Microsoft365DSC

1.21.407.1

Examples/Resources/IntuneDeviceConfigurationPolicyiOS/1-NewIntuneDeviceConfigurationPolicyiOS.ps1

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
                                <#

This example creates a new Device Configuration Policy for iOS.

#>

Configuration Example

{

    param(

        [Parameter(Mandatory = $true)]

        [PSCredential]

        $credsGlobalAdmin

    )

    Import-DscResource -ModuleName Microsoft365DSC

    node localhost

    {

        IntuneDeviceConfigurationPolicyiOS MyCustomiOSPolicy

        {

            DisplayName                                    = "iOS DSC Policy";

            AccountBlockModification                       = $False;

            ActivationLockAllowWhenSupervised              = $False;

            AirDropBlocked                                 = $False;

            AirDropForceUnmanagedDropTarget                = $False;

            AirPlayForcePairingPasswordForOutgoingRequests = $False;

            AppleNewsBlocked                               = $False;

            AppleWatchBlockPairing                         = $False;

            AppleWatchForceWristDetection                  = $False;

            AppStoreBlockAutomaticDownloads                = $False;

            AppStoreBlocked                                = $False;

            AppStoreBlockInAppPurchases                    = $False;

            AppStoreBlockUIAppInstallation                 = $False;

            AppStoreRequirePassword                        = $False;

            AppsVisibilityList                             = @();

            AppsVisibilityListType                         = "none";

            BluetoothBlockModification                     = $True;

            CameraBlocked                                  = $False;

            CellularBlockDataRoaming                       = $False;

            CellularBlockGlobalBackgroundFetchWhileRoaming = $False;

            CellularBlockPerAppDataModification            = $False;

            CellularBlockVoiceRoaming                      = $False;

            CertificatesBlockUntrustedTlsCertificates      = $False;

            ClassroomAppBlockRemoteScreenObservation       = $False;

            CompliantAppListType                           = "none";

            CompliantAppsList                              = @();

            ConfigurationProfileBlockChanges               = $False;

            DefinitionLookupBlocked                        = $False;

            Description                                    = "iOS Device Restriction Policy";

            DeviceBlockEnableRestrictions                  = $True;

            DeviceBlockEraseContentAndSettings             = $False;

            DeviceBlockNameModification                    = $False;

            DiagnosticDataBlockSubmission                  = $False;

            DiagnosticDataBlockSubmissionModification      = $False;

            DocumentsBlockManagedDocumentsInUnmanagedApps  = $False;

            DocumentsBlockUnmanagedDocumentsInManagedApps  = $False;

            EmailInDomainSuffixes                          = @();

            EnterpriseAppBlockTrust                        = $False;

            EnterpriseAppBlockTrustModification            = $False;

            FaceTimeBlocked                                = $False;

            FindMyFriendsBlocked                           = $False;

            GameCenterBlocked                              = $False;

            GamingBlockGameCenterFriends                   = $True;

            GamingBlockMultiplayer                         = $False;

            HostPairingBlocked                             = $False;

            iBooksStoreBlocked                             = $False;

            iBooksStoreBlockErotica                        = $False;

            iCloudBlockActivityContinuation                = $False;

            iCloudBlockBackup                              = $True;

            iCloudBlockDocumentSync                        = $True;

            iCloudBlockManagedAppsSync                     = $False;

            iCloudBlockPhotoLibrary                        = $False;

            iCloudBlockPhotoStreamSync                     = $True;

            iCloudBlockSharedPhotoStream                   = $False;

            iCloudRequireEncryptedBackup                   = $False;

            iTunesBlockExplicitContent                     = $False;

            iTunesBlockMusicService                        = $False;

            iTunesBlockRadio                               = $False;

            KeyboardBlockAutoCorrect                       = $False;

            KeyboardBlockPredictive                        = $False;

            KeyboardBlockShortcuts                         = $False;

            KeyboardBlockSpellCheck                        = $False;

            KioskModeAllowAssistiveSpeak                   = $False;

            KioskModeAllowAssistiveTouchSettings           = $False;

            KioskModeAllowAutoLock                         = $False;

            KioskModeAllowColorInversionSettings           = $False;

            KioskModeAllowRingerSwitch                     = $False;

            KioskModeAllowScreenRotation                   = $False;

            KioskModeAllowSleepButton                      = $False;

            KioskModeAllowTouchscreen                      = $False;

            KioskModeAllowVoiceOverSettings                = $False;

            KioskModeAllowVolumeButtons                    = $False;

            KioskModeAllowZoomSettings                     = $False;

            KioskModeRequireAssistiveTouch                 = $False;

            KioskModeRequireColorInversion                 = $False;

            KioskModeRequireMonoAudio                      = $False;

            KioskModeRequireVoiceOver                      = $False;

            KioskModeRequireZoom                           = $False;

            LockScreenBlockControlCenter                   = $False;

            LockScreenBlockNotificationView                = $False;

            LockScreenBlockPassbook                        = $False;

            LockScreenBlockTodayView                       = $False;

            MediaContentRatingApps                         = "allAllowed";

            messagesBlocked                                = $False;

            NotificationsBlockSettingsModification         = $False;

            PasscodeBlockFingerprintUnlock                 = $False;

            PasscodeBlockModification                      = $False;

            PasscodeBlockSimple                            = $True;

            PasscodeMinimumLength                          = 4;

            PasscodeRequired                               = $True;

            PasscodeRequiredType                           = "deviceDefault";

            PodcastsBlocked                                = $False;

            SafariBlockAutofill                            = $False;

            SafariBlocked                                  = $False;

            SafariBlockJavaScript                          = $False;

            SafariBlockPopups                              = $False;

            SafariCookieSettings                           = "browserDefault";

            SafariManagedDomains                           = @();

            SafariPasswordAutoFillDomains                  = @();

            SafariRequireFraudWarning                      = $False;

            ScreenCaptureBlocked                           = $False;

            SiriBlocked                                    = $False;

            SiriBlockedWhenLocked                          = $False;

            SiriBlockUserGeneratedContent                  = $False;

            SiriRequireProfanityFilter                     = $False;

            SpotlightBlockInternetResults                  = $False;

            VoiceDialingBlocked                            = $False;

            WallpaperBlockModification                     = $False;

            Ensure                                         = 'Present'

            GlobalAdminAccount                              = $credsGlobalAdmin;

        }

    }

}