [vm-server01]: LCM:  [ Start  Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Testing configuration of the Intune Device Configuration
Administrative Template Policy for Windows10 with Id {5416d97f-54d5-4f21-a82f-b2bf2d3efdc3} and DisplayName {TEST |
Admin Template | Control Pannel Settings}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Could not find an Intune Device Configuration Administrative
Template Policy for Windows10 with Id {5416d97f-54d5-4f21-a82f-b2bf2d3efdc3}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] An Intune Device Configuration Administrative Template Policy
 for Windows10 with Id {160f0487-dca7-4bac-bfb2-f87565f2e011} and DisplayName {TEST | Admin Template | Control Pannel
Settings} was found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Current Values: ApplicationId=***
ApplicationSecret=***
Assignments=()
CertificateThumbprint=***
Credential=$null
DefinitionValues=()
Description=
DisplayName=TEST | Admin Template | Control Pannel Settings
Ensure=Present
Id=160f0487-dca7-4bac-bfb2-f87565f2e011
Managedidentity=False
PolicyConfigurationIngestionType=builtIn
TenantId=***
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Target Values: Assignments=()
DefinitionValues=({ConfigurationType=policy; Enabled=True; Id=13b64afd-c505-4f1f-abe2-d85b1c6957c2;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=06c988a9-4d2c-4f18-a059-fd5d47865607; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=2390950b-8ef9-4b36-87bf-8617a3386cf5;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition; PresentationValues=},{ConfigurationType=policy;
Enabled=True; Id=ad73dae7-b5b7-483a-bad7-a50d90d00955; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=},{ConfigurationType=policy; Enabled=True; Id=f83afc1c-b0ed-4f42-99b1-5d43591d94a1;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition; PresentationValues=})
Description=
DisplayName=TEST | Admin Template | Control Pannel Settings
Ensure=Present
PolicyConfigurationIngestionType=unknown
Verbose=True
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Test-TargetResource returned False
VERBOSE: [vm-server01]: LCM:  [ End    Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings]  in 1.1570 seconds.
VERBOSE: [vm-server01]: LCM:  [ Start  Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Could not find an Intune Device Configuration Administrative
Template Policy for Windows10 with Id {5416d97f-54d5-4f21-a82f-b2bf2d3efdc3}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] An Intune Device Configuration Administrative Template Policy
 for Windows10 with Id {160f0487-dca7-4bac-bfb2-f87565f2e011} and DisplayName {TEST | Admin Template | Control Pannel
Settings} was found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] Updating the Intune Device Configuration Administrative
Template Policy for Windows10 with Id {160f0487-dca7-4bac-bfb2-f87565f2e011}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] POST
https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/160f0487-dca7-4bac-bfb2-f87565f2e011/assign
 with 52-byte payload
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] received 121-byte response of content type application/json
Cannot bind argument to parameter 'ReferenceObject' because it is null.
    + CategoryInfo          : InvalidData: (:) [], CimException
    + FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Microsoft.PowerShell.Commands.CompareObje
   ctCommand
    + PSComputerName        : localhost

VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] POST
https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/160f0487-dca7-4bac-bfb2-f87565f2e011/update
DefinitionValues with 128-byte payload
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings] received 0-byte response of content type
VERBOSE: [vm-server01]: LCM:  [ End    Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-TEST | Admin Template | Control Pannel Settings]  in 2.5460 seconds.
The PowerShell DSC resource '[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationA
dministrativeTemplatePolicyWindows10-TEST | Admin Template | Control Pannel Settings' with SourceInfo 'C:\M365DSC\Admin
TemplateOnly\M365TenantConfig.ps1::941::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10' threw one
or more non-terminating errors while running the Set-TargetResource functionality. These errors are logged to the ETW
channel called Microsoft-Windows-DSC/Operational. Refer to this channel for more details.
    + CategoryInfo          : InvalidOperation: (:) [], CimException
    + FullyQualifiedErrorId : NonTerminatingErrorFromProvider
    + PSComputerName        : localhost

VERBOSE: [vm-server01]: LCM:  [ Start  Resource ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ]
VERBOSE: [vm-server01]: LCM:  [ Start  Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ] Testing configuration of the Intune Device Configuration Administrative
Template Policy for Windows10 with Id {c8d72f17-078a-4982-9804-275393493f72} and DisplayName {WIN | Edge Configuration
| IE Mode }
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ] Could not find an Intune Device Configuration Administrative Template
Policy for Windows10 with Id {c8d72f17-078a-4982-9804-275393493f72}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ] An Intune Device Configuration Administrative Template Policy for
Windows10 with Id {70da3581-d477-405a-9987-01cf7b43eae7} and DisplayName {WIN | Edge Configuration | IE Mode } was
found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ] Current Values: ApplicationId=***
ApplicationSecret=***
Assignments=()
CertificateThumbprint=***
Credential=$null
DefinitionValues=()
Description=
DisplayName=WIN | Edge Configuration | IE Mode
Ensure=Present
Id=70da3581-d477-405a-9987-01cf7b43eae7
Managedidentity=False
PolicyConfigurationIngestionType=builtIn
TenantId=***
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ] Target Values: Assignments=()
DefinitionValues=({ConfigurationType=policy; Enabled=True; Id=b8920654-507b-4fae-b797-5284950e60a9;
Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue},{ConfigurationType=policy; Enabled=True;
Id=d3cef550-623d-47d2-9d9e-a353572e74a6; Definition=MSFT_IntuneGroupPolicyDefinitionValueDefinition;
PresentationValues=MSFT_IntuneGroupPolicyDefinitionValuePresentationValue})
Description=
DisplayName=WIN | Edge Configuration | IE Mode
Ensure=Present
PolicyConfigurationIngestionType=builtIn
Verbose=True
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ] Test-TargetResource returned False
VERBOSE: [vm-server01]: LCM:  [ End    Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ]  in 1.7190 seconds.
VERBOSE: [vm-server01]: LCM:  [ Start  Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ] Could not find an Intune Device Configuration Administrative Template
Policy for Windows10 with Id {c8d72f17-078a-4982-9804-275393493f72}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ] An Intune Device Configuration Administrative Template Policy for
Windows10 with Id {70da3581-d477-405a-9987-01cf7b43eae7} and DisplayName {WIN | Edge Configuration | IE Mode } was
found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ] Updating the Intune Device Configuration Administrative Template Policy
for Windows10 with Id {70da3581-d477-405a-9987-01cf7b43eae7}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ] POST
https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/70da3581-d477-405a-9987-01cf7b43eae7/assign
 with 52-byte payload
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ] received 121-byte response of content type application/json
Cannot bind argument to parameter 'ReferenceObject' because it is null.
    + CategoryInfo          : InvalidData: (:) [], CimException
    + FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Microsoft.PowerShell.Commands.CompareObje
   ctCommand
    + PSComputerName        : localhost

VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ] POST
https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/70da3581-d477-405a-9987-01cf7b43eae7/update
DefinitionValues with 128-byte payload
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ] received 0-byte response of content type
VERBOSE: [vm-server01]: LCM:  [ End    Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Edge Configuration | IE Mode ]  in 2.9060 seconds.
The PowerShell DSC resource '[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationA
dministrativeTemplatePolicyWindows10-WIN | Edge Configuration | IE Mode ' with SourceInfo 'C:\M365DSC\AdminTemplateOnly
\M365TenantConfig.ps1::1029::9::IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10' threw one or more
non-terminating errors while running the Set-TargetResource functionality. These errors are logged to the ETW channel
called Microsoft-Windows-DSC/Operational. Refer to this channel for more details.
    + CategoryInfo          : InvalidOperation: (:) [], CimException
    + FullyQualifiedErrorId : NonTerminatingErrorFromProvider
    + PSComputerName        : localhost

VERBOSE: [vm-server01]: LCM:  [ Start  Resource ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Disable System Restore]
VERBOSE: [vm-server01]: LCM:  [ Start  Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Disable System Restore]
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Disable System Restore] Testing configuration of the Intune Device Configuration
Administrative Template Policy for Windows10 with Id {bd40c6ae-8b65-4f21-a2ba-3cd93f80810c} and DisplayName {WIN |
Admin Template | Disable System Restore}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Disable System Restore] Could not find an Intune Device Configuration Administrative
Template Policy for Windows10 with Id {bd40c6ae-8b65-4f21-a2ba-3cd93f80810c}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Disable System Restore] An Intune Device Configuration Administrative Template Policy
for Windows10 with Id {10ce189c-ca38-44ab-bb5f-ab35e835ed2a} and DisplayName {WIN | Admin Template | Disable System
Restore} was found.
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Disable System Restore] Configuration drift - simple object key: Id Source
{31129c10-2adc-4f25-a5de-895827b4c0eb} Target {e97b6f82-2822-4dd2-b6ec-2e281c6ea44e}
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Disable System Restore] Current Values: ApplicationId=***
ApplicationSecret=***
Assignments=()
CertificateThumbprint=***
Credential=$null
DefinitionValues=({ConfigurationType=policy
Definition={CategoryPath=\System\System Restore
ClassType=machine
DisplayName=Turn off Configuration
Id=708c7858-28b1-4f87-b255-5eac42d48051
PolicyType=admxBacked
SupportedOn=At least Windows Server 2008 R2 or Windows 7}
Enabled=True
Id=e97b6f82-2822-4dd2-b6ec-2e281c6ea44e
PresentationValues=()},{ConfigurationType=policy
Definition={CategoryPath=\System\System Restore
ClassType=machine
DisplayName=Turn off System Restore
Id=0403ebf8-0d33-45ce-a581-63ee6416a76d
PolicyType=admxBacked
SupportedOn=At least Windows Server 2008 R2 or Windows 7}
Enabled=True
Id=31129c10-2adc-4f25-a5de-895827b4c0eb
PresentationValues=()})
Description=
DisplayName=WIN | Admin Template | Disable System Restore
Ensure=Present
Id=10ce189c-ca38-44ab-bb5f-ab35e835ed2a
Managedidentity=False
PolicyConfigurationIngestionType=builtIn
TenantId=***
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Disable System Restore] Target Values: Description=
DisplayName=WIN | Admin Template | Disable System Restore
Ensure=Present
PolicyConfigurationIngestionType=builtIn
Verbose=True
VERBOSE: [vm-server01]:
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Disable System Restore] Test-TargetResource returned True
VERBOSE: [vm-server01]: LCM:  [ End    Test     ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Disable System Restore]  in 1.8590 seconds.
VERBOSE: [vm-server01]: LCM:  [ Skip   Set      ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Disable System Restore]
VERBOSE: [vm-server01]: LCM:  [ End    Resource ]
[[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyW
indows10-WIN | Admin Template | Disable System Restore]
VERBOSE: [vm-server01]: LCM:  [ End    Set      ]
The SendConfigurationApply function did not succeed.
    + CategoryInfo          : NotSpecified: (root/Microsoft/...gurationManager:String) [], CimException
    + FullyQualifiedErrorId : MI RESULT 1
    + PSComputerName        : localhost

VERBOSE: Operation 'Invoke CimMethod' complete.
VERBOSE: Time taken for configuration job to complete is 53.26 seconds
ricmestre commented 1 year ago

@William-Francillette Hi, the fix for this here was not correct, you may compare empty arrays but not empty/null strings. My initial thinking was that you would insert the condition not only to make the assignment but to also insert the compare there, by leaving it in the same place the error is still present.

PS C:\> $currentDefinitionValues = @{}
PS C:\> $currentDefinitionValues.Id = $null
PS C:\> $targetDefinitionValues = @{}
PS C:\> $targetDefinitionValues.Id = New-Guid
PS C:\> $comparedDefinitionValues = Compare-Object `
>>             -ReferenceObject ($currentDefinitionValues.Id) `
>>             -DifferenceObject ($targetDefinitionValues.Id) `
>>             -IncludeEqual
Compare-Object : Cannot bind argument to parameter 'ReferenceObject' because it is null.
At line:2 char:30
+             -ReferenceObject ($currentDefinitionValues.Id) `
+                              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidData: (:) [Compare-Object], ParameterBindingValidationException
    + FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Microsoft.PowerShell.Commands.CompareObjectCommand

Therefore I'd say if $currentDefinitionValues is null but $targetDefinitionValues is not then all definitions should be added, if it's the opposite they should all be removed and only call the compare if they are both not null. Am I correct?

ricmestre commented 1 year ago

Untested, but probably something similar like this:

# [...] Starting on line 469 instead of calling Compare-Object

if ($null -ne $currentDefinitionValues)
{
    if ($null -ne $targetDefinitionValues)
    {
        $comparedDefinitionValues = Compare-Object `
            -ReferenceObject ($currentDefinitionValues.Id) `
            -DifferenceObject ($targetDefinitionValues.Id) `
            -IncludeEqual
        $definitionValuesToAdd = ($comparedDefinitionValues | Where-Object -FilterScript { $_.SideIndicator -eq '=>' }).InputObject
        $definitionValuesToRemove = ($comparedDefinitionValues | Where-Object -FilterScript { $_.SideIndicator -eq '<=' }).InputObject
        $definitionValuesToCheck = ($comparedDefinitionValues | Where-Object -FilterScript { $_.SideIndicator -eq '==' }).InputObject
    }
    else
    {
        $definitionValuesToAdd = $null
        $definitionValuesToRemove = $currentDefinitionValues
        $definitionValuesToCheck = $null
    }
}
else
{
    if ($null -ne $targetDefinitionValues)
    {
        $definitionValuesToAdd = $targetDefinitionValues
        $definitionValuesToRemove = $null
        $definitionValuesToCheck = $null
    }
    else
    {
        $definitionValuesToAdd = $null
        $definitionValuesToRemove = $null
        $definitionValuesToCheck = $null
    }
}

# [...] code in between

if ($null -ne $definitionValuesToAdd -or $null -ne $definitionValuesToRemove -or $null -ne $definitionValuesToCheck)
{
    Update-DeviceConfigurationGroupPolicyDefinitionValue `
        -DeviceConfigurationPolicyId $currentInstance.Id `
        -DefinitionValueToAdd $formattedDefinitionValuesToAdd `
        -DefinitionValueToUpdate $formattedDefinitionValuesToUpdate `
        -DefinitionValueToRemove $definitionValuesToRemove
}
William-Francillette commented 1 year ago

I'll have a look and do more test in the evening after work this evening - I should be able to raise a PR tonight hopefully - it's only an issue with managing the compare-object properly

William-Francillette commented 1 year ago

There was more work than planned but that should be all fix with #3377 Don't hesitate to raise another issue if you find another bug

Thanks