v0.7.0

IntuneHydrationKit v0.7.0

Installation

Install-Module -Name IntuneHydrationKit -Scope CurrentUser

Release Notes

Install directly from the PowerShell Gallery:

Install-Module -Name IntuneHydrationKit -Scope CurrentUser

To update to the latest version:

Update-Module -Name IntuneHydrationKit

v0.7.0

• CIS Baselines: Added a substantial amount of new bundled CIS baseline templates.
• Minor Improvements: Included other minor bug fixes and enhancements across the hydration workflow.

v0.6.1

IntuneHydrationKit v0.6.1

Installation

Install-Module -Name IntuneHydrationKit -Scope CurrentUser

Release Notes

Install directly from the PowerShell Gallery:

Install-Module -Name IntuneHydrationKit -Scope CurrentUser

To update to the latest version:

Update-Module -Name IntuneHydrationKit

v0.6.1

• Bundled Baselines by Default: OpenIntuneBaseline policies now always import from the bundled Templates/OpenIntuneBaseline/ directory instead of downloading from GitHub. Removed BaselineRepoUrl, BaselineBranch, and BaselineDownloadPath parameters. Get-OpenIntuneBaseline remains available as a standalone utility for manual downloads.

v0.6.0

IntuneHydrationKit v0.6.0

Install directly from the PowerShell Gallery:

Install-Module -Name IntuneHydrationKit -Scope CurrentUser

To update to the latest version:

Update-Module -Name IntuneHydrationKit

v0.6.0

• Retry-After Support: Graph API batch operations and paginated queries now honor Retry-After headers on 429/503 responses with exponential backoff fallback
• Error Handling: Public functions use proper $PSCmdlet.ThrowTerminatingError() and $PSCmdlet.WriteError() with structured ErrorRecord objects
• Graph API Performance: Added $select query parameter to 8+ GET requests to reduce payload size
• OutputType Annotations: Added [OutputType()] attributes to 8 private helper functions
• Centralized Hydration Marker: Marker strings consolidated into module-scoped variables for consistency
• Test Coverage: Expanded from 458 to 648 tests with 13 new test files covering private helpers and public import functions
• Documentation: Completed comment-based help for Write-HydrationLog, Initialize-HydrationLogging, and Import-HydrationSettings

v0.5.1

IntuneHydrationKit v0.5.1

Installation

Install-Module -Name IntuneHydrationKit -Scope CurrentUser

Release Notes

v0.5.1

• [IHD] Prefix: All imported resources now prefixed with [IHD] for instant identification in Intune portal
• Delete Bug Fixes: Fixed Graph API dictionary deserialization, null response handling, scriptblock scope bugs, and HashSet enumeration issues
• Tag-Aware Skips: Import functions only skip objects with the hydration kit marker, not untagged duplicates
• Template-Scoped Deletes: Delete operations now require both kit tag AND matching template name for safety
• Performance: 61% faster execution (~180s to ~70s) using batch Graph API operations
• Bundled Templates: OpenIntuneBaseline templates now included (no external downloads required)
• Batch Operations: Groups, policies, filters, and apps now use batched API calls (up to 10 per batch)

v0.3.4

IntuneHydrationKit v0.3.4

Installation

Install-Module -Name IntuneHydrationKit -Scope CurrentUser

Release Notes

v0.3.4

• Added:
  • Windows Autopilot device preparation support:
    • New enrollment profile template: Windows Autopilot device preparation - User Driven
    • New static group: Windows Autopilot device preparation (with Intune Provisioning Client as owner)
    • Automatic group assignment for device preparation policy
  • Platform filtering for template imports - filter baselines, compliance policies, and other imports by platform (Windows, macOS, iOS, Android, Linux)
  • settings.schema.json for JSON schema validation of settings files

v0.3.3

IntuneHydrationKit v0.3.3

Installation

Install-Module -Name IntuneHydrationKit -Scope CurrentUser

Release Notes

v0.3.3

• Added:

  • Issue #15: License-based dynamic user groups (E3, E5, F3, Business Premium, Copilot, Power BI Pro, Visio, Project)
  • Dynamic groups count increased from 43 to 51

• Changed:

  • OpenIntuneBaseline now pulls from maintained fork to prevent unplanned breaking changes
  • Issue #15: Simplified dynamic group membership rules (removed complex exclusion logic for better processing)

v0.3.1

IntuneHydrationKit v0.3.1

Installation

Install-Module -Name IntuneHydrationKit -Scope CurrentUser

Release Notes

v0.3.1

• Fixed:
  • Issue #14: M365 Business Premium license not detected for Windows Driver Updates
    • Added WINDOWSUPDATEFORBUSINESS_DEPLOYMENTSERVICE service plan to license detection
    • This service plan is included in M365 Business Premium and enables driver update functionality

v0.3.0

IntuneHydrationKit v0.3.0

Installation

Install-Module -Name IntuneHydrationKit -Scope CurrentUser

Release Notes

v0.3.0

• Fixed:

  • Issue #12: Logs and reports now created when using -WhatIf parameter
    • Log files are always written regardless of WhatIf mode
    • Summary reports (both Markdown and JSON) are always generated
    • Report mode correctly displays "Dry-Run" when WhatIf is enabled
  • Issue #13: TenantId parameter consistency across functions
    • Both Connect-IntuneHydration and Invoke-IntuneHydration now require GUID format
    • Documentation and examples updated to reflect GUID-only requirement
  • Tenant ID obfuscation in console output for security (e.g., 0e3028c5****-****-****-eea5ff7417b5)

• Changed:

  • Logging and reporting operations now explicitly bypass -WhatIf using -WhatIf:$false
  • TenantId parameter validation standardized to GUID format across all public functions

v0.2.9

IntuneHydrationKit v0.2.9

Installation

Install-Module -Name IntuneHydrationKit -Scope CurrentUser

Release Notes

v0.2.9

• Added:

  • 7 new Conditional Access policy templates (total now 21 policies)
    • Block access to Office365 apps for users with insider risk
    • Block all agent identities from accessing resources
    • Block all agent users from accessing resources
    • Block high risk agent identities from accessing resources
    • Require multifactor authentication for risky sign-ins
    • Require password change for high-risk users
    • Secure account recovery with identity verification (Preview)
  • Premium P2 license validation for Conditional Access policies requiring Entra ID P2
  • Preview feature detection for Conditional Access policies requiring preview features
  • Get-PremiumP2ServicePlans helper function for centralized P2 SKU list management

• Changed:

  • README.md updated with correct Conditional Access count (21 policies) and link to Microsoft Learn documentation
  • Enhanced Test-IntunePrerequisites with comprehensive E5/A5/EMS suite detection
  • Fixed empty rows in hydration summary reports
  • Fixed missing Type column values in Conditional Access import results

v0.2.8

IntuneHydrationKit v0.2.8

Installation

Install-Module -Name IntuneHydrationKit -Scope CurrentUser

Release Notes

v0.2.8

• Added:

  • Automatic replacement of %OrganizationId% placeholder with tenant ID during OpenIntuneBaseline import
  • Verbose logging when placeholder replacement occurs in policy templates

• Changed:

  • Import-IntuneBaseline now processes JSON templates and replaces %OrganizationId% with actual tenant ID before importing to Graph API
  • Affects OneDrive configuration policies that require tenant-specific settings (Known Folder Move, etc.)