Public/TenantConfiguration/Baseline/ConfigurationPolicies/JyskIT-Baseline-SEC-DisableWHFBAutoprovision.json

{
    "displayName": "JyskIT-Baseline-SEC-DisableWHFBAutoprovision",
    "description": "Disables automatic WHFB provisioning after sign-in. Still allowing users to configure it manually.",
    "roleScopeTagIds": [
        "0"
    ],
    "@odata.type": "#microsoft.graph.windows10CustomConfiguration",
    "omaSettings": [
        {
            "omaUri": "./Device/Vendor/MSFT/PassportForWork/%&/Policies/DisablePostLogonProvisioning",
            "displayName": "DisablePostLogonProvisioning",
            "@odata.type": "#microsoft.graph.omaSettingBoolean",
            "value": "true"
        }
    ],
    "assignments": [
        {
            "target": {
                "@odata.type": "#microsoft.graph.allLicensedUsersAssignmentTarget"
            }
        },
        {
            "target": {
                "@odata.type": "#microsoft.graph.exclusionGroupAssignmentTarget",
                "groupId": "#ReplaceGroup#_JyskIT-Baseline-SEC-SharedUsers"
            }
        }
    ]
}