Mike Poulson

Don't store secrets in app.config

1

It is poor design to recommend people store secret in the .config file. The plain text passwords are source to many hacks. Passwords should be stored in KeyVault or other...

Update Graph API Calls to be Dynamic Cloud Endpoint not hard-coded .com

1

#### Pull Request (PR) description Update REST API calls to graph.microsoft.com commercial endpoint to be dynamic based on detected cloud endpoints. This is to resolve issues where calls to Microsoft...

### Description of the issue IntuneAppProtectionPolicyiOS Functions call to Invoke-MgGraphRequest use a hard coded graph.microsoft.com endpoint which results in failure with EntraID Government tenants. Correct call should use $Global:MSCloudLoginConnectionProfile.MicrosoftGraph.ResourceUrl for...

### Description of the issue IntuneDiskEncryptionMacOS.Set-TargetResource call to Invoke-MgGraphRequest use a hard coded graph.microsoft.com endpoint which results in failure with EntraID Government tenants. Correct call should use $Global:MSCloudLoginConnectionProfile.MicrosoftGraph.ResourceUrl for the...

### Description of the issue IntuneASRRulesPolicyWindows10.Set-TargetResource call to Invoke-MgGraphRequest use a hard coded graph.microsoft.com endpoint which results in failure with EntraID Government tenants. Correct call should use $Global:MSCloudLoginConnectionProfile.MicrosoftGraph.ResourceUrl for the...

### Description of the issue IntuneAccountProtectionLocalUserGroupMembershipPolicy. Update-DeviceManagementConfigurationPolicy call to Invoke-MgGraphRequest use a hard coded graph.microsoft.com endpoint which results in failure with EntraID Government tenants. Correct call should use $Global:MSCloudLoginConnectionProfile.MicrosoftGraph.ResourceUrl for...

### Description of the issue IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10.Update-DeviceConfigurationGroupPolicyDefinitionValue call to Invoke-MgGraphRequest use a hard coded graph.microsoft.com endpoint which results in failure with EntraID Government tenants. Correct call should use $Global:MSCloudLoginConnectionProfile.MicrosoftGraph.ResourceUrl for the...

### Description of the issue IntuneDeviceConfigurationSCEPCertificatePolicyWindows10 functions call to Invoke-MgGraphRequest use a hard coded graph.microsoft.com endpoint which results in failure with EntraID Government tenants. Correct call should use $Global:MSCloudLoginConnectionProfile.MicrosoftGraph.ResourceUrl for...

### Description of the issue IntuneSettingCatalogCustomPolicyWindows10 functions call to Invoke-MgGraphRequest use a hard coded graph.microsoft.com endpoint which results in failure with EntraID Government tenants. Correct call should use $Global:MSCloudLoginConnectionProfile.MicrosoftGraph.ResourceUrl for...

### Description of the issue IntuneSettingCatalogCustomPolicyWindows10.Set-TargetResource call to Invoke-MgGraphRequest use a hard coded graph.microsoft.com endpoint which results in failure with EntraID Government tenants. Correct call should use $Global:MSCloudLoginConnectionProfile.MicrosoftGraph.ResourceUrl for the...