### Configuring Microsoft Edge Extensions - macOS Intune OIB Source: https://github.com/skiptotheendpoint/openintunebaseline/blob/main/MACOS/SETTINGSOUTPUT.md Details the settings for managing Microsoft Edge extensions on macOS using an Intune Settings Catalog profile within the Open Intune Baseline project. It covers allowing specific extensions, blocking external extensions, silently installing extensions, and blocking specific extensions. ```JSON [ {"Name": "Allow specific extensions to be installed", "Value": "odfafepnkmbhccpbejgmiehpchacaeak"}, {"Name": "Blocks external extensions from being installed", "Value": "Enabled"}, {"Name": "Control which extensions are installed silently", "Value": "nkbndigcebkoaejohleckhekfmcecfja;ofefcgjbeghpigppfmkologfjadafddi"}, {"Name": "Control which extensions cannot be installed", "Value": "*"} ] ``` -------------------------------- ### Intune Profile Basics: Windows User Experience Feature Configuration (Table 98) Source: https://github.com/skiptotheendpoint/openintunebaseline/blob/main/WINDOWS/SETTINGSOUTPUT.md Provides metadata about the 'Win - OIB - SC - Windows User Experience - D - Feature Configuration - v3.1' Settings Catalog profile, including its name, type, platform support, creation/modification dates, and scope tags. ```HTML
Name Value
Basics
Name Win - OIB - SC - Windows User Experience - D - Feature Configuration - v3.1
Description
Profile type Settings catalog
Platform supported Windows 10 and later
Created 10 April 2024 20:35:25
Last modified 05 December 2024 20:15:58
Scope tags Default
``` -------------------------------- ### Intune Profile Basics: Windows Update Restart Warnings (Table 96) Source: https://github.com/skiptotheendpoint/openintunebaseline/blob/main/WINDOWS/SETTINGSOUTPUT.md Provides metadata about the 'Win - OIB - SC - Windows Update for Business - D - Restart Warnings - v3.1' Settings Catalog profile, including its name, type, platform support, creation/modification dates, and scope tags. ```HTML
Name Value
Basics
Name Win - OIB - SC - Windows Update for Business - D - Restart Warnings - v3.1
Description
Profile type Settings catalog
Platform supported Windows 10 and later
Created 11 April 2024 11:05:02
Last modified 05 December 2024 20:15:44
Scope tags Default
``` -------------------------------- ### Configuring MacOS Software Updates via Intune Source: https://github.com/skiptotheendpoint/openintunebaseline/blob/main/MACOS/SETTINGSOUTPUT.md This snippet lists configuration settings for managing macOS software updates on devices via Intune. ```Configuration Setting Name: Top Level Setting Group Collection Value: Not configured ``` ```Configuration Setting Name: Restrict Software Update Require Admin To Install Value: False ``` ```Configuration Setting Name: Automatically Install Mac OS Updates Value: True ``` ```Configuration Setting Name: Automatically Install App Updates Value: True ``` ```Configuration Setting Name: Automatic Check Enabled Value: True ``` ```Configuration Setting Name: Automatic Download Value: True ``` ```Configuration Setting Name: Critical Update Install Value: True ``` ```Configuration Setting Name: Config Data Install Value: True ``` -------------------------------- ### Defining Code Requirement for wdav.epsext Source: https://github.com/skiptotheendpoint/openintunebaseline/blob/main/MACOS/SETTINGSOUTPUT.md This snippet specifies the code signing requirements for the 'com.microsoft.wdav.epsext' bundle ID. It requires the code to be signed by Apple, have specific certificate fields present, and belong to the team identifier UBF8T346G9. ```Apple Code Requirement Language identifier "com.microsoft.wdav.epsext" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = UBF8T346G9 ``` -------------------------------- ### Windows Update for Business Restart Warning Settings (Table 97) Source: https://github.com/skiptotheendpoint/openintunebaseline/blob/main/WINDOWS/SETTINGSOUTPUT.md Details the configuration settings for Windows Update restart notifications and warnings, including the schedule for auto-restart notifications (15 Minutes), required notification dismissal method (User Dismissal), and timing for imminent (60 Minutes) and standard (8 Hours) restart warnings. ```HTML
Name Value
Windows Update For Business
Auto Restart Notification Schedule 15 Minutes
Auto Restart Required Notification Dismissal User Dismissal.
Schedule Imminent Restart Warning 60 Minutes
Schedule Restart Warning 8 Hours
``` -------------------------------- ### Configure Default Script File Associations via XML Source: https://github.com/skiptotheendpoint/openintunebaseline/blob/main/WINDOWS/SETTINGSOUTPUT.md This XML configuration defines the default application used to open various script and executable file types on Windows devices. It sets Notepad as the default application for file extensions such as .appx, .bat, .cab, .com, .cmd, .hta, .js, .jse, .ps1, .ps1m, .sct, .shb, .shs, .wsf, .wsh, .vbe, and .vbs. This configuration is typically used as a security hardening measure to prevent accidental execution of potentially malicious scripts. ```XML ``` -------------------------------- ### Configuring Microsoft Edge Profiles, Sign-In, and Sync - macOS Intune OIB Source: https://github.com/skiptotheendpoint/openintunebaseline/blob/main/MACOS/SETTINGSOUTPUT.md Outlines the settings for managing user profiles, browser sign-in behavior, and data synchronization in Microsoft Edge on macOS via an Intune Settings Catalog profile from the Open Intune Baseline project. It includes settings for forcing sign-in, disabling profile creation, disabling ephemeral profiles, and forcing sync without prompt. ```JSON [ {"Name": "Browser sign-in settings", "Value": "Force users to sign-in to use the browser"}, {"Name": "Enable profile creation from the Identity flyout menu or the Settings page", "Value": "Disabled"}, {"Name": "Enable use of ephemeral profiles", "Value": "Disabled"}, {"Name": "Force synchronization of browser data and do not show the sync consent prompt", "Value": "Enabled"} ] ``` -------------------------------- ### Configuring Microsoft OneDrive Known Folder Move on MacOS Source: https://github.com/skiptotheendpoint/openintunebaseline/blob/main/MACOS/SETTINGSOUTPUT.md This snippet lists configuration settings for managing Microsoft OneDrive's Known Folder Move feature on macOS devices via Intune. ```Configuration Setting Name: Automatically and silently enable the Folder Backup feature (Known Folder Move) Value: %OrganizationId% ``` ```Configuration Setting Name: Block external sync Value: True ``` ```Configuration Setting Name: Disable automatic sign in Value: False ``` ```Configuration Setting Name: Disable personal accounts Value: True ``` ```Configuration Setting Name: Disable tutorial Value: True ``` ```Configuration Setting Name: Display a notification to users once their folders have been redirected Value: False ``` ```Configuration Setting Name: Enable Files On-Demand Value: True ``` ```Configuration Setting Name: Enable simultaneous edits for Office apps Value: True ``` ```Configuration Setting Name: Force users to use the Folder Backup feature (Known Folder Move) Value: True ``` ```Configuration Setting Name: Hide dock icon Value: True ``` ```Configuration Setting Name: Ignore named files Value: `*.lnk;`*.pst;`*.pkg;`*.dmg ``` ```Configuration Setting Name: Include ~/Desktop in Folder Backup (Known Folder Move) Value: True ``` ```Configuration Setting Name: Include ~/Documents in Folder Backup (Known Folder Move) Value: True ``` ```Configuration Setting Name: Open at login Value: True ``` ```Configuration Setting Name: Prompt users to enable the Folder Backup feature (Known Folder Move) Value: %OrganizationId% ``` -------------------------------- ### Defining Code Requirement for dlp.daemon Source: https://github.com/skiptotheendpoint/openintunebaseline/blob/main/MACOS/SETTINGSOUTPUT.md This snippet specifies the code signing requirements for the 'com.microsoft.dlp.daemon' bundle ID. It requires the code to be signed by Apple, have specific certificate fields present, and belong to the team identifier UBF8T346G9. ```Apple Code Requirement Language identifier "com.microsoft.dlp.daemon" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = UBF8T346G9 ``` -------------------------------- ### Windows Update for Business Reports and Telemetry Settings (Table 95) Source: https://github.com/skiptotheendpoint/openintunebaseline/blob/main/WINDOWS/SETTINGSOUTPUT.md Describes the specific settings related to diagnostic data and telemetry configuration for Windows Update for Business, including allowing device name in diagnostic data, telemetry level, and disabling telemetry change notifications and settings UI. ```HTML
Name Value
System
Allow device name to be sent in Windows diagnostic data Allowed.
Allow Telemetry Full
Configure Telemetry Opt In Change Notification Disable telemetry change notifications.
Configure Telemetry Opt In Settings Ux Disable Telemetry opt-in Settings.
Windows Update For Business
Allow Temporary Enterprise Feature Control Allowed
``` -------------------------------- ### macOS Security Code Requirement for Microsoft OneDrive Source: https://github.com/skiptotheendpoint/openintunebaseline/blob/main/MACOS/SETTINGSOUTPUT.md This string defines a security requirement used by macOS to verify the authenticity and integrity of the Microsoft OneDrive application. It checks the application's bundle identifier, generic anchor, specific certificate fields, and the Apple Developer Team Identifier (UBF8T346G9) to ensure it is signed by a trusted source. This is typically used in security policies to grant permissions or control access. ```text identifier "com.microsoft.OneDrive" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = UBF8T346G9 ``` === COMPLETE CONTENT === This response contains all available snippets from this library. No additional content exists. Do not make further requests.