IntuneStarterKit (ISK)

This module was created to have a kick start with Intune for managin WIndows devices. You will habe an Autopilot Profile, some basisc Windows & Security Settings as well as some apps.

More Infos at: IntuneStarterKit | scloud.work

Installing the module from PSGallery

The IntuneStarterKit module is published to the PowerShell Gallery. Install it on your system by running the following in an elevated PowerShell console:

Install-Module -Name IntuneStarterKit

Import the module for testing

As an alternative to installing, you chan download this Repository and import it in a PowerShell Session. The path may be different in your case

Import-Module -Name "C:\GitHub\IntuneStarterKit\Module\IntuneStarterKit" -Verbose -Force

Module dependencies

IntuneStarterKit module requires the following modules, which will be automatically installed as dependencies:

• Microsoft.Graph.Authentification
• Microsoft.Graph.Groups
• Microsoft.Graph.Intune
• IntuneBackupAndRestore
• IntuneWin32App

Functions / Examples

Here are all functions and some examples to start with:

• Add-ConfigurationPolicyAssignment
• Add-DeviceCompliancePolicyAssignment
• Add-DeviceConfigurationPolicyAssignment
• Add-DeviceManagementScriptAssignment
• Add-ISK
• Add-ISKAPProfile
• Add-ISKApps
• Add-ISKConfiguration
• Add-ISKESP
• Connect-ISK
• Get-ConfigurationPolicyAssignment
• Get-DeviceConfigurationPolicyAssignment
• Invoke-GitHubDownload
• Invoke-PagingRequest-

Authentication

Before using any of the functions within this module that interacts with Graph API, ensure you are authenticated.

With this command, you'll be connected to the Graph API and be able to use all commands

# Authentication as User
Connect-ISK

Basic commands

Get Devices

# Creates predefinied groups, configurations and apps, AP Profile language "de-CH"
Add-ISK -Language = "de-CH"

Create your own App repository

Build you apps with the following schema:

File	purpose
install.ps1	installatoin routine
uninstall.ps1	uninstallatoin routine
check.ps1	validation script
AppName.intunewin	Intunewinfile of the app

And save the output in a stucture like this:

Here is a blogpost which describes the whole process: My take on Intune Win32 apps - scloud.work

only import apps

Add-ISKApps -Path # GitHub or local path

Create your own configuration repository

# export config
Start-IntuneBackup -Path "C:\temp\IntuneBackup"

# Add and assign
Add-ISKConfiguration -Path # GitHub or local path

Create your own deployment

# Option 1: Custom Language, Apps, Config and Group names
Add-ISK `
-APGroupName "My-AP-Group" `
-StdGroupName "My-Default-Group" `
-Language "de-CH" `
-AppGroupPrefix "My-App-" `
-AppRepoPath "C:\ISK\Apps" `
-ConfigRepoPath "C:\ISK\Configuration"

# Option 2: Only Autopilot Profile, Apps and Configuration with custom dynamic "marketing" Group
## create dynamic group based on group tag "Marketing"
$APGroupTag = New-MgGroup -DisplayName "DEV-WIN-Marketing" `
-Description "Autopilot group tag: Marketing" `
-MailEnabled:$false `
-SecurityEnabled:$true `
-MailNickname "DEV-WIN-Marketing" `
-GroupTypes "DynamicMembership" `
-MembershipRule '(device.devicePhysicalIds -any (_ -eq "[OrderID]:Marketing"))' `
-MembershipRuleProcessingState "On"
## create Autopilot profile for Marketing
Add-ISKAPProfile -Name "Marketing" -AssignTo $APGroupTag.id -Language "en-UK"
## Import configuration and assign to Marketing group
Add-ISKConfiguration -Path "C:\ISK\Configuration" -AssignTo $APGroupTag.id
## Import Apps for marketing and assign them
Add-ISKApps -Path "C:\ISK\Apps" -AssignTo $APGroupTag.id