You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Moved message into a Tip in the Tool usage section, and removed callout of the Bug. Reformatted the messaging a bit as well.
Also revised earlier text to note tha the tool is in fact a PowerShell script, to help build relevance for the subsequent Tip that notes what it does and how to fix it.
The script has a bug: It is looking if you have Endpoint Security policies that are "Target: MDM". If there is no existing policies like this, then the script will be stuck in an infinite loop. To make it work, you need to add either add a policy of that type or change line 46 to: while(($profileNameExist) -and ($profiles.Count -gt 0))
33
-
34
32
Many organizations are moving their security configuration to Microsoft Endpoint Manager to make use of modern, cloud-based management. Endpoint security in Endpoint Manager offers rich management experiences of Windows Firewall configuration and granular firewall rule management.
35
33
36
-
Because it can be challenging to move large numbers of existing Group Policies for Windows Firewall rules to Endpoint security policies in Endpoint Manager, we've created the **Endpoint security firewall rule migration tool**.
34
+
Because it can be challenging to move large numbers of existing Group Policies for Windows Firewall rules to Endpoint security policies in Endpoint Manager, we've created the **Endpoint security firewall rule migration tool**, which is a PowerShell script.
37
35
38
36
When you run the **Endpoint security firewall rule migration tool** on a reference Windows 10/11 client that has firewall rules based on Group Policy applied, the tool can automatically create Endpoint security firewall rule policies in Endpoint Manager. After the endpoint security rules are created, administrators can target the rules to Azure AD groups to configure MDM and co-managed clients.
> The tool's PowerShell script looks for endpoint security policies that target **MDM**. When there are no policies that target **MDM**, the script can loop and fail to exit. To work around this condition, either add a policy that targets MDM before running the script, or edit the line 46 of the script to the following: `while(($profileNameExist) -and ($profiles.Count -gt 0))`
46
+
46
47
Run the tool on a reference machine to migrate that machines current Windows Firewall rule configuration. When run, the tool exports all enabled firewall rules that are present on the device, and automatically creates new Intune policies with the collected rules.
47
48
48
49
1. Sign in to the reference machine with local administrator privileges.
0 commit comments