Examples/Resources/IntuneDeviceCompliancePolicyMacOS/1-NewIntuneDeviceCompliancePolicyMacOS.ps1

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
<#
This example creates a new Device Comliance Policy for MacOS.
#>


Configuration Example
{
    param(
        [Parameter(Mandatory = $true)]
        [PSCredential]
        $credsGlobalAdmin
    )
    Import-DscResource -ModuleName Microsoft365DSC

    node localhost
    {
        IntuneDeviceCompliancePolicyMacOS MyCustomMacOSPolicy
        {
            DisplayName                                 = "MacOS DSC Policy";
            Description                                 = "Test policy";
            PasswordRequired                            = $False;
            PasswordBlockSimple                         = $False;
            PasswordExpirationDays                      = 365;
            PasswordMinimumLength                       = 6;
            PasswordMinutesOfInactivityBeforeLock       = 5;
            PasswordPreviousPasswordBlockCount          = 13;
            PasswordMinimumCharacterSetCount            = 1;
            PasswordRequiredType                        = "DeviceDefault";
            OsMinimumVersion                            = 10;
            OsMaximumVersion                            = 13;
            SystemIntegrityProtectionEnabled            = $False;
            DeviceThreatProtectionEnabled               = $False;
            DeviceThreatProtectionRequiredSecurityLevel = "Unavailable";
            StorageRequireEncryption                    = $False;
            FirewallEnabled                             = $False;
            FirewallBlockAllIncoming                    = $False;
            FirewallEnableStealthMode                   = $False;
            Ensure                                      = 'Present';
            GlobalAdminAccount                          = $GlobalAdminAccount;
        }
    }
}