IntuneMobileThreatDefenseConnector

Parameters

Parameter	Attribute	DataType	Description	Allowed Values
Id	Key	String	The unique identifier for an entity. Read-only.
DisplayName	Write	String	The DisplayName of the Mobile Threat Defense Connector partner. NOTE: Hard coded for convenience, not returned by the Graph API.
AllowPartnerToCollectIOSApplicationMetadata	Write	Boolean	When TRUE, indicates the Mobile Threat Defense partner may collect metadata about installed applications from Intune for IOS devices. When FALSE, indicates the Mobile Threat Defense partner may not collect metadata about installed applications from Intune for IOS devices. Default value is FALSE.
AllowPartnerToCollectIosCertificateMetadata	Write	Boolean	When TRUE, allows the Mobile Threat Defense partner to request a list of installed certificates on iOS/iPadOS devices from Intune to use for threat analysis. This list of installed certificates will be sent from enrolled iOS/iPadOS devices and will include unmanaged certificates (certificates not deployed through Intune). When FALSE, indicates that metadata about installed certificates will not be collected. Default value is FALSE.
AllowPartnerToCollectIOSPersonalApplicationMetadata	Write	Boolean	When TRUE, indicates the Mobile Threat Defense partner may collect metadata about personally installed applications from Intune for IOS devices. When FALSE, indicates the Mobile Threat Defense partner may not collect metadata about personally installed applications from Intune for IOS devices. Default value is FALSE.
AllowPartnerToCollectIosPersonalCertificateMetadata	Write	Boolean	When TRUE, allows the Mobile Threat Defense partner to request a list of installed certificates on personally owned iOS/iPadOS devices from Intune to use for threat analysis. This list of installed certificates will be sent from enrolled personally owned iOS/iPadOS devices and will include unmanaged certificates (certificates not deployed through Intune). When FALSE, no metadata for installed certificates is sent for personally owned iOS/iPadOS devices. Default value is FALSE.
AndroidDeviceBlockedOnMissingPartnerData	Write	Boolean	For Android, set whether Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant.
AndroidEnabled	Write	Boolean	For Android, set whether data from the Mobile Threat Defense partner should be used during compliance evaluations.
AndroidMobileApplicationManagementEnabled	Write	Boolean	When TRUE, indicates that data from the Mobile Threat Defense partner can be used during Mobile Application Management (MAM) evaluations for Android devices. When FALSE, indicates that data from the Mobile Threat Defense partner should not be used during Mobile Application Management (MAM) evaluations for Android devices. Only one partner per platform may be enabled for Mobile Application Management (MAM) evaluation. Default value is FALSE.
GrantMobileThreatDefensePartnerRole	Write	Boolean	When TRUE, indicates that the Mobile Threat Defense partner is granted the Mobile Threat Defense role on enrolled Android Corporate Owned Business Only and Corporate Owned Personally Enabled devices. When FALSE, indicates that the Mobile Threat Defense partner is not granted the Mobile Threat Defense role. Default value is FALSE.
IosDeviceBlockedOnMissingPartnerData	Write	Boolean	For IOS, set whether Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant.
IosEnabled	Write	Boolean	For IOS, get or set whether data from the Mobile Threat Defense partner should be used during compliance evaluations.
IosMobileApplicationManagementEnabled	Write	Boolean	When TRUE, indicates that data from the Mobile Threat Defense partner can be used during Mobile Application Management (MAM) evaluations for IOS devices. When FALSE, indicates that data from the Mobile Threat Defense partner should not be used during Mobile Application Management (MAM) evaluations for IOS devices. Only one partner per platform may be enabled for Mobile Application Management (MAM) evaluation. Default value is FALSE.
LastHeartbeatDateTime	Write	DateTime	DateTime of last Heartbeat received from the Mobile Threat Defense partner.
LaunchMobileThreatDefensePartnerOnSetupEnabled	Write	Boolean	When TRUE, indicates that the Mobile Threat Defense partner will be automatically launched during Android Corporate Owned Business Only and Corporate Owned Personally Enabled device setup. When FALSE, indicates that the Mobile Threat Defense partner will not be automatically launched during setup. Default value is FALSE.
MacDeviceBlockedOnMissingPartnerData	Write	Boolean	When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant for Mac. When FALSE, indicates that Intune may make a device compliant without receiving data from the Mobile Threat Defense partner for Mac. Default value is FALSE.
MacEnabled	Write	Boolean	When TRUE, indicates that data from the Mobile Threat Defense partner can be used during compliance evaluations for Mac. When FALSE, it indicates that data from the Mobile Threat Defense partner should not be used during compliance evaluations for Mac. Default value is FALSE.
MicrosoftDefenderForEndpointAttachEnabled	Write	Boolean	When TRUE, indicates that configuration profile management via Microsoft Defender for Endpoint is enabled. When FALSE, inidicates that configuration profile management via Microsoft Defender for Endpoint is disabled. Default value is FALSE.
PartnerState	Write	String	Partner state of this tenant.
PartnerUnresponsivenessThresholdInDays	Write	UInt32	Get or Set days the per tenant tolerance to unresponsiveness for this partner integration.
PartnerUnsupportedOsVersionBlocked	Write	Boolean	Get or set whether to block devices on the enabled platforms that do not meet the minimum version requirements of the Mobile Threat Defense partner.
WindowsDeviceBlockedOnMissingPartnerData	Write	Boolean	When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant for Windows. When FALSE, indicates that Intune may make a device compliant without receiving data from the Mobile Threat Defense partner for Windows. Default value is FALSE.
WindowsEnabled	Write	Boolean	When TRUE, indicates that data from the Mobile Threat Defense partner can be used during compliance evaluations for Windows. When FALSE, it indicates that data from the Mobile Threat Defense partner should not be used during compliance evaluations for Windows. Default value is FALSE.
WindowsMobileApplicationManagementEnabled	Write	Boolean	When TRUE, indicates that data from the Mobile Threat Defense partner can be used during Mobile Application Management (MAM) evaluations for Windows devices. When FALSE, indicates that data from the Mobile Threat Defense partner should not be used during Mobile Application Management (MAM) evaluations for Windows devices. Only one partner per platform may be enabled for Mobile Application Management (MAM) evaluation. Default value is FALSE.
Ensure	Write	String	Present ensures the instance exists, absent ensures it is removed.	Present, Absent
Credential	Write	PSCredential	Credentials of the workload's Admin
ApplicationId	Write	String	Id of the Azure Active Directory application to authenticate with.
TenantId	Write	String	Id of the Azure Active Directory tenant used for authentication.
ApplicationSecret	Write	PSCredential	Secret of the Azure Active Directory tenant used for authentication.
CertificateThumbprint	Write	String	Thumbprint of the Azure Active Directory application's authentication certificate to use for authentication.
CertificatePassword	Write	PSCredential	Username can be made up to anything but password will be used for CertificatePassword
CertificatePath	Write	String	Path to certificate used in service principal usually a PFX file.
ManagedIdentity	Write	Boolean	Managed ID being used for authentication.
AccessTokens	Write	String[]	Access token used for authentication.

Description

This resource configures a connection to Mobile Threat Defense partner.

Permissions

Graph

To authenticate with the Graph API, this resource requires the following permissions:

Delegated permissions

• Read

• DeviceManagementServiceConfig.Read.All

• Update

• DeviceManagementServiceConfig.ReadWrite.All

Application permissions

• Read

• DeviceManagementServiceConfig.Read.All

• Update

• DeviceManagementServiceConfig.ReadWrite.All

Examples

Example 1

This example is used to test new resources and showcase the usage of new resources being worked on. It is not meant to use as a production baseline.

Configuration Example
{
    param
    (
        [Parameter()]
        [System.String]
        $ApplicationId,

        [Parameter()]
        [System.String]
        $TenantId,

        [Parameter()]
        [System.String]
        $CertificateThumbprint
    )

    Import-DscResource -ModuleName Microsoft365DSC

    Node localhost
    {
        IntuneMobileThreatDefenseConnector "IntuneMobileThreatDefenseConnector-Example"
        {
            AllowPartnerToCollectIOSApplicationMetadata         = $False;
            AllowPartnerToCollectIosCertificateMetadata         = $True;
            AllowPartnerToCollectIosPersonalApplicationMetadata = $False;
            AllowPartnerToCollectIosPersonalCertificateMetadata = $False;
            AndroidDeviceBlockedOnMissingPartnerData            = $False;
            AndroidEnabled                                      = $False;
            AndroidMobileApplicationManagementEnabled           = $False;
            DisplayName                                         = "Microsoft Defender for Endpoint";
            GrantMobileThreatDefensePartnerRole                 = $false;
            Id                                                  = "fc780465-2017-40d4-a0c5-307022471b92";
            IosDeviceBlockedOnMissingPartnerData                = $False;
            IosEnabled                                          = $False;
            IosMobileApplicationManagementEnabled               = $False;
            LastHeartbeatDateTime                               = "1/1/0001 12:00:00 AM";
            LaunchMobileThreatDefensePartnerOnSetupEnabled      = $false;
            MacDeviceBlockedOnMissingPartnerData                = $False;
            MacEnabled                                          = $False;
            MicrosoftDefenderForEndpointAttachEnabled           = $False;
            PartnerState                                        = "notSetUp";
            PartnerUnresponsivenessThresholdInDays              = 7;
            PartnerUnsupportedOsVersionBlocked                  = $False;
            WindowsDeviceBlockedOnMissingPartnerData            = $False;
            WindowsEnabled                                      = $False;
            WindowsMobileApplicationManagementEnabled           = $True;
            Ensure                                              = "Present";
            ApplicationId                                       = $ApplicationId;
            TenantId                                            = $TenantId;
            CertificateThumbprint                               = $CertificateThumbprint;
        }
    }
}

Example 2

This example is used to test new resources and showcase the usage of new resources being worked on. It is not meant to use as a production baseline.

Configuration Example
{
    param
    (
        [Parameter()]
        [System.String]
        $ApplicationId,

        [Parameter()]
        [System.String]
        $TenantId,

        [Parameter()]
        [System.String]
        $CertificateThumbprint
    )

    Import-DscResource -ModuleName Microsoft365DSC

    Node localhost
    {
        IntuneMobileThreatDefenseConnector "IntuneMobileThreatDefenseConnector-Example"
        {
            AllowPartnerToCollectIOSApplicationMetadata         = $False;
            AllowPartnerToCollectIosCertificateMetadata         = $True;
            AllowPartnerToCollectIosPersonalApplicationMetadata = $False;
            AllowPartnerToCollectIosPersonalCertificateMetadata = $False;
            AndroidDeviceBlockedOnMissingPartnerData            = $False;
            AndroidEnabled                                      = $True; # Updated Property
            AndroidMobileApplicationManagementEnabled           = $False;
            DisplayName                                         = "Microsoft Defender for Endpoint";
            GrantMobileThreatDefensePartnerRole                 = $false;
            Id                                                  = "fc780465-2017-40d4-a0c5-307022471b92";
            IosDeviceBlockedOnMissingPartnerData                = $False;
            IosEnabled                                          = $False;
            IosMobileApplicationManagementEnabled               = $False;
            LastHeartbeatDateTime                               = "1/1/0001 12:00:00 AM";
            LaunchMobileThreatDefensePartnerOnSetupEnabled      = $false;
            MacDeviceBlockedOnMissingPartnerData                = $False;
            MacEnabled                                          = $False;
            MicrosoftDefenderForEndpointAttachEnabled           = $False;
            PartnerState                                        = "notSetUp";
            PartnerUnresponsivenessThresholdInDays              = 7;
            PartnerUnsupportedOsVersionBlocked                  = $False;
            WindowsDeviceBlockedOnMissingPartnerData            = $False;
            WindowsEnabled                                      = $False;
            WindowsMobileApplicationManagementEnabled           = $True;
            Ensure                                              = "Present";
            ApplicationId                                       = $ApplicationId;
            TenantId                                            = $TenantId;
            CertificateThumbprint                               = $CertificateThumbprint;
        }
    }
}

Example 3

This example is used to test new resources and showcase the usage of new resources being worked on. It is not meant to use as a production baseline.

Configuration Example
{
    param
    (
        [Parameter()]
        [System.String]
        $ApplicationId,

        [Parameter()]
        [System.String]
        $TenantId,

        [Parameter()]
        [System.String]
        $CertificateThumbprint
    )

    Import-DscResource -ModuleName Microsoft365DSC

    Node localhost
    {
        IntuneMobileThreatDefenseConnector "IntuneMobileThreatDefenseConnector-Example"
        {
            Id                    = "fc780465-2017-40d4-a0c5-307022471b92";
            Ensure                = "Absent";
            ApplicationId         = $ApplicationId;
            TenantId              = $TenantId;
            CertificateThumbprint = $CertificateThumbprint;
        }
    }
}