Merge pull request microsoft#4583 from FabienTschanz/fix/endpoint-onb…

…oarding Fix Endpoint onboarding when Intune is connected to Defender for Endpoint
swisscom · Apr 23, 2024 · d148031 · d148031
2 parents 2eb9e48 + 9049b66
commit d148031
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,9 @@
   * Ensures we only return 1 Trustee per entry.
 * EXOManagementRoleAssignment
   * Removed logic to use Graph for Adminitrative Unit.
+* IntuneDeviceConfigurationDefenderForEndpointOnboardingPolicyWindows10
+  * Fixed a comparison issue when Defender for Endpoint is connected to Intune and the
+    onboarding blob is generated by the Defender for Endpoint service.
 * MISC
   * Added support for AccessTokens in EXO resources.
   * Updated MSCloudLoginAssistant dependencies to version 1.1.16.

diff --git a/...Windows10/MSFT_IntuneDeviceConfigurationDefenderForEndpointOnboardingPolicyWindows10.psm1 b/...Windows10/MSFT_IntuneDeviceConfigurationDefenderForEndpointOnboardingPolicyWindows10.psm1
@@ -495,6 +495,12 @@ function Test-TargetResource
     $ValuesToCheck.Remove('TenantId') | Out-Null
     $ValuesToCheck.Remove('ApplicationSecret') | Out-Null
 
+    if ($AdvancedThreatProtectionAutoPopulateOnboardingBlob -and `
+        $PSBoundParameters.AdvancedThreatProtectionAutoPopulateOnboardingBlob)
+    {
+        $ValuesToCheck.Remove('AdvancedThreatProtectionOnboardingBlob') | Out-Null
+    }
+
     Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)"
     Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $ValuesToCheck)"