Examples/Resources/IntuneDeviceConfigurationPolicyiOS/1-NewIntuneDeviceConfigurationPolicyiOS.ps1

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
<#
This example creates a new Device Configuration Policy for iOS.
#>


Configuration Example
{
    param(
        [Parameter(Mandatory = $true)]
        [PSCredential]
        $credsGlobalAdmin
    )
    Import-DscResource -ModuleName Microsoft365DSC

    node localhost
    {
        IntuneDeviceConfigurationPolicyiOS MyCustomiOSPolicy
        {
            DisplayName                                    = "iOS DSC Policy";
            AccountBlockModification                       = $False;
            ActivationLockAllowWhenSupervised              = $False;
            AirDropBlocked                                 = $False;
            AirDropForceUnmanagedDropTarget                = $False;
            AirPlayForcePairingPasswordForOutgoingRequests = $False;
            AppleNewsBlocked                               = $False;
            AppleWatchBlockPairing                         = $False;
            AppleWatchForceWristDetection                  = $False;
            AppStoreBlockAutomaticDownloads                = $False;
            AppStoreBlocked                                = $False;
            AppStoreBlockInAppPurchases                    = $False;
            AppStoreBlockUIAppInstallation                 = $False;
            AppStoreRequirePassword                        = $False;
            AppsVisibilityList                             = @();
            AppsVisibilityListType                         = "none";
            BluetoothBlockModification                     = $True;
            CameraBlocked                                  = $False;
            CellularBlockDataRoaming                       = $False;
            CellularBlockGlobalBackgroundFetchWhileRoaming = $False;
            CellularBlockPerAppDataModification            = $False;
            CellularBlockVoiceRoaming                      = $False;
            CertificatesBlockUntrustedTlsCertificates      = $False;
            ClassroomAppBlockRemoteScreenObservation       = $False;
            CompliantAppListType                           = "none";
            CompliantAppsList                              = @();
            ConfigurationProfileBlockChanges               = $False;
            DefinitionLookupBlocked                        = $False;
            Description                                    = "iOS Device Restriction Policy";
            DeviceBlockEnableRestrictions                  = $True;
            DeviceBlockEraseContentAndSettings             = $False;
            DeviceBlockNameModification                    = $False;
            DiagnosticDataBlockSubmission                  = $False;
            DiagnosticDataBlockSubmissionModification      = $False;
            DocumentsBlockManagedDocumentsInUnmanagedApps  = $False;
            DocumentsBlockUnmanagedDocumentsInManagedApps  = $False;
            EmailInDomainSuffixes                          = @();
            EnterpriseAppBlockTrust                        = $False;
            EnterpriseAppBlockTrustModification            = $False;
            FaceTimeBlocked                                = $False;
            FindMyFriendsBlocked                           = $False;
            GameCenterBlocked                              = $False;
            GamingBlockGameCenterFriends                   = $True;
            GamingBlockMultiplayer                         = $False;
            HostPairingBlocked                             = $False;
            iBooksStoreBlocked                             = $False;
            iBooksStoreBlockErotica                        = $False;
            iCloudBlockActivityContinuation                = $False;
            iCloudBlockBackup                              = $True;
            iCloudBlockDocumentSync                        = $True;
            iCloudBlockManagedAppsSync                     = $False;
            iCloudBlockPhotoLibrary                        = $False;
            iCloudBlockPhotoStreamSync                     = $True;
            iCloudBlockSharedPhotoStream                   = $False;
            iCloudRequireEncryptedBackup                   = $False;
            iTunesBlockExplicitContent                     = $False;
            iTunesBlockMusicService                        = $False;
            iTunesBlockRadio                               = $False;
            KeyboardBlockAutoCorrect                       = $False;
            KeyboardBlockPredictive                        = $False;
            KeyboardBlockShortcuts                         = $False;
            KeyboardBlockSpellCheck                        = $False;
            KioskModeAllowAssistiveSpeak                   = $False;
            KioskModeAllowAssistiveTouchSettings           = $False;
            KioskModeAllowAutoLock                         = $False;
            KioskModeAllowColorInversionSettings           = $False;
            KioskModeAllowRingerSwitch                     = $False;
            KioskModeAllowScreenRotation                   = $False;
            KioskModeAllowSleepButton                      = $False;
            KioskModeAllowTouchscreen                      = $False;
            KioskModeAllowVoiceOverSettings                = $False;
            KioskModeAllowVolumeButtons                    = $False;
            KioskModeAllowZoomSettings                     = $False;
            KioskModeRequireAssistiveTouch                 = $False;
            KioskModeRequireColorInversion                 = $False;
            KioskModeRequireMonoAudio                      = $False;
            KioskModeRequireVoiceOver                      = $False;
            KioskModeRequireZoom                           = $False;
            LockScreenBlockControlCenter                   = $False;
            LockScreenBlockNotificationView                = $False;
            LockScreenBlockPassbook                        = $False;
            LockScreenBlockTodayView                       = $False;
            MediaContentRatingApps                         = "allAllowed";
            messagesBlocked                                = $False;
            NotificationsBlockSettingsModification         = $False;
            PasscodeBlockFingerprintUnlock                 = $False;
            PasscodeBlockModification                      = $False;
            PasscodeBlockSimple                            = $True;
            PasscodeMinimumLength                          = 4;
            PasscodeRequired                               = $True;
            PasscodeRequiredType                           = "deviceDefault";
            PodcastsBlocked                                = $False;
            SafariBlockAutofill                            = $False;
            SafariBlocked                                  = $False;
            SafariBlockJavaScript                          = $False;
            SafariBlockPopups                              = $False;
            SafariCookieSettings                           = "browserDefault";
            SafariManagedDomains                           = @();
            SafariPasswordAutoFillDomains                  = @();
            SafariRequireFraudWarning                      = $False;
            ScreenCaptureBlocked                           = $False;
            SiriBlocked                                    = $False;
            SiriBlockedWhenLocked                          = $False;
            SiriBlockUserGeneratedContent                  = $False;
            SiriRequireProfanityFilter                     = $False;
            SpotlightBlockInternetResults                  = $False;
            VoiceDialingBlocked                            = $False;
            WallpaperBlockModification                     = $False;
            Ensure                                         = 'Present'
            GlobalAdminAccount                              = $credsGlobalAdmin;
        }
    }
}