Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

IntuneAppConfigurationDevicePolicy cannot handle 'for Intune' applications #5587

Open
dannyKBjj opened this issue Dec 19, 2024 · 2 comments
Open

Comments

@dannyKBjj
Copy link
Contributor

Description of the issue

Works well for most application types, but it cannot handle the 'for Intune' apps (e.g. Appian For Intune, Zoom for Intune etc.). However, if you create a configuration with a 'for Intune' application, then trigger Set-Targetresource by deleting the policy, the recreated policy will show a message about the application nolonger being available

I explored the issue a bit and seems be that when recreating the policy, it pick up both the Android and iOS app.

If I create a new policy:

The TargetedMobileApps guid in the policy matches the existing GUID for that.
Image

I then export the policy and delete it. Run start-dscConfiguration to recreate the policy.

If I pull the TargetedMobileApps, it is now targetted at both the iOS and Android apps
Image

With the end result that the policy in my tenant is broken:
Image

Microsoft 365 DSC Version

1.24.1211.1

Which workloads are affected

Intune

The DSC configuration

IntuneAppConfigurationDevicePolicy "IntuneAppConfigurationDevicePolicy-Man-Dev-App-ZoomForIntune v2"
        {
            ApplicationId         = $ConfigurationData.NonNodeData.ApplicationId;
            Assignments           = @();
            CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint;
            Description           = "";
            DisplayName           = "Man-Dev-App-ZoomForIntune v2";
            Ensure                = "Present";
            Id                    = "50baf12c-db85-4ec5-ae51-385380207c63";
            PayloadJson           = "";
            RoleScopeTagIds       = @("0");
            Settings              = @(
                MSFT_MicrosoftGraphappConfigurationSettingItem{
                    AppConfigKey = 'test'
                    AppConfigKeyType = 'stringType'
                    AppConfigKeyValue = 'test'
                }
            );
            TargetedMobileApps    = @("us.zoom.videomeetings4intune");
            TenantId              = $OrganizationName;
        }

Verbose logs showing the problem

NA

Environment Information + PowerShell Version

@dannyKBjj
Copy link
Contributor Author

Actually, I just realised that I mistakenly submitted modules to replace this thinking they weren't covered by DSC

#5444

#5401

These were merged and then pulled in favour of the existing DSC resource. My initial testing with my old modules suggests that they resolve this bug...

dannyKBjj added a commit to dannyKBjj/Microsoft365DSC that referenced this issue Dec 19, 2024
MSFT_IntuneMobileAppConfigurationPolicyIOS and
MSFT_IntuneAndroidManagedStoreAppConfiguration
were supposed to be pulled in favour of existing DSCResource - IntuneAppConfigurationDevicePolicy as my modules duplicated functionality. Whilst testing on our tenant we discovered the following issue:
IntuneAppConfigurationDevicePolicy cannot handle 'for Intune' applications microsoft#5587

It seems that for some reason only MSFT_IntuneMobileAppConfigurationPolicyIOS was removed. This pull request adds that module back in and deletes "IntuneAppConfigurationDevicePolicy" as I believe that module is now defunct.
@dannyKBjj
Copy link
Contributor Author

created pull request to fix this:

#5588

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant