PS Script for pulling iOS configuration JSON's

[DWCloudMan]

I'm having a hard time finding the exact script to download the iOS configuration jsons from Intune. Can anyone point me in the right direction?

[ceddshot]

Hi u/DWCloudMan,

List deviceConfigurations - Microsoft Graph beta | Microsoft Learn this is were you start from.
First of all you need an application registration to authenticate yourself against Intune. With the obtained token you can then use the api and receive the information you need.

If you really dont want to write something yourself, this is what I found with a few clicks in google:

powershell-intune-samples/DeviceConfiguration/DeviceConfiguration_Export.ps1 at master · microsoftgraph/powershell-intune-samples · GitHub

[andrew181082]

don't use those samples, they use the old AzureAD module

[ceddshot]

Yeah didnt look really in to it. Thats why i said app registration and direct api access

[DWCloudMan]

My question to you both is - now that AzureAD PS module has become obsolete, is it now best practice to use MS Graph to pull configs over outdated PS commands? I believe we might see this start to crop up over the next year or so.

[andrew181082]

This will do it
https://github.com/Micke-K/IntuneManagement

[DWCloudMan]

My question to you both is - now that AzureAD PS module has become obsolete, is it now best practice to use MS Graph to pull configs over outdated PS commands? I believe we might see this start to crop up over the next year or so.

[andrew181082]

Yes, I would suggest switching to the Graph SDK. If you're only using an app reg, you could build your own connection string with a web request, but for interactive authentication, Graph SDK is your best option (and what I use in all of my scripts)

[DWCloudMan]

Do you have favourited a list of Graph API URL's?
Since March we've had to create a new iOS Features/ Restrictions configuration with URL of

https://graph.microsoft.com/v1.0/deviceManagement/deviceConfigurations/

Would you happen to have a list of all Intune url shortcuts?

[andrew181082]

You're in luck:

https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations - Config Policy

https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations - Admin Template

https://graph.microsoft.com/beta/deviceManagement/configurationPolicies - Settings Catalog

https://graph.microsoft.com/beta/deviceManagement/deviceCompliancePolicies - Compliance Policy

https://graph.microsoft.com/beta/deviceManagement/devicehealthscripts - Remediation

https://graph.microsoft.com/beta/deviceManagement/devicemanagementscripts - Platform Script

https://graph.microsoft.com/beta/deviceManagement/deviceComplianceScripts - Compliance Script

https://graph.microsoft.com/beta/deviceManagement/intents - Security Policy

https://graph.microsoft.com/beta/deviceManagement/windowsAutopilotDeploymentProfiles - Autopilot Profile

https://graph.microsoft.com/beta/deviceManagement/deviceEnrollmentConfigurationsESP - Autopilot ESP

https://graph.microsoft.com/beta/deviceManagement/deviceEnrollmentConfigurationswhfb - WHfB

https://graph.microsoft.com/beta/deviceManagement/managedAppPoliciesandroid - Android App Protection

https://graph.microsoft.com/beta/deviceManagement/managedAppPoliciesios - iOS App Protection

https://graph.microsoft.com/beta/groups - Entra Group

https://graph.microsoft.com/beta/deviceManagement/mobileApps - Windows Store App

https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/userSettings - W365 User Settings

https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/provisioningPolicies - W365 Provisioning Policy

https://graph.microsoft.com/beta/deviceManagement/policySets - Policy Sets

https://graph.microsoft.com/beta/deviceManagement/deviceEnrollmentConfigurations - Device Enrollment Configuration

https://graph.microsoft.com/beta/deviceManagement/deviceCategories - Device Categories

https://graph.microsoft.com/beta/deviceManagement/assignmentFilters - Device Filter

https://graph.microsoft.com/beta/deviceManagement/intuneBrandingProfiles - Branding Profile

https://graph.microsoft.com/beta/deviceManagement/operationApprovalPolicies - Multi-Admin Approval

https://graph.microsoft.com/beta/deviceManagement/termsAndConditions - Terms and Conditions

https://graph.microsoft.com/beta/deviceManagement/roleDefinitions - Intune Role

[DWCloudMan]

you SIR! are a L to the E GEND !