Microsoft365DSC Versions Save

Manages, configures, extracts and monitors Microsoft 365 tenant configurations

1.24.424.1

2 weeks ago
  • EXORecipientPermission
    • Ensures we only return 1 Trustee per entry.
  • EXOManagementRoleAssignment
    • Removed logic to use Graph for Adminitrative Unit.
  • IntuneDeviceConfigurationDefenderForEndpointOnboardingPolicyWindows10
    • Fixed a comparison issue when Defender for Endpoint is connected to Intune and the onboarding blob is generated by the Defender for Endpoint service.
  • IntuneDeviceConfigurationPolicyMacOS
    • Fixed an issue where the update policy setting was not handled properly.
  • MISC
    • Added support for AccessTokens in EXO resources.
    • Updated MSCloudLoginAssistant dependencies to version 1.1.16.
    • Added Filter support to Intune resources.

1.24.417.1

3 weeks ago
  • AADAdministrativeUnit
    • Fixed an issue when assigning a directory role which is not yet enabled.
    • Fixed a potential issue if the total directory roles increases in future.
  • AADConditionalAccessPolicy
    • Fixed a potential issue if the total directory roles increases in future.
  • AADGroup
    • Fixed a potential issue if the total directory roles increases in future.
  • AADAdministrativeUnit, AADApplication, AADEntitlementManagementConnectedOrganization, AADGroup, AADUser
    • Replace old cmdlet and deprecated Remove-Mg*ByRef with equivalent Remove-Mg*DirectoryObjectByRef which is available in Graph 2.17.0
  • AADRoleEligibilitySecheduleRquest
    • Cleaned Export logic.
  • EXOActiveSyncDeviceAccessRule
    • Retrieve instance by Identity if not found by characteristic.
  • EXOMailboxSettings
    • Simplifyied the Setlogic and removed Timezone validation to remove checks to regstry key which caused issues in Linux.
  • M365DSCRuleEvaluation
    • Changed logic to retrieve resource information.
  • SCRoleGroup
    • Initial Release.
  • SCRoleGroupMember
    • Initial Release.
  • SPOTenantSettings
    • Add property TenantDefaultTimezone Implements #4189
  • DEPENDENCIES
    • Updated Microsoft.Graph dependencies to version 2.17.0.
    • Updated MSCloudLoginAssistant dependencies to version 1.1.15.
    • Updated MicrosoftTeams to version 6.1.0.
  • MISC
    • Provided the ability to force reload the EXO or SC modules to prevent calling the wrong cmdlet where the same names are defined (e.g. Get-RoleGroup).
    • Telemetry
      • Get operating system using faster method to speed up telemetry calls.

1.24.403.1

1 month ago
  • AADAdministrativeUnit
    • Fix issue with deploying/creating a new AU with members and/or adding members to an existing AU FIXES #4404
    • Updated examples to include setting Visibility and ScopedRoleMembers
    • Fix issue with Set-TargetResource was failing to apply when Verbose is set FIXES #4497
  • All resources
    • Fix issue where Ensure cannot be left as default 'Present'
  • AADAdministrativeUnit
    • Fix issue with omitted Ensure and/or Id FIXES #4437
  • AADConditionalAccessPolicy
    • Fixed schema file
  • EXOCalendarProcessing
    • Fixed schema file
  • EXOGroupSettings
    • Fixed schema file
  • EXOMailTips
    • [BREAKING CHANGE] Replaced the Organization parameter with IsSingleInstance FIXES #4117
  • EXOMessageClassification
    • Fixed schema file
  • EXOOMEConfiguration
    • Fixed schema file
  • EXOTransportRule
    • [BREAKING CHANGE] Change data type of Priority from String to Int FIXES [#4136]
  • IntuneAntivirusPolicyWindows10SettingCatalog
    • Add missing properties
  • IntuneAppConfigurationPolicy
    • Fix comparison in Test-TargetResource FIXES #4451
  • IntuneDeviceCompliancePolicyWindows10
    • Fix group assignment by using the corrected function Update-DeviceConfigurationPolicyAssignment from module M365DSCDRGUtil FIXES #4467
  • IntuneDeviceEnrollmentPlatformRestriction
    • Fixed an issue where nested settings would throw a conflict FIXES #4082
  • IntuneDeviceEnrollmentStatusPageWindows10
    • Added support for specifying SelectedMobileAppNames in addition to SelectedMobileAppIds, which are different for each tenant. FIXES #4494
  • M365DSCRuleEvaluation
    • Log both matching and not matching resources and in XML format
  • O365OrgSettings
    • Fixed missing permissions in settings.json
  • SPOAccessControlSettings
    • [BREAKING CHANGE] Removed CommentsOnSitePagesDisabled parameter, because of duplication in SPOTenantSettings FIXES #3576
    • [BREAKING CHANGE] Moved SocialBarOnSitePagesDisabled parameter to SPOTenantSettings, because it makes more sense there. This has nothing to do with Access Control.
  • SPOTenantSettings
    • [BREAKING CHANGE] Removed ConditionalAccessPolicy parameter, because of duplication in SPOAccessControlSettings FIXES #3576
    • Added SocialBarOnSitePagesDisabled parameter, moved from SPOAccessControlSettings.
    • Added EnableAIPIntegration.
  • TeamsChannelTab
    • Fixed schema file
  • TeamsGroupPolicyAssignment
    • Skip assignments that have orphaned/deleted groups or without display name instead of throwing an error FIXES #4407
  • TeamsTenantDialPlan
    • Fix output of property NormalizationRules as a string to the blueprint FIXES #4428
    • Fix creation, update and deletion of resource
  • TeamsUpdateManagementPolicy
    • Adds support for the NewTeamsOnly value or the UseNewTeamsClient property. FIXES #4496
  • DEPENDENCIES
    • Updated DSCParser to version 2.0.0.3.
  • MISC
    • Initial release of Get-M365DSCEvaluationRulesForConfiguration
    • M365DSCDRGUtil Fix Update-DeviceConfigurationPolicyAssignment so that if the group cannot be found by its Id it tries to search it by display name FIXES #4467
    • M365DSCReport Fix issue when asserting resources not covered by current conditions in Get-M365DSCResourceKey by always returning all their mandatory parameters FIXES #4502
    • Fix broken links to integration tests in README.md
    • Changing logic to retrieve DSC Resources properties not to use DSC specific cmdlets.

1.24.313.1

1 month ago
  • AADAuthenticationStrengthPolicy
    • Removed the Id paremeter from being checked in the Test-TargetResource.
  • AADGroup
    • Fixed issue when filtering groups by display name FIXES #4394
    • Fixed issue where group owners were removed from existing groups when unspecified in the config FIXES #4390
  • EXOAcceptedDomain
    • Update regular expression to support domains with digits FIXES #4446
  • EXOHostedContentFilterPolicy
    • Add support for IntraOrgFilterState parameter FIXES #4424
  • EXOHostedContentFilterRule
    • Fixed issue in case of different names of filter rule and filter policy FIXES #4401
  • EXOIntraOrganizationConnector
    • Fixed issue with TargetSharingEpr FIXES #4381
  • IntuneAccountProtectionLocalAdministratorPasswordSolutionPolicy
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneAccountProtectionLocalUserGroupMembershipPolicy
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneAccountProtectionPolicy
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneAntivirusPolicyWindows10SettingCatalog
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneAppConfigurationPolicy
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneApplicationControlPolicyWindows10
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneASRRulesPolicyWindows10
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneDeviceCompliancePolicyAndroid
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneDeviceCompliancePolicyAndroidDeviceOwner
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneDeviceCompliancePolicyAndroidWorkProfile
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneDeviceCompliancePolicyiOs
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneDeviceCompliancePolicyMacOS
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneDeviceCompliancePolicyWindows10
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneDeviceConfigurationCustomPolicyWindows10
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneDeviceConfigurationDefenderForEndpointOnboardingPolicyWindows10
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneDeviceConfigurationDeliveryOptimizationPolicyWindows10
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneDeviceConfigurationDomainJoinPolicyWindows10
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneDeviceConfigurationEmailProfilePolicyWindows10
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
  • IntuneDeviceConfigurationEndpointProtectionPolicyWindows10
    • Added support for assignment GroupDisplayName and improve error handling from Get-TargetResource
    • Fixed an issue with the parameter InterfaceTypes from firewallrules defined as a string instead of string[]
  • IntuneDeviceConfigurationSCEPCertificatePolicyWindows10
    • Add property RootCertificateDisplayName in order to support assigning root certificates by display name since their Ids in a blueprint might be from a different source tenant FIXES #3965
  • IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator
    • Fixed policy assignment retrieval when Id is from other tenant, bogus or null FIXES #3970
  • IntuneDeviceConfigurationPolicyAndroidOpenSourceProject
    • Fixed policy assignment retrieval when Id is from other tenant, bogus or null FIXES #3971
    • Fixed compare logic for CIM instances in Test-TargetResource
  • M365DSCRuleEvaluation
    • Fix issue when it didn't find any matching resources and it tried to make a comparison
  • O365OrgSettings
    • Add read permission for extracting M365 apps installation settings instead of extracting them only with read/write permissions FIXES #4418
  • TeamsTeam
    • Add error handling for teams without displayname during export FIXES #4406
  • TeamsVoiceRoute
    • Fix policy removal and also comparison in Test-TargetResource
  • DEPENDENCIES
    • Updated DSCParser to version 1.4.0.4.
    • Updated Microsoft.Graph to version 2.15.0.
    • Updated MicrosoftTeams to version 6.0.0.
  • MISC
    • Enhancement to obfuscate password from verbose logging and avoid empty lines FIXES #4392
    • Fix example in documentation for Update-M365DSCAzureAdApplication
    • Added support for groupDisplayName to all devices and all users groups

1.24.228.1

2 months ago
  • AADApplication
    • Show current values of resource in Test-TargetResource
  • AADAuthorizationPolicy
    • Show current values of resource in Test-TargetResource
  • AADConditionalAccessPolicy
    • Improved verbose logging to show that items are being skipped.
    • Show current values of resource in Test-TargetResource
  • AADExternalIdentityPolicy
    • Show current values of resource in Test-TargetResource
  • AADGroup
    • Fixed issue with single quotes in the display name. FIXES #4358
    • Show current values of resource in Test-TargetResource
  • AADGroupLifecyclePolicy
    • Show current values of resource in Test-TargetResource
  • AADGroupsNamingPolicy
    • Show current values of resource in Test-TargetResource
  • AADGroupsSettings
    • Show current values of resource in Test-TargetResource
  • AADNamedLocationPolicy
    • Show current values of resource in Test-TargetResource
  • AADRoleDefinition
    • Show current values of resource in Test-TargetResource
  • AADRoleSetting
    • Show current values of resource in Test-TargetResource
  • AADSecurityDefaults
    • Show current values of resource in Test-TargetResource
  • AADServicePrincipal
    • Show current values of resource in Test-TargetResource
  • AADTenantDetails
    • Show current values of resource in Test-TargetResource
  • AADTokenLifetimePolicy
    • Show current values of resource in Test-TargetResource
  • EXOActiveSyncDeviceAccessRule
    • Remove extra property GUID that is stopping EXO integration tests from running
  • IntuneDeviceConfigurationScepCertificatePolicyWindows10
    • Fixes an issue where the keyUsage property format was not correctly handled
  • IntuneExploitProtectionPolicyWindows10SettingCatalog
    • Fix update and removal of resource when Identity is from another tenant FIXES #3962
  • SPOAccessControlSettings
    • Added support for the ConditionalAccessPolicy parameter based on the PNP Module
  • Teams resources
  • TeamsCallQueue
    • Reduce the number of Calls for Export using new cache pattern FIXES [#4191]
  • TeamsGuestMeetingConfiguration
    • Added the missing parameter AllowTranscription. FIXES #4363
  • TeamsTeam
    • Corrected Parameters for Graph Commands when creating a new Team FIXES #4383
  • MISC
    • M365DSCDRGUtil Add new parameter for customizable assignment identifier
    • M365DSCUtil Change heuristics on how to find the mandatory key of the resources to include them as part of the ResourceInstanceName during their export FIXES #4333

1.24.221.1

2 months ago
  • AADApplication
    • Expose the description field in the resource.
  • AADConditionalAccessPolicy
    • Fixing issue where Membership kinds no longer accepted empty values. ROLLING BACK #4344 FIXES #4347
    • Throws an error if role, user or group was not found in the Set method. FIXES #4342
  • EXOAuthenticationPolicyAssignment
    • Improved performance by using a filter to retrieve assignments.
    • Export now retrieves the user principal name instead of the user id.
  • EXOAvailabilityConfig
    • Export now retrieves the user principal name instead of the user id.
  • EXOCASMailboxPlan
    • Added the DisplayName property.
  • EXODataClassification
    • Added logic to retrieve by name in the GET method if no match found by id.
  • EXOMailboxAutoReplyConfiguration
    • Added the owner property.
  • EXOMailboxPlan
    • Added the DisplayName property.
  • EXOMailboxSettings
    • Export now retrieves instances by User Principal Name instead of GUID.
  • EXOPlace
    • Added the DisplayName property.
  • EXORecipientPermission
    • Export now retrieves instances by User Principal Name instead of GUID.
  • EXOSharedMailbox
    • Added the Identity parameter.
  • MISC
    • Uninstall-M365DSCOutdatedDependencies
      • Outdated Microsoft365DSC-modules are now removed in their entirety

1.24.214.3

2 months ago
  • AADAuthenticationMethodPolicy
    • Fixed an error where the Export method would loop through the response header.
  • AADAuthenticationMethodPolicyAuthenticator
    • Fixed an error where the Export method would loop through the response header.
  • AADAuthenticationMethodPolicyEmail
    • Fixed an error where the Export method would loop through the response header.
  • AADAuthenticationMethodPolicyFido2
    • Fixed an error where the Export method would loop through the response header.
  • AADAuthenticationMethodPolicySms
    • Fixed an error where the Export method would loop through the response header.
  • AADAuthenticationMethodPolicySoftware
    • Fixed an error where the Export method would loop through the response header.
  • AADAuthenticationMethodPolicyTemporary
    • Fixed an error where the Export method would loop through the response header.
  • AADAuthenticationMethodPolicyVoice
    • Fixed an error where the Export method would loop through the response header.
  • AADAuthenticationMethodPolicyX509
    • Fixed an error where the Export method would loop through the response header.
  • IntuneAppConfigurationPolicy
    • Fixed an error in the export on the Settings property.
  • IntuneDeviceEnrollmentStatusPageWindows10
    • Fixed an error where the Export method would loop through the response header.
  • IntuneWindowsAutopilotDeploymentProfileAzureADJoined
    • Fixed an error where the Export method would loop through the response header.
  • SCDLPComplianceRule
    • Fixed the NotifyEmailCustomText and NotifyPolicyTipCustomText to escape fancy quotes.
  • DEPENDENCIES
    • Updated Microsoft.Graph to version 2.14.1.

1.24.214.2

2 months ago
  • AADConditionalAccessPolicy
    • Removed invalid empty string value that was added to the validate set of two parameters.
    • Updated permission reference for app-onlzy authentication. FIXES [#3329]
  • AADRoleEligibilityScheduleRequest
    • Fixed an issue where an error was thrown if no requests were found instead of simply returning the Null object.
  • AADRoleSetting
    • Fix handling of DisplayName property in comparison FIXES #4019
  • AADUser
    • Fixed and issue where an user would be created even if the resrouce was set to absent. FIXES [#4265]
  • EXOMobileDeviceMailboxPolicy
    • Fixes an issue where an empty MinPasswordLength value was always passed down to the update logic flow.
  • IntuneAppConfigurationPolicy
    • Added parameter Id to avoid having to retrieve the same policy multiple times
    • Fixed tests in Test-TargetResource to ensure the resource reports its correct state FIXES #3542
  • IntuneDeviceAndAppManagementAssignmentFilter
    • Fixed Test-TargetResource to ensure that resource reports its correct state FIXES #3959
  • IntuneDeviceConfigurationNetworkBoundaryPolicyWindows10
    • Fixed Test-TargetResource by removing Id from being tested and also used correct filter while retrieving the policy otherwise it could not be found FIXES #3964
  • IntuneDeviceConfigurationPolicyAndroidWorkProfile
    • Fix typo in variable which made it export incorrectly and report that resource was not in correct state due to testing an incorrect value FIXES #3972
  • IntuneSettingCatalogASRRulesPolicyWindows10
    • Fix removal of resource if Identity comes from another tenant or is not present in blueprint
    • Fix Test-TargetResource by not comparing Identity since it might be from another tenant or not present in blueprint FIXES #4302
  • SCDPLPCompianceRule
    • Added support for multiple additional parameters.
  • SPOSharingSettings
    • Fixed an issue where the resource would return multiple sites. FIXES #2759
  • DEPENDENCIES
    • Updated DSCParser to version 1.4.0.2.
    • Updated Microsoft.Graph dependencies to version 2.13.1.
    • Updated MSCloudLoginAssistant to version 1.1.13.
  • MISC
    • M365DSCReport
      • Fix nested change detection for CIMInstances
      • Fix IntuneDeviceEnrolllmentPlatformRestriction comparison in report FIXES #4291
    • Added new QA test to check for missing description in resource schema

1.24.207.2

3 months ago
  • MISC
    • Drift Logging
      • Now includes the full list of parameters for the current values.
    • Telemetry
      • Added a new M365DSCTelemetryEventId parameter to track duplication of events.
  • IntuneDeviceEnrollmentPlatformRestriction * Added Priority parameter FIXES #4081
  • SCDLPComplianceRule * Properly escapes fancy quotes in the Get method.
  • TeamsAppSetupPolicy
    • Changed the logic to retrieve arrays of Ids in the Get method.
  • TeamsMeetingPolicy
    • Ignore the AllowUserToJoinExternalMeeting parameterfor drift evaluation since it doesnt do anything based on official documentation. * DEPENDENCIES
      • Updated Microsoft.PowerApps.Administration.PowerShell to version 2.0.180.
      • Updated MSCloudLoginAssistant to version 1.1.11
      • Updated ReverseDSC to version 2.0.0.19

1.24.131.2

3 months ago
  • EXOAvailabilityAddressSpace * Added support for the TargetServiceEpr and TargetTenantId parameters. * Fixed the logic to retrieve existing instance by Forest Name.
    • EXODistributionGroup
      • The Get function now retrieves the ModeratedBy and ManagedBy properties by the users UPN instead of their GUID.
    • EXOHostedContentFilterRule
      • Changed logic to retrieve the Rules by name. Using the Policys name instead.
    • EXOIntraOrganizationConnector
      • Fixes the DiscoveryEndpoint value from the Get method to include trailing forward slash.
    • EXOMalwareFilterRule
      • Fixed an issue retrieving the right value for the Enabled property
    • EXOOMEConfiguration
      • Fixes an error in the Get method where the ExternalMailExpiryInDays property wasnt properly returned.
    • EXOSafeLinksPolicy
      • Deprecated the UseTranslatedNotificationText property
    • TeamsEmergencyCallRoutingPolicy
      • Fix deletion of resource FIXES #4261
    • TeamsMeetingPolicy
      • Fixed issue with missing ManagedIdentity parameter in Test signature.
    • TeamsUpdateManagementPolicy
      • Fixed issue with missing ManagedIdentity parameter in Set signature.
    • TEAMS
      • Added support for ManagedIdentity Authentication across Teams resources.
    • DEPENDENCIES
      • Updated MSCloudLoginAssistant dependencies to version 1.1.10.
    • MISC
      • Change the way to Export encoding is done so that it no longer relies on the Get-DSCResource function.