$intune_policy_description = "These settings are not defined in the CIS benchmark, but provide additional hardening/privacy configurations." $useDeviceCodeAuth ...