[pull] dev from KelvinTegelaar:dev#102
Open
pull[bot] wants to merge 7350 commits intocovenanttechnologysolutions:devfrom
Open
[pull] dev from KelvinTegelaar:dev#102pull[bot] wants to merge 7350 commits intocovenanttechnologysolutions:devfrom
pull[bot] wants to merge 7350 commits intocovenanttechnologysolutions:devfrom
Conversation
Add Invoke-CIPPStandardintuneDeviceRegLocalAdmins. Control whether users who register/enroll devices are granted local admin rights and whether Global Administrators are added as local admins.
Add DeviceRegLocalAdmins Standard
…viceLicenses Fixed Standard disable self service licenses handling and logging
User submissions fix
Fix drift comparison issue for NotifyOutboundSpamRecipients in StandardOutBoundSpamAlert
Fix in Invoke-ExecUpdateDriftDeviation.ps1: previously the 'remediate' and 'report' NoteProperties were being added to $StandardTemplate.standards.$Setting and $Settings was set to that nested object. This change adds the properties directly to $StandardTemplate and sets $Settings to $StandardTemplate, ensuring the correct object receives the flags and that downstream code receives the expected settings structure.
Dev to hotfix
…d OOO support Implemented the full backend for the vacation mode feature covering mailbox permissions, calendar access, and out-of-office messages. - Added Invoke-ExecScheduleMailboxVacation for scheduling mailbox vacation mode - Added Set-CIPPMailboxPermission for unified mailbox permission management - Added Set-CIPPMailboxVacation to handle both mailbox and calendar permissions - Added -AutoResolveFolderName switch to dynamically resolve locale-independent calendar FolderId (avoids hardcoded 'Calendar' failing in non-English tenants) - Added Invoke-ExecScheduleOOOVacation for scheduling OOO messages via scheduler - Added Set-CIPPVacationOOO to manage OOO state with internal and external messages
Replace the New-CippDbRequest call with New-ExoRequest to retrieve the transport configuration.
Update GDAP relationship check to use 15-role recommended group set FIxes: KelvinTegelaar/CIPP#5457
Fix: Update GDAP relationship check to use 15-role recommended group set
Disable smtp auth fix
Pass UserPrincipalName to license operations and normalize license inputs. Invoke-EditUser now includes UserPrincipalName when calling Set-CIPPUserLicense. Invoke-ExecBulkLicense normalizes userId values to strings, chunks user ID OData filters to avoid Graph OR limits, issues a bulk Graph lookup request, aggregates chunk results, and handles missing users and lookup errors. Set-CIPPUserLicense coerces AddLicenses/RemoveLicenses to string arrays, filters out empty values, defaults UserPrincipalName to UserId when missing, and sends clean arrays in assignLicense payloads to prevent null/nested skuId issues.
Fix: Normalize licenses and batch user lookups
Read defaultDomainName from request and include it when clearing offboarding defaults: build partition keys from customerId and defaultDomainName, find matching OffboardingDefaults entities, and remove each match (with improved log message). In tenant listing, prefer offboarding defaults by customerId, fall back to initialDomainName, and select the first match; adjust parse-failure logging to reference the tenant domain. These changes ensure defaults are resolved/removed for both customer and domain partition keys and avoid multiple-match ambiguity.
Fix: Handle defaultDomainName when managing defaults
…r-comparison Fix: order-dependent comparison in MailContacts standard evaluation
Feat: Server side bookmarks
…ng-fields Fix/graph explorer preset missing fields
feat: Map 'user-select' language to empty string in Autopilot profile
Fix: fix casting error in AddDKIM standard
feat: Add SID conversion to group and role functions
Feat/app management policy
fix: resolve SharePoint User Information List by template instead of localized display name
Password Configuration Management & Generation
…ty values and nulls appropriately
…compliant Fix: false non-compliant drift detection for templates by handling empty values and nulls appropriately
When many policies were linked to a tag, the endpoint became slow enough to trigger frontend API timeouts. This was caused by repeatedly scanning the full tagged template list for each tag operation.
Fixes an issue only with reporting where when no roles are selected GA is added but this is not also handled in the reporting block, only in the remediate block
The object id is resolved to the graph api object rather than the user object, this makes the management portal url use the same Userkey as the alert title
Use Userkey instead of ObjectId
Fix: Evaluate Global Admin as a default role when no roles are set
Fix: Optimise List Intune Templates by Tag
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )