EIDSCA.PR01 - Default Settings - Password Rule Settings - Password Protection - Mode.

Contributed by Thomas Naunheim with 3 co-contributorsAll contributors →

Overview

If set to Enforce, users will be prevented from setting banned passwords and the attempt will be logged. If set to Audit, the attempt will only be logged.

Microsoft Entra Password Protection - Microsoft Entra ID - Microsoft Learn

Test script

https://graph.microsoft.com/beta/settings
.values -eq 'Enforce'

Related links

• Open in Graph Explorer
• directorySetting resource type - Microsoft Graph beta | Microsoft Learn
• View in Microsoft Entra admin center

MITRE ATT&CK

Tactic	Technique	Mitigation
TA0006 - Credential Access - Credential Access	T1110 - Brute Force	M1018 - User Account Management M1027 - Password Policies

Test Metadata

Field	Value
Test ID	EIDSCA.PR01
Severity	High
Suite	Entra ID SCA
Category	General
PowerShell test	Test-MtEidscaPR01
Tags	EIDSCA, EIDSCA.PR01

Source

• Pester test: tests/EIDSCA/Test-EIDSCA.Generated.Tests.ps1
• PowerShell source: powershell/internal/eidsca/Test-MtEidscaPR01.ps1