Contents

No table of contents entries found.

Device Configuration (ADMX)

This section contains a list of all device configuration profiles which are backed by ADMX available in Intune.

ADMX Edge Policies

Name Value
createdDateTime 2021-11-05T23:08:21.29Z
displayName ADMX Edge Policies
description
roleScopeTagIds 0
policyConfigurationIngestionType builtIn
id 2459bed2-7367-4630-b4ba-a00d7c9e7d83
lastModifiedDateTime 2022-09-22T18:07:06.9447761Z

Assignments

Name MemberCount GroupType DynamicRule Intent
All Users - BuilIn - -

Settings

DisplayName Scope Path SupportedOn State
Prevent bypassing SmartScreen Filter warnings machine ComponentsExplorer At least Internet Explorer 8.0 Enabled
Control which extensions are installed silently machine Edge Microsoft Windows 7 or later Enabled
Enable Safe Browsing Extended Reporting machine ChromeBrowsing settings Microsoft Windows 7 or later Enabled

Turn off Autoplay

Turns off autoplay for all drives

Name Value
createdDateTime 2022-11-04T19:06:01.2985208Z
displayName Turn off Autoplay
description Turns off autoplay for all drives
roleScopeTagIds 0
policyConfigurationIngestionType builtIn
id e23a8a72-0f21-460f-820e-e5edf9e5fdb2
lastModifiedDateTime 2022-11-04T19:06:01.6891475Z

Assignments

Name MemberCount GroupType DynamicRule Intent
All Users - BuilIn - -
All Devices - BuilIn - -

Settings

DisplayName Scope Path SupportedOn State
Turn off Autoplay machine ComponentsPolicies At least Windows 2000 Enabled

Apple Configuration

This section contains the Apple specific Intune configuration. The following Apple push notification certificate is configured:

Name Value
@odata.context https://graph.microsoft.com/v1.0/$metadata#deviceManagement/applePushNotificationCertificate/$entity
id 2d8299a3-1566-43d4-bbdb-ac4efe61149c
appleIdentifier rex.linder@xentermd.com
topicIdentifier com.apple.mgmt.External.e12d1b2e-b9d1-47ab-adf5-571830b4eca6
lastModifiedDateTime 2023-06-19T22:06:25Z
expirationDateTime 2024-06-18T21:55:55Z
certificateUploadStatus
certificateUploadFailureReason
certificateSerialNumber 1253E79330B2E4DA
certificate

Autopilot Profiles

This section contains a list of all Autopilot Profiles available in Intune.

Basics

General provisioning that applies to all Autopilot devices.

Name Value
@odata.type #microsoft.graph.azureADWindowsAutopilotDeploymentProfile
id ace3d212-4bc5-4475-bca8-8bde1ad1b8d3
displayName Basics
description General provisioning that applies to all Autopilot devices.
language os-default
createdDateTime 2023-06-13T21:58:47.3120608Z
lastModifiedDateTime 2023-06-15T18:39:42.6162911Z
enrollmentStatusScreenSettings
extractHardwareHash True
deviceNameTemplate XMD-%SERIAL%
deviceType windowsPc
enableWhiteGlove True
roleScopeTagIds 0
managementServiceAppId
outOfBoxExperienceSettings @{hidePrivacySettings=True; hideEULA=True; userType=standard; deviceUsageType=singleUser; skipKeyboardSelectionPage=True; hideEscapeLink=True}

Assignments

Name MemberCount GroupType DynamicRule Intent
Windows Autopilot 0 DynamicDevice (device.devicePhysicalIDs -any (_ -contains “[ZTDID]”)) -

Compliance Policies

This section contains a list of all compliances policies available in Intune.

Default Windows 10 Compliance Policy

Name Value
@odata.type #microsoft.graph.windows10CompliancePolicy
roleScopeTagIds 0
id 191dfb82-e574-433c-9417-ae34027cd131
createdDateTime 2020-08-14T22:10:50.6258116Z
description
lastModifiedDateTime 2023-06-29T22:19:18.2644781Z
displayName Default Windows 10 Compliance Policy
version 6
passwordRequired False
passwordBlockSimple False
passwordRequiredToUnlockFromIdle False
passwordMinutesOfInactivityBeforeLock
passwordExpirationDays
passwordMinimumLength
passwordMinimumCharacterSetCount
passwordRequiredType deviceDefault
passwordPreviousPasswordBlockCount
requireHealthyDeviceReport False
osMinimumVersion 10.0.19042.1706
osMaximumVersion
mobileOsMinimumVersion
mobileOsMaximumVersion
earlyLaunchAntiMalwareDriverEnabled False
bitLockerEnabled True
secureBootEnabled True
codeIntegrityEnabled True
storageRequireEncryption True
activeFirewallRequired True
defenderEnabled True
defenderVersion 4.18.1909.6
signatureOutOfDate True
rtpEnabled True
antivirusRequired True
antiSpywareRequired True
deviceThreatProtectionEnabled True
deviceThreatProtectionRequiredSecurityLevel medium
configurationManagerComplianceRequired False
tpmRequired True
deviceCompliancePolicyScript
validOperatingSystemBuildRanges

Assignments

Name MemberCount GroupType DynamicRule Intent
All Users - BuilIn - -

Default compliance policy for Android

900f8baa-812e-4886-a598-61f73001bae8

Name Value
@odata.type #microsoft.graph.androidCompliancePolicy
roleScopeTagIds 0
id 6351f163-7d4c-d232-81d6-5c3b8f29fcfe
createdDateTime 2020-04-30T03:52:01.9830971Z
description 900f8baa-812e-4886-a598-61f73001bae8
lastModifiedDateTime 2023-06-29T22:52:58.2368281Z
displayName Default compliance policy for Android
version 3
passwordRequired False
passwordMinimumLength
passwordRequiredType deviceDefault
requiredPasswordComplexity none
passwordMinutesOfInactivityBeforeLock 15
passwordExpirationDays
passwordPreviousPasswordBlockCount
passwordSignInFailureCountBeforeFactoryReset
securityPreventInstallAppsFromUnknownSources True
securityDisableUsbDebugging True
securityRequireVerifyApps True
deviceThreatProtectionEnabled True
deviceThreatProtectionRequiredSecurityLevel secured
advancedThreatProtectionRequiredSecurityLevel medium
securityBlockJailbrokenDevices True
securityBlockDeviceAdministratorManagedDevices True
osMinimumVersion 12
osMaximumVersion
minAndroidSecurityPatchLevel
storageRequireEncryption True
securityRequireSafetyNetAttestationBasicIntegrity True
securityRequireSafetyNetAttestationCertifiedDevice True
securityRequireGooglePlayServices True
securityRequireUpToDateSecurityProviders True
securityRequireCompanyPortalAppIntegrity True
conditionStatementId
restrictedApps

Assignments

Name MemberCount GroupType DynamicRule Intent
IT Operations and Development 0 Static - -

Device Configuration Policies (Settings Catalog)

This section contains a list of all device configuration policies available in Intune.

MS Edge Baseline

createdDateTime creationSource description lastModifiedDateTime name
2023-06-30T17:26:33.3734897Z 2023-06-30T17:26:59.6545876Z MS Edge Baseline

Assignments

Name MemberCount GroupType DynamicRule Intent
Windows 0 DynamicDevice (device.deviceOSType -eq “Windows”) -

Settings

DisplayName ID Value ValueName
Control which extensions cannot be installed device_vendor_msft_policy_config_microsoft_edgepolicymicrosoft_edge~extensions_extensioninstallblocklist 1 Enabled
Allow Basic authentication for HTTP device_vendor_msft_policy_config_microsoft_edgev88.0.705.23policymicrosoft_edge~httpauthentication_basicauthoverhttpenabled 0 Disabled
Supported authentication schemes device_vendor_msft_policy_config_microsoft_edgepolicymicrosoft_edge~httpauthentication_authschemes 1 Enabled
Allow user-level native messaging hosts (installed without admin permissions) device_vendor_msft_policy_config_microsoft_edgepolicymicrosoft_edge~nativemessaging_nativemessaginguserlevelhosts 0 Disabled
Enable saving passwords to the password manager device_vendor_msft_policy_config_microsoft_edgepolicymicrosoft_edge~passwordmanager_passwordmanagerenabled 0 Disabled
Specifies whether to allow insecure websites to make requests to more-private network endpoints device_vendor_msft_policy_config_microsoft_edgev92policymicrosoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowed 0 Disabled
Configure Microsoft Defender SmartScreen device_vendor_msft_policy_config_microsoft_edgepolicymicrosoft_edge~smartscreen_smartscreenenabled 1 Enabled
Configure Microsoft Defender SmartScreen to block potentially unwanted apps device_vendor_msft_policy_config_microsoft_edgev80diffpolicymicrosoft_edge~smartscreen_smartscreenpuaenabled 1 Enabled
Prevent bypassing Microsoft Defender SmartScreen prompts for sites device_vendor_msft_policy_config_microsoft_edgepolicymicrosoft_edge~smartscreen_preventsmartscreenpromptoverride 1 Enabled
Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads device_vendor_msft_policy_config_microsoft_edgepolicymicrosoft_edge~smartscreen_preventsmartscreenpromptoverrideforfiles 1 Enabled
Allow unconfigured sites to be reloaded in Internet Explorer mode device_vendor_msft_policy_config_microsoft_edgev92policymicrosoft_edge_internetexplorerintegrationreloadiniemodeallowed 0 Disabled
Allow users to proceed from the HTTPS warning page device_vendor_msft_policy_config_microsoft_edgepolicymicrosoft_edge_sslerroroverrideallowed 0 Disabled
Enable browser legacy extension point blocking device_vendor_msft_policy_config_microsoft_edgev95policymicrosoft_edge_browserlegacyextensionpointsblockingenabled 1 Enabled
Enable site isolation for every site device_vendor_msft_policy_config_microsoft_edgepolicymicrosoft_edge_siteperprocess 1 Enabled
Enhance images enabled device_vendor_msft_policy_config_microsoft_edgev97policymicrosoft_edge_edgeenhanceimagesenabled 0 Disabled
Force WebSQL to be enabled device_vendor_msft_policy_config_microsoft_edgev107policymicrosoft_edge_websqlaccess 0 Disabled
Minimum TLS version enabled device_vendor_msft_policy_config_microsoft_edgepolicymicrosoft_edge_sslversionmin 1 Enabled
Show the Reload in Internet Explorer mode button in the toolbar device_vendor_msft_policy_config_microsoft_edgev96policymicrosoft_edge_internetexplorermodetoolbarbuttonenabled 0 Disabled
Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context device_vendor_msft_policy_config_microsoft_edgev111policymicrosoft_edge_sharedarraybufferunrestrictedaccessallowed 0 Disabled

Device Configuration

This section contains a list of all device configuration profiles available in Intune.

ADMX Brave Policies

GPO policies for Brave Browser (based on Chromium Project)

Name Value
@odata.type #microsoft.graph.windows10CustomConfiguration
id 88ea07da-06ef-4185-b940-92abff9c7dfa
lastModifiedDateTime 2022-06-22T17:09:23.6603703Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2021-11-09T19:49:41.7163565Z
description GPO policies for Brave Browser (based on Chromium Project)
displayName ADMX Brave Policies
version 7
omaSettings ;;

Custom OMA-Uri

@odata.type displayName description omaUri secretReferenceValueId
#microsoft.graph.omaSettingString Brave ADMX Ingestion Brave ADMX Version 1.31.91 ./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Brave/Policy/BraveAdmx aeaba85a-84ce-4deb-b0fd-e22de311a7a7_88ea07da-06ef-4185-b940-92abff9c7dfa_74ac897b-fc96-43e9-b5d4-495d1a381ab3
#microsoft.graph.omaSettingString Brave ADMX ExtensionInstallForcelist Default extensions for Brave Browser ./Device/Vendor/MSFT/Policy/Config/BravePolicybravesoftware~Extensions/ExtensionInstallForcelist aeaba85a-84ce-4deb-b0fd-e22de311a7a7_88ea07da-06ef-4185-b940-92abff9c7dfa_c482246c-1ee9-4dd2-85eb-d316f7c2f22b
#microsoft.graph.omaSettingString Brave ADMX DisableSafeBrowsingProceedAnyway DisableSafeBrowsingProceedAnyway ./Device/Vendor/MSFT/Policy/Config/BravePolicybravesoftware/DisableSafeBrowsingProceedAnyway aeaba85a-84ce-4deb-b0fd-e22de311a7a7_88ea07da-06ef-4185-b940-92abff9c7dfa_274f5592-3029-4dc7-8369-867ea71be921

ADMX Chrome Policies

Default security policies and extensions for Windows.

Name Value
@odata.type #microsoft.graph.windows10CustomConfiguration
id 48b6c505-16be-4666-a661-5a745455229c
lastModifiedDateTime 2022-09-22T18:19:07.9237327Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2021-11-05T21:20:07.558478Z
description Default security policies and extensions for Windows.
displayName ADMX Chrome Policies
version 20
omaSettings ;;

Assignments

Name MemberCount GroupType DynamicRule Intent
All Users - BuilIn - apply

Custom OMA-Uri

@odata.type displayName description omaUri secretReferenceValueId
#microsoft.graph.omaSettingString Chrome ADMX Ingestion Chrome ADMX Version – 95.0.4638.69 ./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Chrome/Policy/ChromeAdmx aeaba85a-84ce-4deb-b0fd-e22de311a7a7_48b6c505-16be-4666-a661-5a745455229c_d7272c3b-c70b-478c-8c5c-0f4c93974073
#microsoft.graph.omaSettingString Chrome – ADMX – ExtensionInstallForcelist Default extensions to improve Chrome security. ./Device/Vendor/MSFT/Policy/Config/ChromePolicygooglechrome~Extensions/ExtensionInstallForcelist aeaba85a-84ce-4deb-b0fd-e22de311a7a7_48b6c505-16be-4666-a661-5a745455229c_4ef82b66-26ca-4a0f-a967-34db429f44e8
#microsoft.graph.omaSettingString Chrome – ADMX – DisableSafeBrowsingProceedAnyway DisableSafeBrowsingProceedAnyway ./Device/Vendor/MSFT/Policy/Config/ChromePolicygooglechrome/DisableSafeBrowsingProceedAnyway aeaba85a-84ce-4deb-b0fd-e22de311a7a7_48b6c505-16be-4666-a661-5a745455229c_7b14bd9d-2ed0-4f0d-9622-4c70de63168b

ADMX Firefox Default Policies

Default Firefox policies to enhance security and usability.

Name Value
@odata.type #microsoft.graph.windows10CustomConfiguration
id 2bc3f272-cb4c-486b-b010-6ee05c40bd49
lastModifiedDateTime 2022-07-06T18:34:07.9489305Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2021-11-08T19:03:51.7931645Z
description Default Firefox policies to enhance security and usability.
displayName ADMX Firefox Default Policies
version 7
omaSettings ;

Assignments

Name MemberCount GroupType DynamicRule Intent
All Users - BuilIn - apply

Custom OMA-Uri

@odata.type displayName description omaUri secretReferenceValueId
#microsoft.graph.omaSettingString Firefox ADMX Default Firefox Settings ./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Firefox/Policy/FirefoxAdmx aeaba85a-84ce-4deb-b0fd-e22de311a7a7_2bc3f272-cb4c-486b-b010-6ee05c40bd49_b1f1e87d-fc54-4ae5-81f9-1bd8b3dec644
#microsoft.graph.omaSettingString Required Extensions List of extensions to force install ./Device/Vendor/MSFT/Policy/Config/FirefoxPolicyfirefox~Extensions/ExtensionSettings aeaba85a-84ce-4deb-b0fd-e22de311a7a7_2bc3f272-cb4c-486b-b010-6ee05c40bd49_f3ec6f4a-f12d-4f51-9978-6cadec4973c1

ADMX Vivaldi Policies

Name Value
@odata.type #microsoft.graph.windows10CustomConfiguration
id 75238f78-eaf9-42e7-9c78-cf9481e37b45
lastModifiedDateTime 2022-06-14T21:04:06.8792233Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2022-06-14T19:37:09.0006204Z
description
displayName ADMX Vivaldi Policies
version 5
omaSettings ;

Assignments

Name MemberCount GroupType DynamicRule Intent
IT Operations and Development 0 Static - apply

Custom OMA-Uri

@odata.type displayName description omaUri secretReferenceValueId
#microsoft.graph.omaSettingString Vivaldi ADMX Ingestion ./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Vivaldi/Policy/ChromeAdmx aeaba85a-84ce-4deb-b0fd-e22de311a7a7_75238f78-eaf9-42e7-9c78-cf9481e37b45_f64caedb-a713-4806-b268-338f14529980
#microsoft.graph.omaSettingString Vivaldi – ADMX – ExtensionInstallForcelist Company required extensions. ./Device/Vendor/MSFT/Policy/Config/VivaldiPolicygooglechrome~Extensions/ExtensionInstallForcelist aeaba85a-84ce-4deb-b0fd-e22de311a7a7_75238f78-eaf9-42e7-9c78-cf9481e37b45_c667d603-bc7c-40e7-b2ee-aef7f2d9ca79

Baseline Android Device Restrictions

Name Value
@odata.type #microsoft.graph.androidWorkProfileGeneralDeviceConfiguration
id a8b4eeb8-0204-4964-9a6d-a99e7cb17cf4
lastModifiedDateTime 2023-06-29T22:56:31.7835243Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2021-11-16T19:13:08.4360714Z
description
displayName Baseline Android Device Restrictions
version 2
passwordBlockFaceUnlock False
passwordBlockFingerprintUnlock False
passwordBlockIrisUnlock False
passwordBlockTrustAgents False
passwordExpirationDays 365
passwordMinimumLength 10
passwordMinutesOfInactivityBeforeScreenTimeout 15
passwordPreviousPasswordBlockCount 5
passwordSignInFailureCountBeforeFactoryReset 5
passwordRequiredType required
requiredPasswordComplexity medium
workProfileAllowAppInstallsFromUnknownSources False
workProfileDataSharingType allowPersonalToWork
workProfileBlockNotificationsWhileDeviceLocked False
workProfileBlockAddingAccounts False
workProfileBluetoothEnableContactSharing False
workProfileBlockScreenCapture False
workProfileBlockCrossProfileCallerId False
workProfileBlockCamera False
workProfileBlockCrossProfileContactsSearch False
workProfileBlockCrossProfileCopyPaste False
workProfileDefaultAppPermissionPolicy prompt
workProfilePasswordBlockFaceUnlock False
workProfilePasswordBlockFingerprintUnlock False
workProfilePasswordBlockIrisUnlock False
workProfilePasswordBlockTrustAgents False
workProfilePasswordExpirationDays
workProfilePasswordMinimumLength
workProfilePasswordMinNumericCharacters
workProfilePasswordMinNonLetterCharacters
workProfilePasswordMinLetterCharacters
workProfilePasswordMinLowerCaseCharacters
workProfilePasswordMinUpperCaseCharacters
workProfilePasswordMinSymbolCharacters
workProfilePasswordMinutesOfInactivityBeforeScreenTimeout
workProfilePasswordPreviousPasswordBlockCount
workProfilePasswordSignInFailureCountBeforeFactoryReset
workProfilePasswordRequiredType deviceDefault
workProfileRequiredPasswordComplexity none
workProfileRequirePassword False
securityRequireVerifyApps True
vpnAlwaysOnPackageIdentifier
vpnEnableAlwaysOnLockdownMode False
workProfileAllowWidgets False
workProfileBlockPersonalAppInstallsFromUnknownSources True
workProfileAccountUse allowAllExceptGoogleAccounts
allowedGoogleAccountDomains

Assignments

Name MemberCount GroupType DynamicRule Intent
IT Operations and Development 0 Static - apply

Disable MS WUDO

Disables Microsofts P2P local network update sharing.

Name Value
@odata.type #microsoft.graph.windowsDeliveryOptimizationConfiguration
id a4e50ef4-36e6-4d40-b072-adb3ae1d6ee9
lastModifiedDateTime 2022-07-27T19:48:10.2332014Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2022-07-27T19:48:10.2332014Z
description Disables Microsofts P2P local network update sharing.
displayName Disable MS WUDO
version 1
deliveryOptimizationMode simpleDownload
restrictPeerSelectionBy notConfigured
groupIdSource
bandwidthMode
backgroundDownloadFromHttpDelayInSeconds 0
foregroundDownloadFromHttpDelayInSeconds
minimumRamAllowedToPeerInGigabytes
minimumDiskSizeAllowedToPeerInGigabytes
minimumFileSizeToCacheInMegabytes
minimumBatteryPercentageAllowedToUpload
modifyCacheLocation
maximumCacheAgeInDays
maximumCacheSize
vpnPeerCaching notConfigured
cacheServerHostNames
cacheServerForegroundDownloadFallbackToHttpDelayInSeconds 0
cacheServerBackgroundDownloadFallbackToHttpDelayInSeconds 0

Assignments

Name MemberCount GroupType DynamicRule Intent
All Users - BuilIn - apply
All Devices - BuilIn - apply

Mac Approve System Extensions

This profile is needed for MacOS 10.15 (Catalina) or newer. It will be ignored on older MacOS.

Name Value
@odata.type #microsoft.graph.macOSExtensionsConfiguration
id 175c09f6-f23c-4d11-bda3-4a8714c81c6b
lastModifiedDateTime 2022-04-08T16:18:44.9450642Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2022-04-08T16:14:57.8940764Z
description This profile is needed for MacOS 10.15 (Catalina) or newer. It will be ignored on older MacOS.
displayName Mac Approve System Extensions
version 2
kernelExtensionOverridesAllowed False
kernelExtensionAllowedTeamIdentifiers
systemExtensionsBlockOverride False
systemExtensionsAllowedTeamIdentifiers
kernelExtensionsAllowed
systemExtensionsAllowed ;
systemExtensionsAllowedTypes

Assignments

Name MemberCount GroupType DynamicRule Intent
Apple Business 0 Static (device.deviceOSType -contains “macOS”) or (device.deviceOSType -contains “OS X”) or (device.deviceModel -contains “MacBook Air”) or (device.deviceModel -contains “MacBook Pro”) apply

Mac Defender for Endpoint Full Disk Access

MacOS 10.15 (Catalina) contains new security and privacy enhancements. Beginning with this version, by default, applications are not able to access certain locations on disk (such as Documents, Downloads, Desktop, etc.) without explicit consent. In the absence of this consent, Microsoft Defender for Endpoint is not able to fully protect your device.

This configuration profile grants Full Disk Access to Microsoft Defender for Endpoint.

Name Value
@odata.type #microsoft.graph.macOSCustomConfiguration
id 4e6ba603-3ae3-4951-9e9e-80a0196bb6e2
lastModifiedDateTime 2022-04-08T16:27:10.2182329Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2022-04-08T16:24:29.2615421Z
description MacOS 10.15 (Catalina) contains new security and privacy enhancements. Beginning with this version, by default, applications are not able to access certain locations on disk (such as Documents, Downloads, Desktop, etc.) without explicit consent. In the absence of this consent, Microsoft Defender for Endpoint is not able to fully protect your device.

This configuration profile grants Full Disk Access to Microsoft Defender for Endpoint.
displayName Mac Defender for Endpoint Full Disk Access
version 2
payloadName Mac MDATP Full Disk Access
payloadFileName fulldisk.mobileconfig
payload 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
deploymentChannel deviceChannel

Assignments

Name MemberCount GroupType DynamicRule Intent
Apple Business 0 Static (device.deviceOSType -contains “macOS”) or (device.deviceOSType -contains “OS X”) or (device.deviceModel -contains “MacBook Air”) or (device.deviceModel -contains “MacBook Pro”) apply

Mac Defender for Endpoint Network Filter

As part of the Endpoint Detection and Response capabilities, Microsoft Defender for Endpoint on macOS inspects socket traffic and reports this information to the Microsoft 365 Defender portal. The following policy allows the network extension to perform this functionality.

Name Value
@odata.type #microsoft.graph.macOSCustomConfiguration
id 5d61dac5-40ce-47d8-80fc-73e8dbaa48ba
lastModifiedDateTime 2022-04-08T16:26:17.6611486Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2022-04-08T16:26:17.6611486Z
description As part of the Endpoint Detection and Response capabilities, Microsoft Defender for Endpoint on macOS inspects socket traffic and reports this information to the Microsoft 365 Defender portal. The following policy allows the network extension to perform this functionality.
displayName Mac Defender for Endpoint Network Filter
version 1
payloadName Mac Defender for Endpoint Network Filter
payloadFileName netfilter.mobileconfig
payload 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
deploymentChannel deviceChannel

Assignments

Name MemberCount GroupType DynamicRule Intent
Apple Business 0 Static (device.deviceOSType -contains “macOS”) or (device.deviceOSType -contains “OS X”) or (device.deviceModel -contains “MacBook Air”) or (device.deviceModel -contains “MacBook Pro”) apply

Mac Defender for Endpoint Notifications

This profile is used to allow Microsoft Defender for Endpoint on macOS and Microsoft Auto Update to display notifications in UI on macOS 10.15 (Catalina) or newer.

Name Value
@odata.type #microsoft.graph.macOSCustomConfiguration
id 43e52813-e3b7-478e-a692-a52cddf1b3f1
lastModifiedDateTime 2022-04-08T16:28:34.6059984Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2022-04-08T16:28:34.6059984Z
description This profile is used to allow Microsoft Defender for Endpoint on macOS and Microsoft Auto Update to display notifications in UI on macOS 10.15 (Catalina) or newer.
displayName Mac Defender for Endpoint Notifications
version 1
payloadName Mac Defender for Endpoint Notifications
payloadFileName notif.mobileconfig
payload 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
deploymentChannel deviceChannel

Assignments

Name MemberCount GroupType DynamicRule Intent
Apple Business 0 Static (device.deviceOSType -contains “macOS”) or (device.deviceOSType -contains “OS X”) or (device.deviceModel -contains “MacBook Air”) or (device.deviceModel -contains “MacBook Pro”) apply

Mac Firewall

Require enable/disable firewall on MacOS devices.

Name Value
@odata.type #microsoft.graph.macOSEndpointProtectionConfiguration
id be972483-7f59-4965-bbd7-41aaa9c0b1cc
lastModifiedDateTime 2022-05-26T17:04:45.3012193Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2022-05-26T17:04:45.3012193Z
description Require enable/disable firewall on MacOS devices.
displayName Mac Firewall
version 1
gatekeeperAllowedAppSource macAppStoreAndIdentifiedDevelopers
gatekeeperBlockOverride True
firewallEnabled True
firewallBlockAllIncoming False
firewallEnableStealthMode True
fileVaultEnabled False
fileVaultSelectedRecoveryKeyTypes notConfigured
fileVaultInstitutionalRecoveryKeyCertificate
fileVaultInstitutionalRecoveryKeyCertificateFileName
fileVaultPersonalRecoveryKeyHelpMessage
fileVaultAllowDeferralUntilSignOut False
fileVaultNumberOfTimesUserCanIgnore
fileVaultDisablePromptAtSignOut False
fileVaultPersonalRecoveryKeyRotationInMonths
fileVaultHidePersonalRecoveryKey False
advancedThreatProtectionRealTime notConfigured
advancedThreatProtectionCloudDelivered notConfigured
advancedThreatProtectionAutomaticSampleSubmission notConfigured
advancedThreatProtectionDiagnosticDataCollection notConfigured
advancedThreatProtectionExcludedFolders
advancedThreatProtectionExcludedFiles
advancedThreatProtectionExcludedExtensions
advancedThreatProtectionExcludedProcesses
firewallApplications

Assignments

Name MemberCount GroupType DynamicRule Intent
Apple Business 0 Static (device.deviceOSType -contains “macOS”) or (device.deviceOSType -contains “OS X”) or (device.deviceModel -contains “MacBook Air”) or (device.deviceModel -contains “MacBook Pro”) apply

Mac Kernel Extensions

This profile is needed for MacOS 10.15 (Catalina) or older. It will be ignored on newer MacOS.

Name Value
@odata.type #microsoft.graph.macOSExtensionsConfiguration
id a4dc11b2-744a-4cff-88a3-1190841b926e
lastModifiedDateTime 2022-04-08T16:16:51.6711364Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2022-04-08T16:16:51.6711364Z
description This profile is needed for MacOS 10.15 (Catalina) or older. It will be ignored on newer MacOS.
displayName Mac Kernel Extensions
version 1
kernelExtensionOverridesAllowed False
kernelExtensionAllowedTeamIdentifiers UBF8T346G9
systemExtensionsBlockOverride False
systemExtensionsAllowedTeamIdentifiers
kernelExtensionsAllowed
systemExtensionsAllowed
systemExtensionsAllowedTypes

Assignments

Name MemberCount GroupType DynamicRule Intent
Apple Business 0 Static (device.deviceOSType -contains “macOS”) or (device.deviceOSType -contains “OS X”) or (device.deviceModel -contains “MacBook Air”) or (device.deviceModel -contains “MacBook Pro”) apply

Mac MDATP onboarding

Required for all Mac versions

Name Value
@odata.type #microsoft.graph.macOSCustomConfiguration
id e8e07c2d-2bc0-4353-966b-28a2bf8523ca
lastModifiedDateTime 2022-04-08T16:18:00.3773667Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2022-04-08T16:10:49.4278089Z
description Required for all Mac versions
displayName Mac MDATP onboarding
version 2
payloadName MDATP onboarding for MacOS
payloadFileName WindowsDefenderATPOnboarding.xml
payload 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
deploymentChannel deviceChannel

Assignments

Name MemberCount GroupType DynamicRule Intent
Apple Business 0 Static (device.deviceOSType -contains “macOS”) or (device.deviceOSType -contains “OS X”) or (device.deviceModel -contains “MacBook Air”) or (device.deviceModel -contains “MacBook Pro”) apply

XenFi Wifi

WiFi settings for the SLC office.

Name Value
@odata.type #microsoft.graph.windowsWifiConfiguration
id ace48d61-3a43-4ce6-99fe-26d402cb79b9
lastModifiedDateTime 2022-07-21T22:04:56.4401848Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2021-11-05T20:34:22.9695876Z
description WiFi settings for the SLC office.
displayName XenFi Wifi
version 4
preSharedKey
wifiSecurityType wpa2Personal
meteredConnectionLimit unrestricted
ssid XenFi
networkName XenFi
connectAutomatically True
connectToPreferredNetwork
connectWhenNetworkNameIsHidden False
proxySetting none
proxyManualAddress
proxyManualPort
proxyAutomaticConfigurationUrl
forceFIPSCompliance True

Assignments

Name MemberCount GroupType DynamicRule Intent
All Users - BuilIn - apply

XenFi WiFi

Name Value
@odata.type #microsoft.graph.macOSWiFiConfiguration
id c459745f-cbbf-4aac-bd08-b7ae4d6f2b64
lastModifiedDateTime 2022-07-21T21:28:40.5549418Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2022-03-25T17:18:04.8235953Z
description
displayName XenFi WiFi
version 5
networkName 94490a93-da69-43b9-8e82-91cfcf020a4a
ssid XenFi
connectAutomatically True
connectWhenNetworkNameIsHidden False
wiFiSecurityType wpaPersonal
proxySettings none
proxyManualAddress
proxyManualPort
proxyAutomaticConfigurationUrl
preSharedKey

Assignments

Name MemberCount GroupType DynamicRule Intent
Apple Business 0 Static (device.deviceOSType -contains “macOS”) or (device.deviceOSType -contains “OS X”) or (device.deviceModel -contains “MacBook Air”) or (device.deviceModel -contains “MacBook Pro”) apply

Enrollment Configuration

This section contains all Enrollment configurations in Intune.

Enrollment Limit - All users and all devices

This is the default Device Limit Restriction applied with the lowest priority to all users regardless of group membership.

All users and all devices

Name Value
@odata.type #microsoft.graph.deviceEnrollmentLimitConfiguration
id aeaba85a-84ce-4deb-b0fd-e22de311a7a7_DefaultLimit
displayName All users and all devices
description This is the default Device Limit Restriction applied with the lowest priority to all users regardless of group membership.
priority 0
createdDateTime 0001-01-01T00:00:00Z
lastModifiedDateTime 2023-03-16T15:52:58Z
version 0
roleScopeTagIds
deviceEnrollmentConfigurationType limit
limit 5

Assignments

Name MemberCount GroupType DynamicRule Intent
All Devices - BuilIn - -

Platform Restrictions - All users and all devices

This is the default Device Type Restriction applied with the lowest priority to all users regardless of group membership.

All users and all devices

Name Value
@odata.type #microsoft.graph.deviceEnrollmentPlatformRestrictionsConfiguration
id aeaba85a-84ce-4deb-b0fd-e22de311a7a7_DefaultPlatformRestrictions
displayName All users and all devices
description This is the default Device Type Restriction applied with the lowest priority to all users regardless of group membership.
priority 0
createdDateTime 0001-01-01T00:00:00Z
lastModifiedDateTime 2023-03-16T15:52:58Z
version 0
roleScopeTagIds
deviceEnrollmentConfigurationType platformRestrictions
iosRestriction @{platformBlocked=False; personalDeviceEnrollmentBlocked=False; osMinimumVersion=; osMaximumVersion=; blockedManufacturers=System.Object[]; blockedSkus=System.Object[]}
windowsRestriction @{platformBlocked=False; personalDeviceEnrollmentBlocked=False; osMinimumVersion=; osMaximumVersion=; blockedManufacturers=System.Object[]; blockedSkus=System.Object[]}
windowsHomeSkuRestriction @{platformBlocked=False; personalDeviceEnrollmentBlocked=False; osMinimumVersion=; osMaximumVersion=; blockedManufacturers=System.Object[]; blockedSkus=System.Object[]}
windowsMobileRestriction @{platformBlocked=True; personalDeviceEnrollmentBlocked=False; osMinimumVersion=; osMaximumVersion=; blockedManufacturers=System.Object[]; blockedSkus=System.Object[]}
androidRestriction @{platformBlocked=False; personalDeviceEnrollmentBlocked=False; osMinimumVersion=; osMaximumVersion=; blockedManufacturers=System.Object[]; blockedSkus=System.Object[]}
androidForWorkRestriction @{platformBlocked=False; personalDeviceEnrollmentBlocked=False; osMinimumVersion=; osMaximumVersion=; blockedManufacturers=System.Object[]; blockedSkus=System.Object[]}
macRestriction @{platformBlocked=False; personalDeviceEnrollmentBlocked=False; osMinimumVersion=; osMaximumVersion=; blockedManufacturers=System.Object[]; blockedSkus=System.Object[]}
macOSRestriction @{platformBlocked=False; personalDeviceEnrollmentBlocked=False; osMinimumVersion=; osMaximumVersion=; blockedManufacturers=System.Object[]; blockedSkus=System.Object[]}

Assignments

Name MemberCount GroupType DynamicRule Intent
All Devices - BuilIn - -

Windows Hello for Business - All users and all devices

This is the default Windows Hello for Business configuration applied with the lowest priority to all users regardless of group membership.

All users and all devices

Name Value
@odata.type #microsoft.graph.deviceEnrollmentWindowsHelloForBusinessConfiguration
id aeaba85a-84ce-4deb-b0fd-e22de311a7a7_DefaultWindowsHelloForBusiness
displayName All users and all devices
description This is the default Windows Hello for Business configuration applied with the lowest priority to all users regardless of group membership.
priority 0
createdDateTime 0001-01-01T00:00:00Z
lastModifiedDateTime 2023-03-16T15:52:58Z
version 0
roleScopeTagIds
deviceEnrollmentConfigurationType windowsHelloForBusiness
pinMinimumLength 6
pinMaximumLength 127
pinUppercaseCharactersUsage allowed
pinLowercaseCharactersUsage allowed
pinSpecialCharactersUsage allowed
state enabled
securityDeviceRequired False
unlockWithBiometricsEnabled True
remotePassportEnabled True
pinPreviousBlockCount 5
pinExpirationInDays 0
enhancedBiometricsState enabled
securityKeyForSignIn enabled
enhancedSignInSecurity 0

Assignments

Name MemberCount GroupType DynamicRule Intent
All Devices - BuilIn - -

ESP - All users and all devices

This is the default enrollment status screen configuration applied with the lowest priority to all users and all devices regardless of group membership.

All users and all devices

Name Value
@odata.type #microsoft.graph.windows10EnrollmentCompletionPageConfiguration
id aeaba85a-84ce-4deb-b0fd-e22de311a7a7_DefaultWindows10EnrollmentCompletionPageConfiguration
displayName All users and all devices
description This is the default enrollment status screen configuration applied with the lowest priority to all users and all devices regardless of group membership.
priority 0
createdDateTime 0001-01-01T00:00:00Z
lastModifiedDateTime 2023-03-16T15:52:58Z
version 0
roleScopeTagIds
deviceEnrollmentConfigurationType windows10EnrollmentCompletionPageConfiguration
showInstallationProgress False
blockDeviceSetupRetryByUser True
allowDeviceResetOnInstallFailure False
allowLogCollectionOnInstallFailure False
customErrorMessage
installProgressTimeoutInMinutes 0
allowDeviceUseOnInstallFailure False
selectedMobileAppIds
allowNonBlockingAppInstallation False
installQualityUpdates False
trackInstallProgressForAutopilotOnly False
disableUserStatusTrackingAfterFirstUser False

Assignments

Name MemberCount GroupType DynamicRule Intent
All Devices - BuilIn - -

ESP - Basics

Basics

Name Value
@odata.type #microsoft.graph.windows10EnrollmentCompletionPageConfiguration
id 9f9dc144-f24f-451b-a1fd-8893946fa431_Windows10EnrollmentCompletionPageConfiguration
displayName Basics
description
priority 1
createdDateTime 2023-06-13T21:55:48.8745341Z
lastModifiedDateTime 2023-06-15T18:36:22.4965083Z
version 4
roleScopeTagIds 0
deviceEnrollmentConfigurationType windows10EnrollmentCompletionPageConfiguration
showInstallationProgress True
blockDeviceSetupRetryByUser False
allowDeviceResetOnInstallFailure True
allowLogCollectionOnInstallFailure True
customErrorMessage Setup could not be completed. Please try again or contact your support person for help.
installProgressTimeoutInMinutes 60
allowDeviceUseOnInstallFailure True
selectedMobileAppIds b98f3b19-45cf-4134-a4fc-e921f17859e0
allowNonBlockingAppInstallation False
installQualityUpdates False
trackInstallProgressForAutopilotOnly True
disableUserStatusTrackingAfterFirstUser True

Assignments

Name MemberCount GroupType DynamicRule Intent
Windows Autopilot 0 DynamicDevice (device.devicePhysicalIDs -any (_ -contains “[ZTDID]”)) -

Device Management Partners

This section contains all device management partners defined in Intune.

Jamf

Name Value
id 007d2fff-e0dd-4b28-8595-cec005efe5cd
lastHeartbeatDateTime 0001-01-01T00:00:00Z
partnerState unknown
partnerAppType singleTenantApp
singleTenantAppId
displayName Jamf
isConfigured False
whenPartnerDevicesWillBeRemovedDateTime
whenPartnerDevicesWillBeMarkedAsNonCompliantDateTime
groupsRequiringPartnerEnrollment

PowerShell Scripts

This section contains a list of all PowerShell scripts available in Intune.

Patch CVE-2022-30190

https://github.com/XenterMD/CVE-Patching/blob/main/2022/cve-2022-30190.ps1

Name Value
id 1570d01f-89a4-41d1-8bf6-d7ca844d1b17
displayName Patch CVE-2022-30190
description https://github.com/XenterMD/CVE-Patching/blob/main/2022/cve-2022-30190.ps1
enforceSignatureCheck False
runAs32Bit True
runAsAccount system
fileName cve-2022-30190.ps1
scriptContent <#
Source:
https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/

On Monday May 30, 2022, Microsoft issued CVE-2022-30190 regarding the Microsoft Support Diagnostic Tool (MSDT) in Windows vulnerability.

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights.

Workaround:
To disable the MSDT URL Protocol
Disabling MSDT URL protocol prevents troubleshooters being launched as links including links throughout the operating system. Troubleshooters can still be accessed using the Get Help application and in system settings as other or additional troubleshooters. Follow these steps to disable:
1. Run Command Prompt as Administrator.
2. To back up the registry key, execute the command “reg export HKEY_CLASSES_ROOT-msdt filename“
3. Execute the command “reg delete HKEY_CLASSES_ROOT-msdt /f”.

How to undo the workaround
1. Run Command Prompt as Administrator.
2. To back up the registry key, execute the command “reg import filename”

Microsoft Defender Detections & Protections
Customers with Microsoft Defender Antivirus should turn-on cloud-delivered protection and automatic sample submission. These capabilities use artificial intelligence and machine learning to quickly identify and stop new and unknown threats.
Customers of Microsoft Defender for Endpoint can enable attack surface reduction rule “BlockOfficeCreateProcessRule” that blocks Office apps from creating child processes. Creating malicious child processes is a common malware strategy. For more information see Attack surface reduction rules overview.

Microsoft Defender Antivirus provides detections and protections for possible vulnerability exploitation under the following signatures using detection build 1.367.719.0 or newer:
- Trojan:Win32/Mesdetty.A  (blocks msdt command line)
- Trojan:Win32/Mesdetty.B  (blocks msdt command line)
- Behavior:Win32/MesdettyLaunch.A!blk (terminates the process that launched msdt command line)

Microsoft Defender for Endpoint provides customers detections and alerts. The following alert title in the Microsoft 365 Defender portal can indicate threat activity on your network:
- Suspicious behavior by an Office application
- Suspicious behavior by Msdt.exe
#>

# Define registry key
\(regkey = "HKEY_CLASSES_ROOT\ms-msdt"<br /> # Define backup location<br />\)bak = “C:_ms-msdt.reg.bak”
# If regkey exists
if (Test-Path -Path registry::$regkey) {
Write-Host -ForegroundColor Red “Vulnerability detected: CVE-2022-30190. Beginning remediation…”
# Backup registry key
reg export $regkey $bak /y | Out-Null
# Delete registry key
reg delete $regkey /f | Out-Null
Write-Host -ForegroundColor Green “Remediation complete.”
}

Assignments

Name MemberCount GroupType DynamicRule Intent
Windows 0 DynamicDevice (device.deviceOSType -eq “Windows”) -

Enable Application Guard

Force enable Application Guard feature on client machines.

Name Value
id 9010fde7-0bfb-466d-91bf-df158f7f4fcb
displayName Enable Application Guard
description Force enable Application Guard feature on client machines.
enforceSignatureCheck False
runAs32Bit True
runAsAccount system
fileName Enable-ApplicationGuard.ps1
scriptContent if((Get-WindowsOptionalFeature -FeatureName Windows-Defender-ApplicationGuard -Online).State -eq “Disabled”)
{
Enable-WindowsOptionalFeature -online -FeatureName Windows-Defender-ApplicationGuard
}

Assignments

Name MemberCount GroupType DynamicRule Intent
All Users - BuilIn - -
All Devices - BuilIn - -

Enable WSL

Name Value
id 7e9a029a-7b70-4473-b044-747dc02425dc
displayName Enable WSL
description
enforceSignatureCheck False
runAs32Bit False
runAsAccount system
fileName Enable-Wsl.ps1
scriptContent nable-WindowsOptionalFeature -Online -FeatureName “Microsoft-Windows-Subsystem-Linux” -All -NoRestart

Assignments

Name MemberCount GroupType DynamicRule Intent
All Users 0 DynamicDevice All Users -

Disable WSL

Name Value
id a5da6193-1070-4fa9-a6f9-ce43b7c4e53e
displayName Disable WSL
description
enforceSignatureCheck False
runAs32Bit False
runAsAccount system
fileName Disable-Wsl.ps1
scriptContent isable-WindowsOptionalFeature -Online -FeatureName “Microsoft-Windows-Subsystem-Linux” -NoRestart

Security Baselines

This section contains a list of all Security Baseline profiles configured in Intune.

Default EDR policy for all devices

Default EDR policy for targetting all tenants devices, created by MDE.

Platform: windows10AndLater
Type: securityTemplate
Subtype: endpointDetectionReponse

Name Value
windowsDefenderAdvancedThreatProtectionConfiguration enableExpeditedTelemetryReporting True
windowsDefenderAdvancedThreatProtectionConfiguration allowSampleSharing False
windowsDefenderAdvancedThreatProtectionConfiguration advancedThreatProtectionAutoPopulateOnboardingBlob True
windowsDefenderAdvancedThreatProtectionConfiguration advancedThreatProtectionOnboardingBlob Value has been set
windowsDefenderAdvancedThreatProtectionConfiguration advancedThreatProtectionOffboardingBlob
windowsDefenderAdvancedThreatProtectionConfiguration advancedThreatProtectionBlobType notConfigured
windowsDefenderAdvancedThreatProtectionConfiguration advancedThreatProtectionOffboardingFilename
windowsDefenderAdvancedThreatProtectionConfiguration advancedThreatProtectionOnboardingFilename

Assignments

Name MemberCount GroupType DynamicRule Intent
All Devices - BuilIn - -

Force Enable Application Guard

Platform: windows10AndLater
Type: securityTemplate
Subtype: attackSurfaceReduction

Name Value
windows10EndpointProtectionConfiguration applicationGuardForceAuditing True
windows10EndpointProtectionConfiguration applicationGuardAllowPrintToXPS False
windows10EndpointProtectionConfiguration applicationGuardCertificateThumbprints
windows10EndpointProtectionConfiguration applicationGuardAllowVirtualGPU True
windows10EndpointProtectionConfiguration applicationGuardBlockClipboardSharing blockContainerToHost
windows10EndpointProtectionConfiguration applicationGuardAllowPrintToPDF True
windows10EndpointProtectionConfiguration applicationGuardBlockNonEnterpriseContent True
windows10EndpointProtectionConfiguration applicationGuardEnabledOptions enabledForEdgeAndOffice
windows10EndpointProtectionConfiguration applicationGuardAllowPrintToNetworkPrinters False
windows10EndpointProtectionConfiguration applicationGuardAllowFileSaveOnHost False
windows10EndpointProtectionConfiguration applicationGuardAllowPrintToLocalPrinters False
windows10EndpointProtectionConfiguration applicationGuardAllowPersistence True
windows10NetworkBoundaryConfiguration windowsNetworkIsolationPolicy
windows10EndpointProtectionConfiguration applicationGuardAllowCameraMicrophoneRedirection True

Assignments

Name MemberCount GroupType DynamicRule Intent
All Users - BuilIn - -

Alllow KnowBe4 Second Chance

Exception to allow Outlook to start a child process for KnowBe4 Second Chance .

Platform: windows10AndLater
Type: securityTemplate
Subtype: attackSurfaceReduction

Name Value
windows10EndpointProtectionConfiguration defenderProcessCreationType userDefined
windows10EndpointProtectionConfiguration defenderOfficeAppsLaunchChildProcessType userDefined
windows10EndpointProtectionConfiguration defenderOfficeAppsOtherProcessInjectionType userDefined
windows10EndpointProtectionConfiguration defenderAdditionalGuardedFolders
windows10EndpointProtectionConfiguration defenderOfficeCommunicationAppsLaunchChildProcess notConfigured
windows10EndpointProtectionConfiguration defenderEmailContentExecutionType userDefined
windows10EndpointProtectionConfiguration defenderAdobeReaderLaunchChildProcess notConfigured
windows10EndpointProtectionConfiguration defenderAdvancedRansomewareProtectionType notConfigured
windows10EndpointProtectionConfiguration defenderOfficeAppsExecutableContentCreationOrLaunchType userDefined
windows10EndpointProtectionConfiguration defenderAttackSurfaceReductionExcludedPaths
windows10EndpointProtectionConfiguration defenderGuardMyFoldersType
windows10EndpointProtectionConfiguration defenderPreventCredentialStealingType notConfigured
windows10EndpointProtectionConfiguration defenderUntrustedUSBProcessType userDefined
windows10EndpointProtectionConfiguration defenderScriptDownloadedPayloadExecutionType userDefined
windows10EndpointProtectionConfiguration defenderBlockPersistenceThroughWmiType userDefined
windows10EndpointProtectionConfiguration defenderOfficeMacroCodeAllowWin32ImportsType userDefined
windows10EndpointProtectionConfiguration defenderGuardedFoldersAllowedAppPaths
windows10EndpointProtectionConfiguration defenderScriptObfuscatedMacroCodeType userDefined
windows10EndpointProtectionConfiguration defenderUntrustedExecutableType userDefined

Assignments

Name MemberCount GroupType DynamicRule Intent
All Users - BuilIn - -

Windows Update Configuration

This section contains a list of all Windows Update configuration profiles available in Intune.

Update policy for Windows 10 devices

Name Value
@odata.type #microsoft.graph.windowsUpdateForBusinessConfiguration
id b1845d94-b421-44be-855b-35449c956e7c
lastModifiedDateTime 2021-11-01T21:44:07.2443272Z
roleScopeTagIds 0
supportsScopeTags True
deviceManagementApplicabilityRuleOsEdition
deviceManagementApplicabilityRuleOsVersion
deviceManagementApplicabilityRuleDeviceMode
createdDateTime 2021-09-09T16:45:43.0178385Z
description
displayName Update policy for Windows 10 devices
version 2
deliveryOptimizationMode httpWithPeeringNat
prereleaseFeatures userDefined
automaticUpdateMode autoInstallAtMaintenanceTime
microsoftUpdateServiceAllowed True
driversExcluded False
qualityUpdatesDeferralPeriodInDays 0
featureUpdatesDeferralPeriodInDays 0
qualityUpdatesPaused False
featureUpdatesPaused False
qualityUpdatesPauseExpiryDateTime 0001-01-01T00:00:00Z
featureUpdatesPauseExpiryDateTime 0001-01-01T00:00:00Z
businessReadyUpdatesOnly all
skipChecksBeforeRestart False
updateWeeks
qualityUpdatesPauseStartDate
featureUpdatesPauseStartDate
featureUpdatesRollbackWindowInDays
qualityUpdatesWillBeRolledBack
featureUpdatesWillBeRolledBack
qualityUpdatesRollbackStartDateTime 0001-01-01T00:00:00Z
featureUpdatesRollbackStartDateTime 0001-01-01T00:00:00Z
engagedRestartDeadlineInDays
engagedRestartSnoozeScheduleInDays
engagedRestartTransitionScheduleInDays
deadlineForFeatureUpdatesInDays
deadlineForQualityUpdatesInDays
deadlineGracePeriodInDays
postponeRebootUntilAfterDeadline
autoRestartNotificationDismissal notConfigured
scheduleRestartWarningInHours
scheduleImminentRestartWarningInMinutes
userPauseAccess notConfigured
userWindowsUpdateScanAccess notConfigured
updateNotificationLevel notConfigured
allowWindows11Upgrade False
installationSchedule @{@odata.type=#microsoft.graph.windowsUpdateActiveHoursInstall; activeHoursStart=06:00:00.0000000; activeHoursEnd=22:00:00.0000000}

Assignments

Name MemberCount GroupType DynamicRule Intent
All Users 0 DynamicDevice All Users apply

Mobile Apps

This section contains a list of all applications available in Intune.

Publisher DisplayName Type Assignments
15Five 15Five androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
8bit Solutions LLC Bitwarden Password Manager iosStoreApp Apple Business
- Intent:availableWithoutEnrollment
Adobe Adobe Acrobat Reader: Edit PDF androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Adobe Adobe Acrobat Sign androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Adobe Systems, Inc. Adobe Acrobat Reader DC MUI 22.001.20142 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
allDevicesAssignmentTarget
- Intent:required
Adobe Systems, Inc. Update for Adobe Acrobat DC Continuous Update 22.001.20142 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Adobe Systems, Inc. Update for Adobe Acrobat DC Update 15.006.30527 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Adobe Systems, Inc. Update for Adobe Acrobat DC Update 20.005.30334 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Adobe Systems, Inc. Update for Adobe Acrobat DC Update 22.001.20142 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Adobe Systems, Inc. Update for Adobe Acrobat Reader DC - MUI Update 15.006.30527 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Adobe Systems, Inc. Update for Adobe Acrobat Reader DC - MUI Update 20.005.30334 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Adobe Systems, Inc. Update for Adobe Acrobat Reader DC - MUI Update 22.001.20142 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Adobe Systems, Inc. Update for Adobe Acrobat Reader DC Continuous Update 22.001.20142 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Adobe Systems, Inc. Update for Adobe Acrobat Reader DC Update 22.001.20142 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Adobe Systems, Inc. Update for Adobe Connect 22.5.109.0 (MSI) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Adobe Systems, Inc. Update for Adobe Lightroom 5.7.1 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Adobe Systems, Inc. Update for Adobe Lightroom 5.7.1 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Amazon Corretto Update for Amazon Corretto 11 11.0.15.9 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Amazon Corretto Update for Amazon Corretto 17 17.0.3.6 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Amazon Corretto Update for Amazon Corretto 8 1.8.0.332 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Amazon Corretto Update for Amazon Corretto 8 1.8.0.332 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Amazon Corretto Update for Amazon Corretto Latest 18.0.0.37 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Amazon Mobile LLC Amazon Shopping androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Anaconda, Inc. Anaconda3 win32LobApp Engineering
- Intent:available
Apple Apple Bonjour 3.1.0.1 (x64) win32LobApp allDevicesAssignmentTarget
- Intent:uninstall
Apple Apple Bonjour 3.1.0.1 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:uninstall
allDevicesAssignmentTarget
- Intent:uninstall
Apple Apple Configurator iosStoreApp Information Technology
- Intent:available
IT Operations and Development
- Intent:available
Apple Apple iCloud 7.21.0.23 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
Apple Apple iCloud 7.21.0.23 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:uninstall
allDevicesAssignmentTarget
- Intent:uninstall
Apple Update for Apple Application Support 8.7 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Apple Update for Apple Application Support 8.7 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Apple Update for Apple Bonjour 3.1.0.1 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Apple Update for Apple Bonjour 3.1.0.1 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Apple Update for Apple iCloud 7.21.0.23 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Apple Update for Apple iCloud 7.21.0.23 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Apple Update for Apple iTunes 12.12.4.1 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Apple Update for Apple iTunes 12.12.4.1 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Apple Update for Apple Mobile Device Support 15.6.0.32 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Apple Update for Apple Mobile Device Support 15.6.0.32 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Apple Update for Apple Software Update 2.7.0.3 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Apple Inc iCloud winStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Atlassian Jira Cloud by Atlassian androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Atlassian Trello winStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Authy Twilio Authy Authenticator androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
AWS Mobile LLC AWS Console androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Bitvise Bitvise SSH Client v9.17 win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
Bitwarden Bitwarden macOSDmgApp Apple Business
- Intent:required
Bitwarden Inc. Bitwarden 2022.5.1.0 win32LobApp All Users
- Intent:available
allLicensedUsersAssignmentTarget
- Intent:available
Bitwarden Test
- Intent:required
Bitwarden Inc. Bitwarden Password Manager androidManagedStoreApp Bitwarden Test
- Intent:availableWithoutEnrollment
Bitwarden Inc. Update for Bitwarden 2022.5.1.0 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Blender Foundation Update for Blender 3.2.0 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Box, Inc. Update for Box Drive 2.25.306 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Box, Inc. Update for Box Drive 2.26.348 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Box, Inc. Update for Box For Office 4.17.1524 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Box, Inc. Update for Box Tools (Box Edit) 4.18.0.946 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Box, Inc. Update for BoxSync 4.0.8057 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Brother Industries Brother Printer Driver win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
Brother Industries, Ltd. Brother Print Service Plugin androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Canonical Group Limited Ubuntu winStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Chef Software, Inc. Chef Infra Client 17.10.3 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
Chef Software, Inc. Update for Chef Infra Client 17.10.3 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Cisco Systems, Inc. Update for Cisco Webex Meetings 42.7.1.8 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Cisco Systems, Inc. Update for WebEx 42.6.0.22645 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Corporation for Digital Scholarship Zotero win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
Dell, Inc. Update for Dell Command Update 4.5.0 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Dell, Inc. Update for Dell Command Update for Windows 10 4.5.0 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
DisplayLink Corp. DisplayLink 10.2.6943.0 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
DisplayLink Corp. Update for DisplayLink 10.2.6943.0 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Divvy Divvy androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Docker Inc. Update for Docker 4.9.1 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
dorssel usbipd-win winMobileMSI Engineering
- Intent:available
dotPDN LLC Update for Paint.NET 4.3.11 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Dropbox, Inc. Update for Dropbox 150.4.5000 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Dynalist Inc. Obsidian androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Formlabs PreForm 3.24.1 win32LobApp Information Technology
- Intent:available
Engineering
- Intent:available
Github Atom win32LobApp allDevicesAssignmentTarget
- Intent:uninstall
GitHub GitHub androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Github GitHub Desktop winMobileMSI allLicensedUsersAssignmentTarget
- Intent:available
Github, Inc. Update for GitHub CLI 2.12.1 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Github, Inc. Update for Github Desktop Machine-Wide Installer 3.0.2 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
GlavSoft LLC. Update for TightVNC 2.8.63 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
GlavSoft LLC. Update for TightVNC Viewer 2.8.63 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
GN Audio A/S Update for Jabra Direct 6.1.13901 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Google Google Chrome win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
Google LLC Gboard - the Google Keyboard androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Google LLC Gmail androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Google LLC Google Authenticator androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Google LLC Google Chrome: Fast & Secure androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Google, Inc. Update for Google Drive 59.0.3.0 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Google, Inc. Update for Google Earth Pro 7.3.4.8642 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Google, Inc. Update for Google Earth Pro 7.3.4.8642 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Greenshot Greenshot 1.2.10.6 win32LobApp All Users
- Intent:available
Greenshot Update for Greenshot 1.2.10.6 win32LobApp allDevicesAssignmentTarget
- Intent:required
HandBrake Update for HandBrake 1.5.1 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Hashicorp Vagrant win32LobApp allDevicesAssignmentTarget
- Intent:uninstall
Igor Pavlov 7-Zip 19.00 (x64 edition) winMobileMSI allLicensedUsersAssignmentTarget
- Intent:uninstall
allDevicesAssignmentTarget
- Intent:uninstall
Igor Pavlov 7-Zip 22.01 (x64 edition) winMobileMSI allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Inkscape Project Update for Inkscape 1.2 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
KeePassXC Team Update for KeePassXC 2.7.1 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
KiCad developers KiCad win32LobApp Engineering
- Intent:available
KnowBe4 KnowBe4 Second Chance win32LobApp allDevicesAssignmentTarget
- Intent:required
Lenovo Update for Lenovo System Update 5.07.0136 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Lenovo Inc Lenovo Commercial Vantage winStoreApp allLicensedUsersAssignmentTarget
- Intent:available
LIGHTNING UK! Update for ImgBurn 2.5.8.0 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
LinkedIn LinkedIn: Jobs & Business News androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Logitech Update for Logitech Options 9.60.87 (EXE-x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
LogMeIn, Inc. Update for GoToMeeting 10.19.0.19950 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Michael Rumpler Royal TSD Lite androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
MicroDicom Update for MicroDicom Viewer 2022.2 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
MicroDicom Update for MicroDicom Viewer 2022.2 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Defender Application Guard Companion App winStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Microsoft 365 Apps officeSuiteApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Microsoft 365 Apps for macOS macOSOfficeSuiteApp Apple Business
- Intent:required
allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Microsoft Defender for Endpoint (macOS) macOSMicrosoftDefenderApp allDevicesAssignmentTarget
- Intent:required
Microsoft Microsoft Edge for macOS macOSMicrosoftEdgeApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Microsoft Edge for Windows 10 and later winMicrosoftEdgeApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Microsoft Project officeSuiteApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Microsoft Teams officeSuiteApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Powershell 7.2.5 macOSLobApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft PowerToys win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Universal Print win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Your Phone winStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Azure Information Protection androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Dynamics 365 Business Central androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation HEIF Image Extensions winStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Intune Company Portal androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:availableWithoutEnrollment
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Link to Windows androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft 365 (Office) androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft 365 Admin androidManagedStoreApp Information Technology
- Intent:available
IT Operations and Development
- Intent:available
Microsoft Corporation Microsoft Authenticator androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Azure androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Edge 102.0.1245.44 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Edge WebView2 Runtime 102.0.1245.44 (EXE-x64) win32LobApp All Users
- Intent:available
allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Edge: Web Browser iosStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Edge: Web Browser androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Excel iosStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Excel: Spreadsheets androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Intune androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:availableWithoutEnrollment
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Microsoft Intune Company Portal iosStoreApp allLicensedUsersAssignmentTarget
- Intent:required
Microsoft Corporation Microsoft Launcher androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Lens - PDF Scanner androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Math Solver androidManagedStoreApp All Users
- Intent:available
Microsoft Corporation Microsoft Office iosStoreApp allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Microsoft OneDrive androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft OneDrive iosStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft OneDrive 22.111.0522.0002 (x64) win32LobApp All Users
- Intent:available
allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Microsoft OneNote iosStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft OneNote: Save Notes androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Outlook androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Outlook iosStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Planner androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Power BI androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft PowerPoint androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft PowerPoint iosStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft PowerToys 0.59.1.0 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft SharePoint androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Teams iosStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Teams androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Teams 1.5.0.14473 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Microsoft To Do: Lists & Tasks androidManagedStoreApp All Users
- Intent:available
Microsoft Corporation Microsoft Translator androidManagedStoreApp All Users
- Intent:available
Microsoft Corporation Microsoft Visual Studio Code 1.68.1 (x64) win32LobApp All Users
- Intent:available
Microsoft Corporation Microsoft Word iosStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Microsoft Word: Edit Documents androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Power Apps androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Power Automate androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Remote Desktop androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Microsoft Corporation Update for ConfigMgr Client Toolkit 5.00.7958.1151 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Local Administrator Password Solution 6.2.0.0 (MSI-x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Local Administrator Password Solution 6.2.0.0 (MSI-x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft .NET Core Runtime and Hosting Bundle 3.1.26 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft .NET Core Runtime and Hosting Bundle 5.0.17 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft .NET Core Runtime and Hosting Bundle 6.0.6 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Azure CLI 2.37.0 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Azure Data Studio 1.37.0 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Azure Functions Core Tools 4.0.4590 (MSI-x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Azure Information Protection 2.13.49 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Edge 102.0.1245.44 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Edge 102.0.1245.44 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Edge WebView2 Runtime 102.0.1245.44 (EXE-x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Mouse and Keyboard Center 14.41 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Mouse and Keyboard Center 14.41 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft OneDrive 22.111.0522.0002 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft OneDrive 22.111.0522.0002 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft OpenJDK 11 11.0.15.10 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft OpenJDK 17 17.0.3.7 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft OpenJDK Latest 17.0.3.7 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Power BI Desktop 2.106.582 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Power BI Report Builder 15.7.1797.84 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft PowerToys 0.59.1.0 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Remote Help 4.0.1.7 (EXE-x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft SQL Management Studio 17 14.0.17289.0 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft SQL Server Reporting Services 2017 14.0.600.1860 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Visual C++ 2015-2019 Redistributable 14.29.30139.0 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Visual C++ 2015-2019 Redistributable 14.29.30139.0 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Visual C++ 2015-2022 Redistributable 14.32.31326.0 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Visual C++ 2015-2022 Redistributable 14.32.31326.0 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Visual Studio Code 1.68.1 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Microsoft Visual Studio Code 1.68.1 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Power Automate Desktop 2.20.141.22151 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for PowerShell Core 7.2.5 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for PowerShell Core 7.2.5 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Remote Desktop Client for Windows Desktop 1.2.3213.0 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Microsoft Corporation Update for Skype 8.83 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Firefox Fast & Private Browser androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Mozilla Mozilla Firefox 101.0.1 (x64 en-US) win32LobApp All Users
- Intent:available
allLicensedUsersAssignmentTarget
- Intent:available
Mozilla Update for Mozilla Firefox 101.0.1 (x64 cs) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 da) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 de) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 en-GB) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 en-US) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 es-ES) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 es-MX) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 fi) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 fr) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 hu) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 it) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 nb-NO) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 nl) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 pl) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 ru) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x64 sv-SE) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 cs) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 da) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 de) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 en-GB) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 en-US) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 es-ES) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 es-MX) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 fi) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 fr) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 hu) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 it) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 nb-NO) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 nl) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 pl) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 ru) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox 101.0.1 (x86 sv-SE) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 cs) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 da) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 de) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 en-GB) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 en-US) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 es-ES) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 es-MX) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 fi) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 fr) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 hu) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 it) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 nb-NO) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 nl) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 pl) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 ru) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x64 sv-SE) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 cs) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 da) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 de) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 en-US) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 es-ES) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 es-MX) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 fi) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 fr) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 hu) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 it) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 nb-NO) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 nl) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 pl) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 ru) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla Firefox ESR 91.10.0 (x86 sv-SE) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Mozilla Update for Mozilla SeaMonkey 2.53.3 (x86 en-US) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Node.js Foundation Node.js 18.4.0 (x64) win32LobApp All Users
- Intent:available
Node.js Foundation Update for Node.js 14.19.3 LTS (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Node.js Foundation Update for Node.js 14.19.3 LTS (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Node.js Foundation Update for Node.js 16.15.1 LTS (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Node.js Foundation Update for Node.js 16.15.1 LTS (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Node.js Foundation Update for Node.js 18.0.0 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Node.js Foundation Update for Node.js 18.4.0 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Notepad++ Notepad++ 8.4.2 win32LobApp allLicensedUsersAssignmentTarget
- Intent:uninstall
allDevicesAssignmentTarget
- Intent:uninstall
Notepad++ 8.5.2 Notepad++ 8.5.2 win32LobApp allDevicesAssignmentTarget
- Intent:required
NVIDIA Nsight Systems winMobileMSI allLicensedUsersAssignmentTarget
- Intent:available
NVIDIA NVIDIA CUDA Toolkit win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
NVIDIA Corporation Update for NVIDIA GeForce Experience 3.25.1.27 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Obsidian Obsidian 0.13.31 (User-x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
Obsidian Update for Obsidian 0.13.31 (User-x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Okta Inc. Okta Verify androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
OpenVPN OpenVPN Connect – OpenVPN App androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
OpenVPN Technologies OpenVPN Connect win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
allDevicesAssignmentTarget
- Intent:required
Opera Software Update for Opera 88.0.4412.40 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Opera Software Update for Opera 88.0.4412.40 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Oracle America, Inc. NetSuite androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Oracle Corporation Oracle VM VirtualBox 6.1.34 (x64) win32LobApp All Users
- Intent:available
Oracle Corporation Update for Oracle Java 7 Update 79 7.0.710 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Oracle Corporation Update for Oracle Java 7 Update 79 7.0.710 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Oracle Corporation Update for Oracle Java SE Development Kit 17 17.0.3.1 (MSI-x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Oracle Corporation Update for Oracle Java SE Development Kit Latest 18.0.1.1 (MSI-x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Oracle Corporation Update for Oracle MySQL Workbench Community Edition 8.0.29 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Oracle Corporation Update for Oracle VM VirtualBox 6.1.34 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
People Center Inc. Rippling - HR, IT & Finance androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
People Center Inc. Rippling - Time Clock androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Phillip Beauvoir Update for Archi 4.9.3 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Pritunl, Inc. Pritunl macOSLobApp Apple Business
- Intent:available
ProjectLibre Update for ProjectLibre 1.9.3 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
ProScope MicroCapture Plus win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
Python Software Foundation Python 3.10 winStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Python Software Foundation Update for Python 3.10.5150.0 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Python Software Foundation Update for Python 3.10.5150.0 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Python Software Foundation Update for Python 3.7.9150.0 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Python Software Foundation Update for Python 3.7.9150.0 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Python Software Foundation Update for Python 3.8.10150 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Python Software Foundation Update for Python 3.8.10150 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Python Software Foundation Update for Python 3.9.13150 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Python Software Foundation Update for Python 3.9.13150 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
RealVNC Limited RealVNC Viewer: Remote Desktop androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
RealVNC Ltd Update for VNC Viewer 6.22.315 (EXE) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Rippling People Center Inc. Rippling macOSDmgApp Apple Business
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Royal Apps GmbH Royal TS winMobileMSI Information Technology
- Intent:available
Engineering
- Intent:available
Royal Apps GmbH Royal TSX macOSDmgApp Information Technology
- Intent:required
RStudio RStudio win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
Signal Messenger, LLC Update for Signal 5.46.0 (User-x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Simon Tatham PuTTY 0.77 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
Simon Tatham Update for PuTTY 0.77 (x64) win32LobApp allDevicesAssignmentTarget
- Intent:required
Slack Technologies Update for Slack Machine-Wide 4.27.154.0 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
‪Slack Technologies Inc.‬ Slack winStoreApp allLicensedUsersAssignmentTarget
- Intent:available
Spiceworks Spiceworks Shell Collection Agent winMobileMSI allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
SwiftKey Microsoft SwiftKey AI Keyboard androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
TeamViewer Update for TeamViewer 15.30.3 (EXE-x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Termius Corporation Termius - SSH and SFTP client androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
The GIMP Team Update for GIMP 2.10.32 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
The Git Development Community Git 2.36.1 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:available
The Git Development Community Update for Git 2.36.1 (x64) win32LobApp allDevicesAssignmentTarget
- Intent:required
The Gpg4win Project Gpg4win 4.0.2 win32LobApp allLicensedUsersAssignmentTarget
- Intent:uninstall
allDevicesAssignmentTarget
- Intent:uninstall
The Gpg4win Project Update for Gpg4win 4.0.2 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
The Wireshark developer community Wireshark 3.6.6 (x64) win32LobApp All Users
- Intent:available
allLicensedUsersAssignmentTarget
- Intent:available
Thingamahoochie Software Update for WinMerge 2.16.20.0 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Tim Kosse Update for FileZilla Client 3.60.1 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
TortoiseGit Update for TortoiseGit 2.13.0.1 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Vibe Inc Vibe Canvas androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
VideoLAN Update for VLC Media Player 3.0.17 (MSI-x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
VideoLAN VLC Media Player 3.0.17 (MSI-x64) win32LobApp All Users
- Intent:available
allLicensedUsersAssignmentTarget
- Intent:available
VMware, Inc. Update for VMware Remote Console 12.0.1 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
VMware, Inc. Update for VMware Tools 12.0.5.35655 (x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
VMware, Inc. Update for VMware Workstation Player 16.2.3 win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
voidtools Update for Everything 1.4.1017 (MSI-x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
WinZip Computing, S.L. Update for WinZip 26.0.15033 (x86) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Zoom Update for Zoom Rooms 5.10.6 (MSI-x64) win32LobApp allLicensedUsersAssignmentTarget
- Intent:required
allDevicesAssignmentTarget
- Intent:required
Zoom Zoom Outlook Plugin 5.11.0 win32LobApp allLicensedUsersAssignmentTarget
- Intent:uninstall
allDevicesAssignmentTarget
- Intent:uninstall
Zoom Video Communications, Inc. Zoom Client macOSLobApp allLicensedUsersAssignmentTarget
- Intent:available
Zoom Video Communications, Inc. Zoom Outlook Plugin macOSLobApp allLicensedUsersAssignmentTarget
- Intent:available
Zoom, Inc. Zoom Desktop Client winMobileMSI allDevicesAssignmentTarget
- Intent:required
zoom.us Zoom - One Platform to Connect androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:availableWithoutEnrollment
zoom.us Zoom for Intune androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:available
zoom.us Zoom Rooms Controller androidManagedStoreApp allLicensedUsersAssignmentTarget
- Intent:availableWithoutEnrollment

Groups used to assign apps

Name MemberCount GroupType DynamicRule
Engineering 22 Static -
Back to top