iiinova — where your digital self keeps evolving

Maester

@maester.dev

Maester is your Microsoft Security test automation framework! Maester is a PowerShell based test automation framework to help you stay in control of your Microsoft security configuration. Learn more → maester.dev

Posts Replies Media

Reposted by Maester

Merill Fernando 💚 @merill.net · 06/12/2024

I just merged an awesome PR for 🔥 @maester.dev just now 👇 @naunheim.cloud added this test to check for gaps in your Conditional Access policies caused by someone deleting groups used in policies. #entra #infosec 😘

MT.1038: Conditional Access policies should not include or exclude deleted groups.

This test checks if there are any Conditional Access policies that target deleted security groups.

This usually happens when a group is deleted but is still referenced in a Conditional Access policy.

Deleted groups in your policy can lead to unexpected gaps. This may result in Conditional Access policies not being applied to the users you intended or the policy not being applied at all.

To fix this issue:

Open the impacted Conditional access policy.
If the group is no longer needed, click Save to remove the referenced group from the policy.
If the group is still needed, update the policy to target a valid group.

2509

Reposted by Maester

Merill Fernando 💚 @merill.net · 06/12/2024

I just merged an awesome PR for 🔥 @maester.dev just now 👇 @naunheim.cloud added this test to check for gaps in your Conditional Access policies caused by someone deleting groups used in policies. #entra #infosec 😘

2509