Skip to content

[pull] dev from KelvinTegelaar:dev#102

Open
pull[bot] wants to merge 132 commits into
isgq-github01:devfrom
KelvinTegelaar:dev
Open

[pull] dev from KelvinTegelaar:dev#102
pull[bot] wants to merge 132 commits into
isgq-github01:devfrom
KelvinTegelaar:dev

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented May 15, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull Bot locked and limited conversation to collaborators May 15, 2026
@pull pull Bot added the ⤵️ pull label May 15, 2026
kris6673 and others added 24 commits May 15, 2026 20:29
…eRegistration

The standard was writing to azureADJoin.allowedToJoin despite its name —
that's the join scope, not registration. Re-point reads and writes to
azureADRegistration.allowedToRegister.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Restores the azureADJoin.allowedToJoin behavior that previously lived
(mislabeled) inside intuneRestrictUserDeviceRegistration. Join and
registration are independent scopes, so each needs its own standard.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Separate the standards for user device join and registration in Intune.
Adjust the implementation to ensure that each standard operates
independently, correcting previous mislabeling

Frontend PR: KelvinTegelaar/CIPP#6019
Zacgoose and others added 30 commits June 1, 2026 12:39
access checks are performed at the new-cippcorerequest level
H-003
Standard was missing report and alert blocks so compliance state was
never recorded. Added both blocks with correct Expected/Current
Configuration output showing template name, list type, and Allow/Block
action. Remediate block unchanged.

<img width="948" height="370" alt="image"
src="https://github.com/user-attachments/assets/f67fc0fd-bac4-4087-a077-92a552638a35"
/>

<img width="951" height="353" alt="image"
src="https://github.com/user-attachments/assets/4035a2c9-3b91-4319-82a0-5413160d79fb"
/>

Relates to #6081 - KelvinTegelaar/CIPP#6081
Change endpoint roles for Android and Apple enrollment profile functions
to use `Autopilot.Read` instead of `MEM.Read`.

Frontend PR: KelvinTegelaar/CIPP#6079
Replace premature 'return' with 'continue' to avoid exiting the processing loop on individual template errors. Rename occurrences of the standard identifier from 'DeployContactTemplate' to 'DeployContactTemplates' (Write-StandardsAlert calls and Set-CIPPStandardsCompareField field name) so comparison and alerting use the pluralized key consistently.
Include guests with externalUserState 'PendingAcceptance' (unredeemed invites) in selection and treat them as stale. Add createdDateTime to filtered results, record reason when disabling (either unredeemed invite or last sign-in), and compute separate Pending vs Stale counts for alerts and logs. Extend report payload and expected values with GuestsStaleSignInCount, GuestsPendingAcceptanceCount and detailed pending-invite lists. Minor logging/message wording improvements for clearer diagnostics.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants