CmdID

CmdID / PowerShell / Cmdlets / New

New-MgDeviceAppManagementWindowsInformationProtectionPolicy

Create new navigation property to windowsInformationProtectionPolicies for deviceAppManagement Microsoft Graph PowerShell reference

From the Microsoft Graph PowerShell reference 55 parameters Its page in the reference

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

Parameters

55 in the Microsoft Graph PowerShell reference
Show its 55 parameters
-AdditionalPropertiesAdditional Parameters
-AssignmentsNavigation property to list of security groups targeted for policy.
-AzureRightsManagementServicesAllowedSpecifies whether to allow Azure RMS encryption for WIP
-BodyParameterPolicy for Windows information protection without MDM To construct, see NOTES section for BODYPARAMETER properties and create a hash table.
-BreakWait for .NET debugger to attach
-Confirm, -cfPrompts you for confirmation before running the cmdlet.
-CreatedDateTimeThe date and time the policy was created.
-DataRecoveryCertificateWindows Information Protection DataRecoveryCertificate To construct, see NOTES section for DATARECOVERYCERTIFICATE properties and create a hash table.
-DaysWithoutContactBeforeUnenrollOffline interval before app data is wiped (days) .
-DescriptionThe policy's description.
-DisplayNamePolicy display name.
-EnforcementLevelPossible values for WIP Protection enforcement levels
-EnterpriseDomainPrimary enterprise domain
-EnterpriseInternalProxyServersThis is the comma-separated list of internal proxy servers.
-EnterpriseIPRangesSets the enterprise IP ranges that define the computers in the enterprise network.
-EnterpriseIPRangesAreAuthoritativeBoolean value that tells the client to accept the configured list and not to use heuristics to attempt to find other subnets.
-EnterpriseNetworkDomainNamesThis is the list of domains that comprise the boundaries of the enterprise.
-EnterpriseProtectedDomainNamesList of enterprise domains to be protected To construct, see NOTES section for ENTERPRISEPROTECTEDDOMAINNAMES properties and create a hash table.
-EnterpriseProxiedDomainsContains a list of Enterprise resource domains hosted in the cloud that need to be protected.
-EnterpriseProxyServersThis is a list of proxy servers.
-EnterpriseProxyServersAreAuthoritativeBoolean value that tells the client to accept the configured list of proxies and not try to detect other work proxies.
-ExemptAppLockerFilesAnother way to input exempt apps through xml files To construct, see NOTES section for EXEMPTAPPLOCKERFILES properties and create a hash table.
-ExemptAppsExempt applications can also access enterprise data, but the data handled by those applications are not protected.
-HeadersOptional headers that will be added to the request.
-HttpPipelineAppendSendAsync Pipeline Steps to be appended to the front of the pipeline
-HttpPipelinePrependSendAsync Pipeline Steps to be prepended to the front of the pipeline
-IconsVisibleDetermines whether overlays are added to icons for WIP protected files in Explorer and enterprise only app tiles in the Start menu.
-IdThe unique identifier for an entity.
-IndexingEncryptedStoresOrItemsBlockedThis switch is for the Windows Search Indexer, to allow or disallow indexing of items
-IsAssignedIndicates if the policy is deployed to any inclusion groups or not.
-LastModifiedDateTimeLast time the policy was modified.
-MdmEnrollmentUrlEnrollment url for the MDM
-MinutesOfInactivityBeforeDeviceLockSpecifies the maximum amount of time (in minutes) allowed after the device is idle that will cause the device to become PIN or password locked.
-NeutralDomainResourcesList of domain names that can used for work or personal resource To construct, see NOTES section for NEUTRALDOMAINRESOURCES properties and create a hash table.
-NumberOfPastPinsRememberedInteger value that specifies the number of past PINs that can be associated to a user account that can't be reused.
-PasswordMaximumAttemptCountThe number of authentication failures allowed before the device will be wiped.
-PinExpirationDaysInteger value specifies the period of time (in days) that a PIN can be used before the system requires the user to change it.
-PinLowercaseLettersPin Character Requirements
-PinMinimumLengthInteger value that sets the minimum number of characters required for the PIN.
-PinSpecialCharactersPin Character Requirements
-PinUppercaseLettersPin Character Requirements
-ProtectedAppLockerFilesAnother way to input protected apps through xml files To construct, see NOTES section for PROTECTEDAPPLOCKERFILES properties and create a hash table.
-ProtectedAppsProtected applications can access enterprise data and the data handled by those applications are protected with encryption To construct, see NOTES section for PROTECTEDAPPS properties and create a ha…
-ProtectionUnderLockConfigRequiredSpecifies whether the protection under lock feature (also known as encrypt under pin) should be configured
-ProxyThe URI for the proxy server to use
-ProxyCredentialCredentials for a proxy server to use for the remote call
-ProxyUseDefaultCredentialsUse the default credentials for the proxy
-ResponseHeadersVariable, -RHVOptional Response Headers Variable.
-RevokeOnMdmHandoffDisabledNew property in RS2, pending documentation
-RevokeOnUnenrollDisabledThis policy controls whether to revoke the WIP keys when a device unenrolls from the management service.
-RightsManagementServicesTemplateIdTemplateID GUID to use for RMS encryption.
-SmbAutoEncryptedFileExtensionsSpecifies a list of file extensions, so that files with these extensions are encrypted when copying from an SMB share within the corporate boundary To construct, see NOTES section for SMBAUTOENCRYPTE…
-VersionVersion of the entity.
-WhatIf, -wiRuns the command in a mode that only reports what would happen without performing the actions.
-WindowsHelloForBusinessBlockedBoolean value that sets Windows Hello for Business as a method for signing into Windows.