IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator: Policy gets created but Test-DSCConfiguration fails with error

[ricmestre]

Description of the issue

Used an example from M365DSC to deploy a IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator policy, this worked and the policy got created, nevertheless running Test-DSCConfiguration doesn't even finish reporting an error, that's because it tries to find the policy by a random bogus Id and reports that it found it (which isn't true since it got a completely different Id) and then Graph complains the policy with that bogus Id cannot be found. Trying to deploy any changes to the policy also results in exactly the same error message.

[[IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator]IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator-IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator_1] Testing configuration of
{4feff881-d635-4e9d-bd07-d1227d1ab230}
VERBOSE: [REDACTED]:
[[IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator]IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator-IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator_1] Found something with id
{4feff881-d635-4e9d-bd07-d1227d1ab230}
[ResourceNotFound] : {
  "_version": 3,
  "Message": "DeviceConfigurations not found: Profile 4feff881-d635-4e9d-bd07-d1227d1ab230 - Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 - Activity ID:
7329d290-be15-4eef-a2a2-8d1cc8102f85 - Url: https://fef.msub07.manage.microsoft.com/DeviceConfiguration_2311/StatelessDeviceConfigurationFEService/deviceManagement/deviceConfigurations('4feff881-d635-4e9d-bd07-
d1227d1ab230')/assignments?api-version=5023-10-14",
  "CustomApiErrorPhrase": "",
  "RetryAfter": null,
  "ErrorSourceService": "",
  "HttpHeaders": "{}"
}
    + CategoryInfo          : InvalidOperation: ({ DeviceConfigu...ndProperty =  }:) [], CimException
    + FullyQualifiedErrorId : ResourceNotFound,Microsoft.Graph.Beta.PowerShell.Cmdlets.GetMgBetaDeviceManagementDeviceConfigurationAssignment_List
    + PSComputerName        : localhost

Microsoft 365 DSC Version

1.23.1122.1

Which workloads are affected

other

The DSC configuration

# Generated with Microsoft365DSC version 1.23.1122.1
# For additional information on how to use Microsoft365DSC, please visit https://aka.ms/M365DSC
param (
    [parameter()]
    [System.Management.Automation.PSCredential]
    $Credential
)

Configuration IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator
{
    param (
        [parameter()]
        [System.Management.Automation.PSCredential]
        $Credential
    )

    if ($null -eq $Credential)
    {
        <# Credentials #>
        $Credscredential = Get-Credential -Message "Credentials"

    }
    else
    {
        $CredsCredential = $Credential
    }

    $OrganizationName = $CredsCredential.UserName.Split('@')[1]

    Import-DscResource -ModuleName 'Microsoft365DSC' -ModuleVersion '1.23.1122.1'

    Node localhost
    {
        IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator "IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator-IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator_1"
        {
            AppsBlockClipboardSharing                = $True;
            AppsBlockCopyPaste                       = $True;
            AppsBlockYouTube                         = $False;
            Assignments                   = @(
                MSFT_DeviceManagementConfigurationPolicyAssignments{
                    dataType = '#microsoft.graph.groupAssignmentTarget'
                    deviceAndAppManagementAssignmentFilterType = 'none'
                    groupId = 'b0b8fd3f-af2a-453b-be57-80182d599f02'
                }
                MSFT_DeviceManagementConfigurationPolicyAssignments{
                    dataType = '#microsoft.graph.exclusionGroupAssignmentTarget'
                    deviceAndAppManagementAssignmentFilterType = 'none'
                    groupId = '053dc89a-be83-411a-bad3-909904b7239e'
                }
            );
            BluetoothBlocked                         = $True;
            CameraBlocked                            = $True;
            CellularBlockDataRoaming                 = $False;
            CellularBlockMessaging                   = $False;
            CellularBlockVoiceRoaming                = $False;
            CellularBlockWiFiTethering               = $False;
            Credential                               = $CredsCredential;
            CompliantAppListType                     = "appsInListCompliant";
            CompliantAppsList                        = @(
                MSFT_MicrosoftGraphAppListitem{
                    appId = 'com.custom.google.com'
                    appStoreUrl = 'https://appUrl.com'
                    name = 'customApp'
                    publisher = 'google2'
                }
            );
            DateAndTimeBlockChanges                  = $True;
            DeviceSharingAllowed                     = $False;
            DisplayName                              = "IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator_1";
            DiagnosticDataBlockSubmission            = $False;
            Ensure                                   = "Present";
            FactoryResetBlocked                      = $False;
            GoogleAccountBlockAutoSync               = $False;
            GooglePlayStoreBlocked                   = $False;
            Id                                       = "4feff881-d635-4e9d-bd07-d1227d1ab230";
            KioskModeBlockSleepButton                = $False;
            KioskModeBlockVolumeButtons              = $True;
            LocationServicesBlocked                  = $False;
            NfcBlocked                               = $False;
            PasswordBlockFingerprintUnlock           = $False;
            PasswordBlockTrustAgents                 = $False;
            PasswordRequired                         = $True;
            PasswordRequiredType                     = "numeric";
            PowerOffBlocked                          = $False;
            RequiredPasswordComplexity               = "low";
            ScreenCaptureBlocked                     = $False;
            SecurityRequireVerifyApps                = $False;
            StorageBlockGoogleBackup                 = $False;
            StorageBlockRemovableStorage             = $False;
            StorageRequireDeviceEncryption           = $False;
            StorageRequireRemovableStorageEncryption = $True;
            VoiceAssistantBlocked                    = $False;
            VoiceDialingBlocked                      = $False;
            WebBrowserBlockAutofill                  = $False;
            WebBrowserBlocked                        = $False;
            WebBrowserBlockJavaScript                = $False;
            WebBrowserBlockPopups                    = $False;
            WebBrowserCookieSettings                 = "allowAlways";
            WiFiBlocked                              = $False;
        }
    }
}

IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator -ConfigurationData .\ConfigurationData.psd1 -Credential $Credential

Verbose logs showing the problem

[[IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator]IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator-IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator_1] Testing configuration of
{4feff881-d635-4e9d-bd07-d1227d1ab230}
VERBOSE: [REDACTED]:
[[IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator]IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator-IntuneDeviceConfigurationPolicyAndroidDeviceAdministrator_1] Found something with id
{4feff881-d635-4e9d-bd07-d1227d1ab230}
[ResourceNotFound] : {
  "_version": 3,
  "Message": "DeviceConfigurations not found: Profile 4feff881-d635-4e9d-bd07-d1227d1ab230 - Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 - Activity ID:
7329d290-be15-4eef-a2a2-8d1cc8102f85 - Url: https://fef.msub07.manage.microsoft.com/DeviceConfiguration_2311/StatelessDeviceConfigurationFEService/deviceManagement/deviceConfigurations('4feff881-d635-4e9d-bd07-
d1227d1ab230')/assignments?api-version=5023-10-14",
  "CustomApiErrorPhrase": "",
  "RetryAfter": null,
  "ErrorSourceService": "",
  "HttpHeaders": "{}"
}
    + CategoryInfo          : InvalidOperation: ({ DeviceConfigu...ndProperty =  }:) [], CimException
    + FullyQualifiedErrorId : ResourceNotFound,Microsoft.Graph.Beta.PowerShell.Cmdlets.GetMgBetaDeviceManagementDeviceConfigurationAssignment_List
    + PSComputerName        : localhost

Environment Information + PowerShell Version

OsName               : Microsoft Windows 11 Enterprise
OsOperatingSystemSKU : EnterpriseEdition
OsArchitecture       : 64-bit
WindowsVersion       : 2009
WindowsBuildLabEx    : 22621.1.amd64fre.ni_release.220506-1250
OsLanguage           : en-US
OsMuiLanguages       : {en-US, pt-PT}

Name                           Value
----                           -----
PSVersion                      5.1.22621.2428
PSEdition                      Desktop
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}
BuildVersion                   10.0.22621.2428
CLRVersion                     4.0.30319.42000
WSManStackVersion              3.0
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1