努力创建 PowerShell 脚本来部署条件访问策略以阻止旧式身份验证-解网

问：

这是我在这里的第一篇文章，我真的希望有人能和我一起解决这个问题。正如您可能在帖子标题中看到的那样，我正在尝试创建一个 PowerShell 脚本，该脚本将部署 conditionla 访问策略以阻止旧式身份验证，但我无法弄清楚。有人可以查看我的 caode 并告诉我为什么它不起作用吗？它错误在

$conditions.ClientAppTypes = New-Object -TypeName Microsoft.Open.MSGraph.Model.ConditionalAccessClientApp
$conditions.ClientAppTypes = @(“ExchangeActiveSync”, “Other”)

主要代码：

$conditions = New-Object -TypeName Microsoft.Open.MSGraph.Model.ConditionalAccessConditionSet

$conditions.Applications = New-Object -TypeName Microsoft.Open.MSGraph.Model.ConditionalAccessApplicationCondition
$conditions.Applications.IncludeApplications = "All"
$conditions.Applications.ExcludeApplications = @(
    ""
    ""#applications
)
$conditions.Users = New-Object -TypeName Microsoft.Open.MSGraph.Model.ConditionalAccessUserCondition
$conditions.Users.IncludeUsers = "All"
$conditions.Users.ExcludeUsers = @(
    "" #Admin user ID
    "GuestsOrExternalUsers"
    )
$conditions.Users.ExcludeGroups = "" #Admin group ID
$conditions.Users.ExcludeRoles = @(
 #   "" 
  #  ""
   # )

$conditions.Users = New-Object -TypeName Microsoft.Open.MSGraph.Model.ConditionalAccessClientApp
$conditions.ClientAppTypes = @(“ExchangeActiveSync”, “Other”)



$controls = New-Object -TypeName Microsoft.Open.MSGraph.Model.ConditionalAccessGrantControls
$controls._Operator = "OR"
$controls.BuiltInControls = "block"

New-AzureADMSConditionalAccessPolicy -DisplayName "Block Legacy Authentication" -State "Disabled" -Conditions $conditions -GrantControls $controls

PowerShell 安全性 azure-active-directory microsoft-graph-api microsoft-entra-id

Connect-MgGraph -Scopes "Policy.Read.All",  
"Policy.ReadWrite.ConditionalAccess", 
"Application.Read.All"

$conditions = @{ 
Applications = @{   
includeApplications = 'All' 
};
Users = @{ 
includeUsers = 'All' 
};
ClientAppTypes = @( 
'ExchangeActiveSync',
'Other'
);   
}  
  
$grantcontrols = @{ 
BuiltInControls = @('Block'); 
Operator = 'OR' 
}

$name = "Block Legacy Authentication All Apps"  
$state = "Disabled"  
  
New-MgIdentityConditionalAccessPolicy `  
-DisplayName $name  
-State $state   
-Conditions $conditions  
-GrantControls $grantcontrols

enter image description here

条件访问策略已成功创建：

enter image description here

若要启用该策略，请将该行修改为 $state = “Enabled”。

努力创建 PowerShell 脚本来部署条件访问策略以阻止旧式身份验证

Struggling to create a PowerShell script to deploy a conditional access policy to block legacy authentication

评论

评论