Policies/NSP-INTUNE-MFA-01.psd1
|
@{ Id = 'NSP-INTUNE-MFA-01' Name = 'Require MFA for mobile Intune enrollment' Version = 1 Description = 'Android and iOS enrollment through Microsoft Intune Enrollment requires MFA.' Notes = 'Converted from Legacy/Policies/Intune_MFAforJoin.ps1. Legacy quirk kept for parity: IncludeUsers All makes the two IncludeGroups redundant (the RedundantInclude warning). The platform exclude list is also redundant beside a specific include list. Decide separately whether to narrow this to the groups.' LegacyNames = @('Intune - MFA for Join') DefaultState = 'reportOnly' Users = @{ IncludeUsers = @('All') IncludeGroups = @('{Group:EnableMFA}', '{Group:MFACatchAll}') ExcludeUsers = @('{BreakGlass}', '{ServiceAccounts}') } Applications = @{ Include = @('{App:Microsoft Intune Enrollment}') } Platforms = @{ Include = @('android', 'iOS') Exclude = @('windowsPhone', 'windows', 'macOS') } Grant = @{ Operator = 'OR' BuiltInControls = @('mfa') } } |