nicolonsky / modernworkplaceconcierge

Concierge which simplifies and automates tasks in the Microsoft 365 cloud

❗ Thank you for using the Modern Workplace Concierge and your support. This project is archived and not actively being maintained. Feel free to fork the project or deploy it to your own Azure tenant

About

The Modern Workplace Concierge is a helper tool to simplify your daily work with Microsoft 365 services. It allows you to:

• Import and export Intune configuration and settings
• Import and export Conditional Access policies
• Document Conditional Access policies
• Deploy a Conditional Access baseline
• Download OSD ready offline Autopilot profiles
• Re-download uploaded PowerShell scripts from Intune
• Import trello boards to Microsoft Planner

The tool is built on ASP.NET and works with the Microsoft Graph Beta API.

Supported entities

Supported configuration in imports and exports are documented on this project's wiki.

Consent and Permissions

To Authenticate with the Microsoft Graph API a multi tenant Azure AD application performs authentication and you will need to provide admin consent to the Azure AD application before you can use this tool.

Privacy

The app uses Azure application insights and traces performance markers what-does-application-insights-monitor. All data is processed in memory and not stored persistent or used for further processing.

Host your own instance

If you are not allowed to or don't like to use the public instance of the Modern Workplace Concierge you can deploy an instance in your Azure tenant & setup an app registration. Wiki documentation for Self-hosting a custom instance.

modernworkplaceconcierge's Issues

Import Planner Tasks

I am getting this error and tasks are not imported.
2021-02-04T16:59:35.058Z Error: Object reference not set to an instance of an object.

Azure Deployment - Cannot find SourceControlToken with name GitHub

Hello,

when I try to deploy, i receive the following error:

{ "code": "DeploymentFailed", "message": "At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details.", "details": [ { "message": "Cannot find SourceControlToken with name GitHub." } ] }

Thanks in advance,

Robert

Unable to Import CA Policy containing "urn:user:registersecurityinfo" unless All Users are targeted

When importing a CA policy containing the user action, and targeting at Groups rather than Users: All, the following error appears:

Error: Code: BadRequest Message: The server could not process the request because it is malformed or incorrect. Inner error: Message: 1012: 'applications' condition cannot include both 'includeApplications' and 'includeUserActions'/'includeProtectionLevels'. Please remove one of the conditions.

Applications is blank -
"applications": {
"includeApplications": [],
"excludeApplications": [],
"includeUserActions": [
"urn:user:registersecurityinfo"
]
}

CA - Base protection - Register security information- Require trusted device or location For internal users.zip

Error when exporting my Intune

Hi, wonder if you can help.
I can export fine from one Intune (MEM) tenant but from another I get the following error.

2020-12-10T17:20:41.604Z Error Code: ResourceNotFound Message: { "_version": 3, "Message": "An error has occurred - Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 - Activity ID: 3d200617-282f-44fc-9e79-e4f5f4b264dc - Url: https://fef.msub01.manage.microsoft.com/GroupPolicy/GroupPolicyAdminService/b15c97ad-ffff-8809-1153-120922235625/deviceManagement/groupPolicyConfigurations%28%27152baca4-31d9-4d59-ad1d-3290073f6050%27%29/definitionValues%28%27ff47b5f4-e832-4281-8612-8461eb87d51b%27%29/definition?api-version=5018-11-06", "CustomApiErrorPhrase": "", "RetryAfter": null, "ErrorSourceService": "", "HttpHeaders": "{}" } Inner error: AdditionalData: date: 2020-12-10T17:20:41 request-id: 3d200617-282f-44fc-9e79-e4f5f4b264dc client-request-id: 3d200617-282f-44fc-9e79-e4f5f4b264dc ClientRequestId: 3d200617-282f-44fc-9e79-e4f5f4b264dc

Any help or pointers would be appreciated.

Many Thanks
Perry

Add support for Administrative Templates

Implement importing and exporting Intune administrative template configurations.

Add App Configuration Policies for MDM enrolled devices

Unknown Error code

Hello,

If a user do not have the right to access the intune service, the error message is not descriptive/user friendly (see screenshot attached).

Do you think it would be possible to include an error message page stating the user do not have access to Intune service for example.

Thank you!

The request is invalid: A type named 'microsoft.taskServices.plannerAssignmentCollection' could not be resolved by the model.

Hi,

I'm getting the following error when trying to import a JSON from Trello to Planner:

2021-01-18T15:40:15.848Z Error: Message: The request is invalid: A type named 'microsoft.taskServices.plannerAssignmentCollection' could not be resolved by the model. When a model is available, each type name must resolve to a valid type. Inner error: AdditionalData: date: 2021-01-18T15:40:15 request-id: 309c5ccb-cdb0-4e44-8585-a36a461f24bf client-request-id: 309c5ccb-cdb0-4e44-8585-a36a461f24bf ClientRequestId: 309c5ccb-cdb0-4e44-8585-a36a461f24bf

Also, I attached the log:
ModernWorkplaceConcierge.log

Any clue for the cause of this issue?

Thanks

Trello Import not completed?

Hi!

I'm using your online version, and it imported all the tasks, but the import has been running for about 10 minutes now (spinning import icon), and items like checklists are not showing up. Labels aren't showing up - although you don't specify if they should migrate.

Json import does not create checklists

Hi,

Thanks for the Tool! Saves a lot of work typing it over in Planner.

However, when doing an import of Trello JSON file, there are no Checklists created within the task.
I cannot attach the JSON due to privacy issues.

How do i solve this?

Logs Download check box

When doing testing i found myself many times wishing i had thought of cpying the logs before re-running the ttol, as those are not available afterwards. Maybe add a check box to force download of logs whenever an operation is done on the tool would help keeping tracks of previous runs.

Feature request: Trello import - Import comments

Comments are very valuable. Does the graph API allow creating of comments? The best scenario would be to create the comments as the user that originally commented in Trello to keep conversation history.

Auto deployment failed

Command: "D:\home\site\deployments\tools\deploy.cmd"
Handling .NET Web Application deployment.
MSBuild auto-detection: using msbuild version '14.0.23107.0 built by: D14REL' from 'D:\Program Files (x86)\MSBuild\14.0\Bin'.
All packages listed in packages.config are already installed.
D:\Program Files (x86)\MSBuild\Microsoft\VisualStudio\v14.0\TypeScript\Microsoft.TypeScript.targets(242,5): warning : No compiler log specified, 'Clean' won't work. [D:\home\site\repository\ModernWorkplaceConcierge\ModernWorkplaceConcierge.csproj]
Helpers\AzureADIDCache.cs(36,52): error CS1003: Syntax error, ',' expected [D:\home\site\repository\ModernWorkplaceConcierge\ModernWorkplaceConcierge.csproj]
Helpers\AzureADIDCache.cs(64,53): error CS1003: Syntax error, ',' expected [D:\home\site\repository\ModernWorkplaceConcierge\ModernWorkplaceConcierge.csproj]
Helpers\AzureADIDCache.cs(98,52): error CS1003: Syntax error, ',' expected [D:\home\site\repository\ModernWorkplaceConcierge\ModernWorkplaceConcierge.csproj]
Helpers\AzureADIDCache.cs(122,56): error CS1003: Syntax error, ',' expected [D:\home\site\repository\ModernWorkplaceConcierge\ModernWorkplaceConcierge.csproj]
Helpers\AzureADIDCache.cs(147,59): error CS1003: Syntax error, ',' expected [D:\home\site\repository\ModernWorkplaceConcierge\ModernWorkplaceConcierge.csproj]
Helpers\AzureADIDCache.cs(155,104): error CS1525: Invalid expression term 'string' [D:\home\site\repository\ModernWorkplaceConcierge\ModernWorkplaceConcierge.csproj]
Helpers\AzureADIDCache.cs(155,111): error CS1003: Syntax error, ',' expected [D:\home\site\repository\ModernWorkplaceConcierge\ModernWorkplaceConcierge.csproj]
Failed exitCode=1, command="D:\Program Files (x86)\MSBuild\14.0\Bin\MSBuild.exe" "D:\home\site\repository\ModernWorkplaceConcierge\ModernWorkplaceConcierge.csproj" /nologo /verbosity:m /t:Build /t:pipelinePreDeployCopyAllFilesToOneFolder /p:_PackageTempDir="D:\local\Temp\8d7e904ffdc1a5b";AutoParameterizationWebConfigConnectionStrings=false;Configuration=Release;UseSharedCompilation=false /p:SolutionDir="D:\home\site\repository.\"
An error has occurred during web site deployment.
\r\nD:\Program Files (x86)\SiteExtensions\Kudu\86.20224.4450\bin\Scripts\starter.cmd "D:\home\site\deployments\tools\deploy.cmd"

Entity names can lead to invalid file names in export

Items labeled e.g. as “ZT1 - Block Legacy Authentication (POP/IMAP/SMTP, etc.)” containing slashes are interpreted as file path and can lead to unintended export file structure. Validation of file names should be added.

Selective Import/export in addition to global approach

In order to be able to do a selective Import, the actual way is to delete unwanted files from the exported Zip File. While this is working OK, it would be nice to be able to simply export/import a few manually selected items, for exmple when doing incremental setups of a Production Tenant from a Qualification One, items are generally incrementally copied to Production as they are rolled out progressively... deleteing files from export can be a bit cumbersome if the items are many...

Login problem after first wrong login

At the first login I missed to check the box "alow for all" or someting like that and so I can't choose a plan from other users. I allready deleted within O365 the access to the app but login is still possible w/o a new request. What can I do?

Target Office Group Drowndown

Target Office 365 Planner Plan dropdown field only shows 7 options.
I got more than 20 Planner Plans.
Is this a limitation ?

Azure dpeloyment failure: Cannot find User with name 10032000E21251C3

• Resource: ModernWorkplaceConciergeSite/web
• Type: Microsoft.Web/sites/sourcecontrols
• Status Message:

{
    "status": "Failed",
    "error": {
        "code": "NotFound",
        "message": "Cannot find User with name 10032000E21251C3.",
        "details": [
            {
                "message": "Cannot find User with name 10032000E21251C3."
            },
            {
                "code": "NotFound"
            },
            {}
        ]
    }
}

Unable to Export Conditional Access Policies

Hi Nicola,

I've previously used this tool on our conditional access policies to take a backup before making changes, very useful :)

However when running the Export I now get an error, which also disappears off screen before I can copy and paste it. I managed to take a screenshot;

Add suppport for Import of Scope Tags, Role Scope Tags

Scope tags are already exported, and importing them could be a quick win if implemented.

The reply URL specified in the request does not match the reply URLs configured

I have deployed a private instance in my tenant. I believe I followed your instructions from here correctly but I am getting the following error when I try and log in.

Message: AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application: 'd2d4508b-ef28-4dec-8795-454020cb3414'.

Looks like a bad url, any help on where this setting would need to be fixed. I have checked all my urls and they appear to be ok.
Thanks

Support for Endpoint security settings?

Are there any plans to add functionality for Endpoint security settings?
They currently don't seem to be part of the export.
https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-security

2021-11-02T19:08:18.985Z Error Code: generalException Message: Unable to create an instance of type Microsoft.Graph.WindowsKioskAppConfiguration.

Hi Team

I get the following issue when trying to download the Intune Config

2021-11-02T19:08:18.985Z Error Code: generalException Message: Unable to create an instance of type Microsoft.Graph.WindowsKioskAppConfiguration.

Message: Unable to create an instance of type Microsoft.Graph.WindowsKioskAppConfiguration.

Any Suggestions?

Thanks in advance

Feature request: Trello Import - User mapping

Having a mapping section where you can select which trello users map to which O365 user would be super.

Trello Card Checklist is not migrated

Hi,

Just moving a Trello board over using the public instance, and noticing checklists selectively come through... I'm not sure exactly what the problem is.

Please ping me and I can DM you or otherwise send the JSON export of my Trello board privately. I wasn't able to work around the issue.

Source trello card: http://prntscr.com/1q9ssta

The card from Trello JSON below

alex@DESKTOP-6H0TC0U:~$ cat trello-infra-ops.json | jq -r .cards[14]
{
  "id": "611aaee42b3c580921a5d6a5",
  "address": null,
  "checkItemStates": null,
  "closed": false,
  "coordinates": null,
  "creationMethod": null,
  "dateLastActivity": "2021-08-18T06:18:19.534Z",
  "desc": "",
  "descData": null,
  "dueReminder": null,
  "idBoard": "611aaedd6b624b16c4887f31",
  "idLabels": [],
  "idList": "611aaedd6b624b16c4887f33",
  "idMembersVoted": [],
  "idShort": 1,
  "idAttachmentCover": null,
  "locationName": null,
  "manualCoverAttachment": false,
  "name": "Move to Microsoft-Direct Office 365",
  "pos": 212991,
  "shortLink": "vPcskWAV",
  "isTemplate": false,
  "cardRole": null,
  "badges": {
    "attachmentsByType": {
      "trello": {
        "board": 0,
        "card": 0
      }
    },
    "location": false,
    "votes": 0,
    "viewingMemberVoted": false,
    "subscribed": true,
    "fogbugz": "",
    "checkItems": 9,
    "checkItemsChecked": 4,
    "checkItemsEarliestDue": null,
    "comments": 1,
    "attachments": 0,
    "description": false,
    "due": null,
    "dueComplete": false,
    "start": null
  },
  "dueComplete": false,
  "due": null,
  "email": "REDACTED",
  "idChecklists": [
    "611aaeec6400816c0242c8b8",
    "611ca5f9c5b4e114d973c7ed"
  ],
  "idMembers": [
    "611ab0162f329e3287ae0be5",
    "611aae003adc7c1b0581bfdd"
  ],
  "labels": [],
  "limits": {
    "attachments": {
      "perCard": {
        "status": "ok",
        "disableAt": 1000,
        "warnAt": 900
      }
    },
    "checklists": {
      "perCard": {
        "status": "ok",
        "disableAt": 500,
        "warnAt": 450
      }
    },
    "stickers": {
      "perCard": {
        "status": "ok",
        "disableAt": 70,
        "warnAt": 63
      }
    }
  },
  "shortUrl": "https://trello.com/c/vPcskWAV",
  "start": null,
  "subscribed": true,
  "url": "https://trello.com/c/vPcskWAV/1-move-to-microsoft-direct-office-365",
  "cover": {
    "idAttachment": null,
    "color": null,
    "idUploadedBackground": null,
    "size": "normal",
    "brightness": "dark",
    "idPlugin": null
  },
  "attachments": [],
  "pluginData": [],
  "customFieldItems": []
}

alex@DESKTOP-6H0TC0U:~$ cat trello-infra-ops.json | jq -r '.checklists[] | select(.idCard == "611aaee42b3c580921a5d6a5")'
{
  "id": "611aaeec6400816c0242c8b8",
  "name": "Checklist",
  "idCard": "611aaee42b3c580921a5d6a5",
  "pos": 16384,
  "creationMethod": null,
  "idBoard": "611aaedd6b624b16c4887f31",
  "limits": {
    "checkItems": {
      "perChecklist": {
        "status": "ok",
        "disableAt": 200,
        "warnAt": 180
      }
    }
  },
  "checkItems": [
    {
      "idChecklist": "611aaeec6400816c0242c8b8",
      "state": "complete",
      "id": "611aaef34d460c8c988370e9",
      "name": "Stand up new O365 tenant w/ Microsoft",
      "nameData": null,
      "pos": 16914,
      "due": null,
      "idMember": null
    },
    {
      "idChecklist": "611aaeec6400816c0242c8b8",
      "state": "complete",
      "id": "611aaf080cceb96bdcfd9baa",
      "name": "Migrate emails & onedrives",
      "nameData": null,
      "pos": 50552,
      "due": null,
      "idMember": null
    },
    {
      "idChecklist": "611aaeec6400816c0242c8b8",
      "state": "complete",
      "id": "611aaf0b0fc38e7f48ec1465",
      "name": "Survey people about migration needs - Do they have files that need to come, or can we just start fresh?",      "nameData": null,
      "pos": 33879,
      "due": null,
      "idMember": null
    },
    {
      "idChecklist": "611aaeec6400816c0242c8b8",
      "state": "complete",
      "id": "611aaf0cbec2c646381d1c6d",
      "name": "Delete GoDaddy tenant",
      "nameData": null,
      "pos": 66971,
      "due": null,
      "idMember": null
    }
  ]
}
{
  "id": "611ca5f9c5b4e114d973c7ed",
  "name": "O365 Move-In",
  "idCard": "611aaee42b3c580921a5d6a5",
  "pos": 32768,
  "creationMethod": null,
  "idBoard": "611aaedd6b624b16c4887f31",
  "limits": {
    "checkItems": {
      "perChecklist": {
        "status": "ok",
        "disableAt": 200,
        "warnAt": 180
      }
    }
  },
  "checkItems": [
    {
      "idChecklist": "611ca5f9c5b4e114d973c7ed",
      "state": "incomplete",
      "id": "611ca605ee74823341a6b4dc",
      "name": "Add networxconnect.com domain",
      "nameData": null,
      "pos": 17393,
      "due": null,
      "idMember": null
    },
    {
      "idChecklist": "611ca5f9c5b4e114d973c7ed",
      "state": "incomplete",
      "id": "611ca60b57a2e76de313a5d7",
      "name": "Move to using new primary domain name",
      "nameData": {
        "emoji": {}
      },
      "pos": 33919,
      "due": null,
      "idMember": null
    },
    {
      "idChecklist": "611ca5f9c5b4e114d973c7ed",
      "state": "incomplete",
      "id": "611ca61aed67a3657fd5d6e4",
      "name": "Make default emails different from login emails",
      "nameData": null,
      "pos": 50991,
      "due": null,
      "idMember": null
    },
    {
      "idChecklist": "611ca5f9c5b4e114d973c7ed",
      "state": "incomplete",
      "id": "611ca61e39f5a12e2c80956d",
      "name": "Enforce 2FA",
      "nameData": null,
      "pos": 67544,
      "due": null,
      "idMember": null
    },
    {
      "idChecklist": "611ca5f9c5b4e114d973c7ed",
      "state": "incomplete",
      "id": "611ca62073c51d363d87dcb1",
      "name": "Distribute passwords",
      "nameData": null,
      "pos": 84588,
      "due": null,
      "idMember": null
    }
  ]
}

I don't have the logs from the app when this ran, however they all came back with success no errors reported by the app's console.

Resulting state: No checklist present in destination task in Planner http://prntscr.com/1q9t0hd

Login fails with guest accounts due to incorrect authority

When logging in, guest Azure AD accounts are prompted for a password in the guest tenant (which does not exist) due to a quirk/bug in Microsoft's authentication flow.

Since consumer accounts can't use this project, the issue can be resolved by using the /organization authority when generating the signin URL. Unfortunately it seems to be stored in a private config variable, so I couldn't submit a pull request.

ModernWorkplaceConcierge/ModernWorkplaceConcierge/App_Start/Startup.Auth.cs

Line 25 in 259170a

private static readonly string tokenEndpoint = ConfigurationManager.AppSettings["TokenEndpoint"];

To fix, change TokenEndpoint to https://login.microsoftonline.com/organization/v2.0

" Deploy to Azure " - Error

Thanks for this amazing app. I am having trouble with "Deploy to Azure". It throws error message, something like "We can’t connect to the server at deploy.azure.com."

Any help would be Appreciated

Thanks

Error: Maximum request length exceeded.

Hello,

there is one Board which throws an error when I try to import it. Seems the board/file is to big?

Would be thankfull for help :)

I get this error:
`

Server Error in '/' Application.

---

Maximum request length exceeded.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Web.HttpException: Maximum request length exceeded.

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:


[HttpException (0x80004005): Maximum request length exceeded.] System.Web.HttpRequest.GetEntireRawContent() +808 System.Web.HttpRequest.GetMultipartContent() +64 System.Web.HttpRequest.FillInFormCollection() +245 System.Web.HttpRequest.EnsureForm() +73 System.Web.HttpRequest.get_Form() +13 System.Web.HttpRequestWrapper.get_Form() +10 System.Web.Mvc.HttpRequestExtensions.GetHttpMethodOverride(HttpRequestBase request) +121 System.Web.Mvc.AcceptVerbsAttribute.IsValidForRequest(ControllerContext controllerContext, MethodInfo methodInfo) +37 System.Web.Mvc.HttpPostAttribute.IsValidForRequest(ControllerContext controllerContext, MethodInfo methodInfo) +19 System.Web.Mvc.ActionMethodSelectorBase.IsValidMethodSelector(ReadOnlyCollection1 attributes, ControllerContext controllerContext, MethodInfo method) +54 System.Web.Mvc.ActionMethodSelectorBase.RunSelectionFilters(ControllerContext controllerContext, List1 methodInfos) +135 System.Web.Mvc.ActionMethodSelectorBase.FindActionMethods(ControllerContext controllerContext, String actionName) +166 System.Web.Mvc.ActionMethodSelectorBase.FindActionMethod(ControllerContext controllerContext, String actionName) +31 System.Web.Mvc.Async.ReflectedAsyncControllerDescriptor.FindAction(ControllerContext controllerContext, String actionName) +58 System.Web.Mvc.ControllerActionInvoker.FindAction(ControllerContext controllerContext, ControllerDescriptor controllerDescriptor, String actionName) +222 System.Web.Mvc.Async.AsyncControllerActionInvoker.BeginInvokeAction(ControllerContext controllerContext, String actionName, AsyncCallback callback, Object state) +136 System.Web.Mvc.<>c.<BeginExecuteCore>b__152_0(AsyncCallback asyncCallback, Object asyncState, ExecuteCoreState innerState) +27 System.Web.Mvc.Async.WrappedAsyncVoid1.CallBeginDelegate(AsyncCallback callback, Object callbackState) +30 System.Web.Mvc.Async.WrappedAsyncResultBase1.Begin(AsyncCallback callback, Object state, Int32 timeout) +128 System.Web.Mvc.Controller.BeginExecuteCore(AsyncCallback callback, Object state) +506 System.Web.Mvc.<>c.<BeginExecute>b__151_1(AsyncCallback asyncCallback, Object callbackState, Controller controller) +16 System.Web.Mvc.Async.WrappedAsyncVoid1.CallBeginDelegate(AsyncCallback callback, Object callbackState) +20 System.Web.Mvc.Async.WrappedAsyncResultBase1.Begin(AsyncCallback callback, Object state, Int32 timeout) +128 System.Web.Mvc.Controller.BeginExecute(RequestContext requestContext, AsyncCallback callback, Object state) +370 System.Web.Mvc.Controller.System.Web.Mvc.Async.IAsyncController.BeginExecute(RequestContext requestContext, AsyncCallback callback, Object state) +16 System.Web.Mvc.<>c.<BeginProcessRequest>b__20_0(AsyncCallback asyncCallback, Object asyncState, ProcessRequestState innerState) +54 System.Web.Mvc.Async.WrappedAsyncVoid1.CallBeginDelegate(AsyncCallback callback, Object callbackState) +30 System.Web.Mvc.Async.WrappedAsyncResultBase1.Begin(AsyncCallback callback, Object state, Int32 timeout) +128 System.Web.Mvc.MvcHandler.BeginProcessRequest(HttpContextBase httpContext, AsyncCallback callback, Object state) +397 System.Web.Mvc.MvcHandler.BeginProcessRequest(HttpContext httpContext, AsyncCallback callback, Object state) +48 System.Web.Mvc.MvcHandler.System.Web.IHttpAsyncHandler.BeginProcessRequest(HttpContext context, AsyncCallback cb, Object extraData) +16 System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +444 System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step) +132 System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +163

`

Assignement Recap function

In a general approach to "not forget anything", would it be possible to have a separate log within the zip file that state for every resource if it was assigned to a group (and get that group name if possible), in a form that would allow quick repercution of assignement by the team importing the resources afterward?

Trello import takes forever ... nothing seems to happen

Hi,
Tried to import a small Json file about 622kb but it seems to take forever.
All i can see is "SignalR connection established, connection ID: xxxxx" and the Import icon keep showing the spinning circle.
I have been waiting now for about 20min and still nothing shows up in notifications.

I only see the 'buckets' created in MS Planner but nothing else.

Multiple Baseline Errors

Currently when attempting to add baseline conditional access policies to tenant most fail out.

I used "Device Trust with AADP1 and AADP2"

Attached are the output logs. Seems to be upset with the configured apps. I get similar errors when attempting to create policies via powershell.

ModernWorkplaceConcierge.log

Thanks!

Desktop Client

Ant plans in turning this in to a desktop client?

Only 1 plan in dropdown (Trello to Planner)

I know I have to open the planner before it can show in the concierge vue. Therefore I opened the planner and created an entry in it, but I can't still see it in the concierge

Thanks for your help

Timeout while Importing Trello Tasks

Hello,

we have a problem with importing Trello tasks into Planner boards. Both via the web interface and via the self-hosted app in Azure the solution runs into a timeout after an irregular number of calls. Sometimes up to 1400 api calls are executed until a timeout occurs, sometimes this happens after only a handful of api calls. Error message from the logfile is the following:

2020-09-08T13:38:52.137Z Error: Code: timeout
Message: The request timed out.

The following error message could be found in the ULS logs:

{
"error": {
"code": "InvalidAuthenticationToken",
"message": "Access token is empty."
"innerError": {
"date": "2020-08-31T06:55:14",
"request-id": "902003e1-7d10-4982-a754-d48b361023b0"
}
}
}

After a short time, the browser also displays an error message:

500 - The request timed out.
The web server failed to respond within the specified time.

Is this problem known? We are looking forward to your feedback.

Custom OMA-URI policies are encrypte

Custom OMA-URI policies are now being exported as encrypted.

The isEncrypted and the secretReferenceValueId need to be used to decrypt the policies, or they cannot be re-imported.

Example of encrypted policy:

{
  "omaSettings": [
    {
      "value": "****",
      "displayName": "Chrome ADMX Ingestion",
      "isEncrypted": true,
      "omaUri": "./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Chrome/Policy/ChromeAdmx",
      "@odata.type": "#microsoft.graph.omaSettingString",
      "secretReferenceValueId": "REDACTED-FOR-GITHUB"
    }
  ],
  "createdDateTime": "2020-01-13T07:47:15.2300703+00:00",
  "description": "",
  "displayName": "Chrome ADMX",
  "lastModifiedDateTime": "2020-11-02T23:11:30.218262+00:00",
  "roleScopeTagIds": [
    "0"
  ],
  "supportsScopeTags": true,
  "version": 13,
  "id": "REDACTED-FOR-GITHUB",
  "@odata.type": "#microsoft.graph.windows10CustomConfiguration"
}

Here is a blog post about this issue with a function you may be able to adapt to this app for decryption: Do you backup/export your Intune policies – encrypted? – DeployWindows.

Windows Domain Join Configuration Not Supported

I tried importing Intune configurations using the individual JSON files and received the following error on a Domain Join Configuration profile.

2020-07-15T15:31:05.800Z Error: Unsupported configuration type #microsoft.graph.windowsDomainJoinConfiguration

The JSON file:

{
"computerNameStaticPrefix": "HAADJ-",
"computerNameSuffixRandomCharCount": 9,
"activeDirectoryDomainName": "DOMAIN.com",
"organizationalUnit": "OU=Autopilot,OU=Windows 10,OU=Computers,OU=Client Management,DC=DOMAIN,DC=com",
"lastModifiedDateTime": "2020-07-14T21:45:29.8547531+00:00",
"roleScopeTagIds": [
"0"
],
"supportsScopeTags": true,
"createdDateTime": "2020-07-14T21:45:29.8547531+00:00",
"displayName": "Template - Domain Join Profile",
"version": 1,
"id": "78ed40ae-3d23-4767-33e3-dcf2a84d33b0",
"@odata.type": "#microsoft.graph.windowsDomainJoinConfiguration"
}