Update Test-MtCaMfaForAdminManagement.ps1

Add check for includeApplications - All
maester365 · Nov 14, 2024 · daec649 · daec649
1 parent cb15c2c
commit daec649
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/powershell/public/Test-MtCaMfaForAdminManagement.ps1 b/powershell/public/Test-MtCaMfaForAdminManagement.ps1
@@ -32,7 +32,8 @@ function Test-MtCaMfaForAdminManagement {
         if ( ( $policy.grantcontrols.builtincontrols -contains 'mfa' `
                     -or $policy.grantcontrols.authenticationStrength.requirementsSatisfied -contains 'mfa' ) `
                 -and $policy.conditions.users.includeUsers -eq "All" `
-                -and "797f4846-ba00-4fd7-ba43-dac1f8f63013" -in $policy.conditions.applications.includeApplications `
+                -and ("797f4846-ba00-4fd7-ba43-dac1f8f63013" -in $policy.conditions.applications.includeApplications `
+                    -or $policy.conditions.applications.includeApplications -contains "All") `
         ) {
             $result = $true
             $currentresult = $true
@@ -43,4 +44,4 @@ function Test-MtCaMfaForAdminManagement {
     }
 
     return $result
-}
+}