Intune - Windows 10 Configuration Profiles missing

[bitdeft]

Details of the scenario you tried and the problem that is occurring

When using Intune components such as:
Export-M365DSCConfiguration -workloads @("intune")
there are configuration profiles that are not being exported.

Verbose logs showing the problem

Here we can see that I have 4 different configuration policies, containing Settings catalouge and administrative templates, with assignements and no assignments.

However, inside the resulting DSC config file, there is no ConfigurationPolicyWindows10

Is this because "configuration Policy" is actually different than "configuration Profile"? Either way, I can't find the name of my configuration profiles in the file either. So it seems that these profiles are not being saved, which is worrying.

The operating system the target node is running

Win10, Powershell 5.1

Version of the DSC module that was used ('dev' if using current dev branch)

1.23.322.1

[bitdeft]

In another tenant, there were ConfigurationPolicyWindows10 objects that had been detected, but only 2 of them were. There are many more profiles.... I am still working with a client on getting better access to their environment to see what those policies had/were, but I suspect they may not be configuration profiles, and instead a different thing?

[bitdeft]

Ok, so it seems like the profiles that are saved are device restrictions:

But those other profiles are not being saved...

[bitdeft]

It seems that the intune components of M365DSC were made back when intune had less configuration options, and the object/resource of ConfigurationPolicyWindows10
( https://microsoft365dsc.com/resources/intune/IntuneDeviceConfigurationPolicyWindows10/ ) does not contain all the new options, which were used in my test configurations. For instance, "allow fast connect" here:

I haven't looked into the logs/debug of the module, but I can't find this setting/property in the resource documented at the above URL.

So it seems that the resource needs to be updated to support all of these new settings?

[ricmestre]

@bitdeft Hi, just to let you know that not all resources, which also includes policies, are available to be used with M365Dsc module. In your specific case administrative templates should become available through #3145 whereas settings catalog is still not done and I requested it through #3070. Device restrictions or compliance policies should be exported without issues as you already noted initially, hope this clarifies your query.

[bitdeft]

hmm, thank you for clarifying. Any idea on time-frame (as best as you could give an idea with nature of this project 😄 ).

It would be a major necessity for backing up and maintaining Intune, arguably the most customized resource in all of M365.

[ricmestre]

@William-Francillette any word on this since it would also benefit us? Thanks in advance!

[William-Francillette]

I'm focusing on deviceConfiguration ( Setting template) for all platforms at the moment.
Setting catalog is in the roadmap but not yet implemented. Some resources are more challenging than others and will need to find a way to generate those dynamically.
We will keep you posted.

[bitdeft]

How difficult is it to contribute to this code base here? This is the current contributor guideline but it seems to point to sharepointDSC which may be a bit out of date: https://github.com/dsccommunity/SharePointDsc/wiki/Contributing%20to%20SharePointDsc

Also, I would say dynamically would be nice, since Intune/"MEM" has had rapid changes in configuration parameters, and doesn't seem to have any sign of stopping changes....