Sign up for a free recipe e-book →

Binlabs

Steps to restore Intune Backup (Part 3)

Published by

Bindusar Kushwaha

on

In previous blog, we discussed about how to take backup of Intune Configurations.
Steps to take Intune Backup (Part 2) – (binlabs.in)

Here, we will try to restore the backup we took in previous blog.

As per settings, I have following items in backup.

[1/1] Extracting [IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10] using {CertificateThumbprint}...

    |---[1/3] B-OfficeChannelUpdate✅

    |---[2/3] BWinCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37✅

    |---[3/3] BWinCloudConfig Microsoft Edge app settings 20230315_14:18:37✅

Let’s go ahead and delete “B-OfficeChannelUpdate” from my Intune Tenant and see if backup can help here.

In previous blog, we created an App registration with read only access to Graph API. To restore, OfCourse we will also have to increase the permissions to write.

Make sure you have WinRM Service running on your machine where script is being executed.

Running following set of commands can help you in restoring the backup.
1. Change the prompt location to backup directory
2. Use DOT Sourcing to call Config file
3. Start DSC config from its path.

cd C:\Temp\Intune

. .\M365TenantConfig.ps1 #this is DOT Sourcing. Please dont remove space between 2 dots.

Start-DscConfiguration -Path "C:\Temp\Intune\M365TenantConfig" -ComputerName localhost -Wait -Verbose -Force

Following output is expected.

VERBOSE: Perform operation 'Invoke CimMethod' with following parameters, ''methodName' = SendConfigurationApply,'className' = MSFT_DSCLocalConfigurationManager,'namespaceName' = roo

t/Microsoft/Windows/DesiredStateConfiguration'.

VERBOSE: An LCM method call arrived from computer HS-MACHINE3 with user sid S-1-5-21-4192503466-662539258-3463556322-500.

VERBOSE: [HS-MACHINE3]: LCM:  [ Start  Set      ]

VERBOSE: [HS-MACHINE3]: LCM:  [ Start  Resource ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-B-

OfficeChannelUpdate]

VERBOSE: [HS-MACHINE3]: LCM:  [ Start  Test     ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-B-

OfficeChannelUpdate]

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-B-

OfficeChannelUpdate] Testing configuration of the Intune Device Configuration Administrative Template Policy for Windows10 with Id {3bbaf506-1c64-442b-a0f5-6597a260c6a9} and Display

Name {B-OfficeChannelUpdate}

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-B-

OfficeChannelUpdate] An Intune Device Configuration Administrative Template Policy for Windows10 with Id {3bbaf506-1c64-442b-a0f5-6597a260c6a9} and DisplayName {B-OfficeChannelUpdat

e} was found.

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-B-

OfficeChannelUpdate] Current Values: ApplicationId=***

ApplicationSecret=$null

Assignments=({dataType=#microsoft.graph.groupAssignmentTarget

deviceAndAppManagementAssignmentFilterId=$null

deviceAndAppManagementAssignmentFilterType=none

groupId=3209aa58-e007-48c6-8cff-d0f312486e26},{dataType=#microsoft.graph.groupAssignmentTarget

deviceAndAppManagementAssignmentFilterId=$null

deviceAndAppManagementAssignmentFilterType=none

groupId=5784c963-3456-4737-b2e2-95e46158b567},{dataType=#microsoft.graph.groupAssignmentTarget

deviceAndAppManagementAssignmentFilterId=$null

deviceAndAppManagementAssignmentFilterType=none

groupId=b903236b-52b4-44fb-b07e-519ab7c4bbe2})

CertificateThumbprint=***

Credential=$null

DefinitionValues=({ConfigurationType=policy

Enabled=True

PresentationValues=({odataType=#microsoft.graph.groupPolicyPresentationValueText

presentationDefinitionId=00218f65-3f30-48f9-9262-6ababbb4fda7

StringValue=Current})})

Description=

DisplayName=B-OfficeChannelUpdate

Ensure=Present

Id=3bbaf506-1c64-442b-a0f5-6597a260c6a9

Managedidentity=False

TenantId=***

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-B-

OfficeChannelUpdate] Target Values: Description=

DisplayName=B-OfficeChannelUpdate

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-B-

OfficeChannelUpdate] Test-TargetResource returned True

VERBOSE: [HS-MACHINE3]: LCM:  [ End    Test     ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-B-

OfficeChannelUpdate]  in 46.9540 seconds.

VERBOSE: [HS-MACHINE3]: LCM:  [ Skip   Set      ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-B-

OfficeChannelUpdate]

VERBOSE: [HS-MACHINE3]: LCM:  [ End    Resource ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-B-

OfficeChannelUpdate]

VERBOSE: [HS-MACHINE3]: LCM:  [ Start  Resource ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37]

VERBOSE: [HS-MACHINE3]: LCM:  [ Start  Test     ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37]

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37] Testing configuration of the Intune Device Configuration Administrative Template Policy for Windows10 with Id {c

613cebd-a34b-4648-80f0-dd3394b6d2de} and DisplayName {BWinCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37}

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37] An Intune Device Configuration Administrative Template Policy for Windows10 with Id {c613cebd-a34b-4648-80f0-dd3

394b6d2de} and DisplayName {BWinCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37} was found.

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37] Current Values: ApplicationId=***

ApplicationSecret=$null

Assignments=({dataType=#microsoft.graph.groupAssignmentTarget

deviceAndAppManagementAssignmentFilterId=$null

deviceAndAppManagementAssignmentFilterType=none

groupId=e8fee7b3-a2b2-4607-8a7d-5d68e683900d})

CertificateThumbprint=***

Credential=$null

DefinitionValues=({ConfigurationType=policy

Enabled=True

PresentationValues=()},{ConfigurationType=policy

Enabled=True

PresentationValues=({odataType=#microsoft.graph.groupPolicyPresentationValueText

presentationDefinitionId=fbefbbdf-5382-477c-8b6c-71f4a06e2805

StringValue=e032facc-0bf3-4d39-a577-20102e714cef},{odataType=#microsoft.graph.groupPolicyPresentationValueText

presentationDefinitionId=35c82072-a93b-4022-be14-8684c2f6fcc2

StringValue=1})},{ConfigurationType=policy

Enabled=True

PresentationValues=()},{ConfigurationType=policy

Enabled=True

PresentationValues=()},{ConfigurationType=policy

Enabled=True

PresentationValues=()})

Description=Administrative template to configure OneDrive folders and Microsoft Edge settings created by Windows in cloud configuration

DisplayName=BWinCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37

Ensure=Present

Id=c613cebd-a34b-4648-80f0-dd3394b6d2de

Managedidentity=False

TenantId=***

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37] Target Values: Description=Administrative template to configure OneDrive folders and Microsoft Edge settings cre

ated by Windows in cloud configuration

DisplayName=BWinCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37] Test-TargetResource returned True

VERBOSE: [HS-MACHINE3]: LCM:  [ End    Test     ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37]  in 2.3280 seconds.

VERBOSE: [HS-MACHINE3]: LCM:  [ Skip   Set      ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37]

VERBOSE: [HS-MACHINE3]: LCM:  [ End    Resource ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig OneDrive Known Folder Move settings 20230315_14:18:37]

VERBOSE: [HS-MACHINE3]: LCM:  [ Start  Resource ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig Microsoft Edge app settings 20230315_14:18:37]

VERBOSE: [HS-MACHINE3]: LCM:  [ Start  Test     ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig Microsoft Edge app settings 20230315_14:18:37]

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig Microsoft Edge app settings 20230315_14:18:37] Testing configuration of the Intune Device Configuration Administrative Template Policy for Windows10 with Id {940b8ed5-

ed73-4731-9943-655414ac0ce4} and DisplayName {BWinCloudConfig Microsoft Edge app settings 20230315_14:18:37}

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig Microsoft Edge app settings 20230315_14:18:37] An Intune Device Configuration Administrative Template Policy for Windows10 with Id {940b8ed5-ed73-4731-9943-655414ac0ce

4} and DisplayName {BWinCloudConfig Microsoft Edge app settings 20230315_14:18:37} was found.

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig Microsoft Edge app settings 20230315_14:18:37] Current Values: ApplicationId=***

ApplicationSecret=$null

Assignments=({dataType=#microsoft.graph.groupAssignmentTarget

deviceAndAppManagementAssignmentFilterId=$null

deviceAndAppManagementAssignmentFilterType=none

groupId=e8fee7b3-a2b2-4607-8a7d-5d68e683900d})

CertificateThumbprint=***

Credential=$null

DefinitionValues=({ConfigurationType=policy

Enabled=True

PresentationValues=({odataType=#microsoft.graph.groupPolicyPresentationValueText

presentationDefinitionId=00e4651b-8ac6-4bb8-bc23-e0fdf7ccd1c7

StringValue=1})},{ConfigurationType=policy

Enabled=True

PresentationValues=()},{ConfigurationType=policy

Enabled=True

PresentationValues=()},{ConfigurationType=policy

Enabled=True

PresentationValues=()})

Description=Administrative template to configure OneDrive folders and Microsoft Edge settings created by Windows in cloud configuration

DisplayName=BWinCloudConfig Microsoft Edge app settings 20230315_14:18:37

Ensure=Present

Id=940b8ed5-ed73-4731-9943-655414ac0ce4

Managedidentity=False

TenantId=***

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig Microsoft Edge app settings 20230315_14:18:37] Target Values: Description=Administrative template to configure OneDrive folders and Microsoft Edge settings created by 

Windows in cloud configuration

DisplayName=BWinCloudConfig Microsoft Edge app settings 20230315_14:18:37

VERBOSE: [HS-MACHINE3]:                            [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig Microsoft Edge app settings 20230315_14:18:37] Test-TargetResource returned True

VERBOSE: [HS-MACHINE3]: LCM:  [ End    Test     ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig Microsoft Edge app settings 20230315_14:18:37]  in 1.9840 seconds.

VERBOSE: [HS-MACHINE3]: LCM:  [ Skip   Set      ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig Microsoft Edge app settings 20230315_14:18:37]

VERBOSE: [HS-MACHINE3]: LCM:  [ End    Resource ]  [[IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10]IntuneDeviceConfigurationAdministrativeTemplatePolicyWindows10-BW

inCloudConfig Microsoft Edge app settings 20230315_14:18:37]

VERBOSE: [HS-MACHINE3]: LCM:  [ End    Set      ]

VERBOSE: [HS-MACHINE3]: LCM:  [ End    Set      ]    in  52.9080 seconds.

VERBOSE: Operation 'Invoke CimMethod' complete.

VERBOSE: Time taken for configuration job to complete is 53.722 seconds

Checking back in Intune Portal, I can see following policy which we deleted initially, is back now.

Hope this helps.

Leave a comment

Hello,

I’m Bindusar

Welcome to BINLABS, my cozy corner of the internet dedicated to IT admins and their daily encounter. Here, I invite you to join me for daily challenges with solution faced by admins using scripts. Let’s script together!

Let’s connect

Join the fun!

Stay updated with our latest tutorials and ideas by joining our newsletter.

Recent posts