Microsoft 365 Admin Center

https://learn.microsoft.com/en-us/microsoft-365/admin/
Admin
This documentation provides resources and help for administrators working in the Microsoft 365 admin...
Tokens:171,468
Snippets:3,214
Trust Score:10
Update:3 months ago
Show doc for...
Tokens:
Raw
### Create a Device Configuration Policy Example

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/m365b-devices-basic-mobility-security-policies-configure

Example of creating a configuration policy with a specific name and comment.

```PowerShell
New-DeviceConfigurationPolicy -Name "Contoso Engineering" -Comment "Policy with more restrictive settings."
```

--------------------------------

### Create a Device Configuration Rule Example

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/m365b-devices-basic-mobility-security-policies-configure

Example of creating a rule that applies to no one by using the zero-GUID.

```PowerShell
New-DeviceConfigurationRule -Policy "Contoso Engineering" -TargetGroups "00000000-0000-0000-0000-000000000000"
```

--------------------------------

### Install Microsoft Graph PowerShell SDK

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/m365b-devices-basic-mobility-security-view-device-details

Run this command in an elevated PowerShell window to install the necessary module for managing devices.

```PowerShell
Install-Module Microsoft.Graph -Scope AllUsers
```

--------------------------------

### Retrieve Security Group GUIDs for Rules

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/m365b-devices-basic-mobility-security-policies-configure

Commands to install and connect to the Microsoft Graph module to identify group IDs for policy targeting.

```PowerShell
Install-Module Microsoft.Graph
```

```PowerShell
Connect-MgGraph -Scopes "Group.ReadWrite.All"
```

```PowerShell
Get-MgGroup
```

--------------------------------

### Enable Basic Mobility and Security with PowerShell

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/m365b-devices-basic-mobility-security-set-up

Use these commands to initialize the device tenant policy and rule if they are not already present.

```PowerShell
New-DeviceTenantPolicy

New-DeviceTenantRule -ExclusionList 00000000-0000-0000-0000-000000000000
```

--------------------------------

### Install Microsoft Graph PowerShell module

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/m365b-devices-basic-mobility-security-set-up

Installs the Microsoft Graph module for the current user to enable group management.

```PowerShell
Install-Module -Name Microsoft.Graph -Scope CurrentUser
```

--------------------------------

### Apply device tenant policy configuration

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/m365b-devices-basic-mobility-security-set-up

Example command to block unsupported devices and apply a specific list of security group exclusions.

```PowerShell
Set-DeviceTenantPolicy -BlockUnsupportedDevices $true -ExclusionList "6010e907-3193-4a6f-b94c-a4c24b1398cc","0be37e4a-8f43-4b9f-ab7f-74659816067a"
```

--------------------------------

### Execute the Compatibility Check

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/manage/centralized-deployment-of-add-ins

Run the compatibility check command to verify tenant readiness, which requires tenant domain and admin credentials.

```PowerShell
Invoke-CompatibilityCheck
```

--------------------------------

### Import the Compatibility Checker Module

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/manage/centralized-deployment-of-add-ins

Load the O365CompatibilityChecker module into the current PowerShell session.

```PowerShell
Import-Module O365CompatibilityChecker
```

--------------------------------

### Get Focused Inbox status

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/setup/configure-focused-inbox

Retrieves the current Focused Inbox configuration for a specific user.

```PowerShell
Get-FocusedInbox -Identity <tim@contoso.com>
```
Tokens:
Raw