CmdID / PowerShell / Cmdlets / Update
Update-MgDeviceAppManagementWindowsInformationProtectionPolicy
Update the navigation property windowsInformationProtectionPolicies in deviceAppManagement Microsoft Graph PowerShell reference
From the Microsoft Graph PowerShell reference 57 parameters Its page in the reference
Parameters
Show its 57 parameters
-AdditionalPropertiesAdditional Parameters-AssignmentsNavigation property to list of security groups targeted for policy.-AzureRightsManagementServicesAllowedSpecifies whether to allow Azure RMS encryption for WIP-BodyParameterPolicy for Windows information protection without MDM To construct, see NOTES section for BODYPARAMETER properties and create a hash table.-BreakWait for .NET debugger to attach-Confirm, -cfPrompts you for confirmation before running the cmdlet.-CreatedDateTimeThe date and time the policy was created.-DataRecoveryCertificateWindows Information Protection DataRecoveryCertificate To construct, see NOTES section for DATARECOVERYCERTIFICATE properties and create a hash table.-DaysWithoutContactBeforeUnenrollOffline interval before app data is wiped (days) .-DescriptionThe policy's description.-DisplayNamePolicy display name.-EnforcementLevelPossible values for WIP Protection enforcement levels-EnterpriseDomainPrimary enterprise domain-EnterpriseInternalProxyServersThis is the comma-separated list of internal proxy servers.-EnterpriseIPRangesSets the enterprise IP ranges that define the computers in the enterprise network.-EnterpriseIPRangesAreAuthoritativeBoolean value that tells the client to accept the configured list and not to use heuristics to attempt to find other subnets.-EnterpriseNetworkDomainNamesThis is the list of domains that comprise the boundaries of the enterprise.-EnterpriseProtectedDomainNamesList of enterprise domains to be protected To construct, see NOTES section for ENTERPRISEPROTECTEDDOMAINNAMES properties and create a hash table.-EnterpriseProxiedDomainsContains a list of Enterprise resource domains hosted in the cloud that need to be protected.-EnterpriseProxyServersThis is a list of proxy servers.-EnterpriseProxyServersAreAuthoritativeBoolean value that tells the client to accept the configured list of proxies and not try to detect other work proxies.-ExemptAppLockerFilesAnother way to input exempt apps through xml files To construct, see NOTES section for EXEMPTAPPLOCKERFILES properties and create a hash table.-ExemptAppsExempt applications can also access enterprise data, but the data handled by those applications are not protected.-HeadersOptional headers that will be added to the request.-HttpPipelineAppendSendAsync Pipeline Steps to be appended to the front of the pipeline-HttpPipelinePrependSendAsync Pipeline Steps to be prepended to the front of the pipeline-IconsVisibleDetermines whether overlays are added to icons for WIP protected files in Explorer and enterprise only app tiles in the Start menu.-IdThe unique identifier for an entity.-IndexingEncryptedStoresOrItemsBlockedThis switch is for the Windows Search Indexer, to allow or disallow indexing of items-InputObjectIdentity Parameter To construct, see NOTES section for INPUTOBJECT properties and create a hash table.-IsAssignedIndicates if the policy is deployed to any inclusion groups or not.-LastModifiedDateTimeLast time the policy was modified.-MdmEnrollmentUrlEnrollment url for the MDM-MinutesOfInactivityBeforeDeviceLockSpecifies the maximum amount of time (in minutes) allowed after the device is idle that will cause the device to become PIN or password locked.-NeutralDomainResourcesList of domain names that can used for work or personal resource To construct, see NOTES section for NEUTRALDOMAINRESOURCES properties and create a hash table.-NumberOfPastPinsRememberedInteger value that specifies the number of past PINs that can be associated to a user account that can't be reused.-PasswordMaximumAttemptCountThe number of authentication failures allowed before the device will be wiped.-PinExpirationDaysInteger value specifies the period of time (in days) that a PIN can be used before the system requires the user to change it.-PinLowercaseLettersPin Character Requirements-PinMinimumLengthInteger value that sets the minimum number of characters required for the PIN.-PinSpecialCharactersPin Character Requirements-PinUppercaseLettersPin Character Requirements-ProtectedAppLockerFilesAnother way to input protected apps through xml files To construct, see NOTES section for PROTECTEDAPPLOCKERFILES properties and create a hash table.-ProtectedAppsProtected applications can access enterprise data and the data handled by those applications are protected with encryption To construct, see NOTES section for PROTECTEDAPPS properties and create a ha…-ProtectionUnderLockConfigRequiredSpecifies whether the protection under lock feature (also known as encrypt under pin) should be configured-ProxyThe URI for the proxy server to use-ProxyCredentialCredentials for a proxy server to use for the remote call-ProxyUseDefaultCredentialsUse the default credentials for the proxy-ResponseHeadersVariable, -RHVOptional Response Headers Variable.-RevokeOnMdmHandoffDisabledNew property in RS2, pending documentation-RevokeOnUnenrollDisabledThis policy controls whether to revoke the WIP keys when a device unenrolls from the management service.-RightsManagementServicesTemplateIdTemplateID GUID to use for RMS encryption.-SmbAutoEncryptedFileExtensionsSpecifies a list of file extensions, so that files with these extensions are encrypted when copying from an SMB share within the corporate boundary To construct, see NOTES section for SMBAUTOENCRYPTE…-VersionVersion of the entity.-WhatIf, -wiRuns the command in a mode that only reports what would happen without performing the actions.-WindowsHelloForBusinessBlockedBoolean value that sets Windows Hello for Business as a method for signing into Windows.-WindowsInformationProtectionPolicyIdThe unique identifier of windowsInformationProtectionPolicy