Policies/NSP-INTUNE-COMPLY-01.psd1
|
@{ Id = 'NSP-INTUNE-COMPLY-01' Name = 'Mobile baseline: MFA or an approved compliant app' Version = 1 Description = 'On Android and iOS, members of the EnableMFA and MFACatchAll groups must complete MFA or use a compliant application for everything except Apple Business Manager, Intune, and Intune Enrollment.' Notes = 'Converted from Legacy/Policies/Intune_Android&iOSBaseReq.ps1.' LegacyNames = @('Intune - Android & iOS base req') DefaultState = 'reportOnly' Users = @{ IncludeGroups = @('{Group:EnableMFA}', '{Group:MFACatchAll}') ExcludeUsers = @('{BreakGlass}', '{ServiceAccounts}') } Applications = @{ Include = @('All') Exclude = @('{App:Apple Business Manager}', '{App:Microsoft Intune}', '{App:Microsoft Intune Enrollment}') } Platforms = @{ Include = @('android', 'iOS') Exclude = @('windowsPhone', 'windows', 'macOS') } Grant = @{ Operator = 'OR' BuiltInControls = @('mfa', 'compliantApplication') } } |