Skip to main content
Version: 2.1.1-preview

MT.1014 - At least one Conditional Access policy is configured to require compliant or Entra hybrid joined devices for admins.

Fabian BaderMerill FernandoRobin DadswellFrode FlatenPascal-Tobias MohrSam Erde+1
Contributed by Fabian Bader with 6 co-contributorsAll contributors →

Overview​

Device compliance conditional access policy can be used to require devices to be compliant or hybrid Azure AD joined for admins. This is a good way to prevent AITM attacks.

Learn more: https://aka.ms/CATemplatesAdminDevices

Test Metadata​

FieldValue
Test IDMT.1014
SeverityHigh
SuiteMaester
CategoryCA
PowerShell testTest-MtCaDeviceComplianceAdminsExists
TagsCA, Maester, MT.1014

Source​

  • Pester test: tests/Maester/Entra/Test-ConditionalAccessBaseline.Tests.ps1
  • PowerShell source: powershell/public/maester/entra/Test-MtCaDeviceComplianceAdminsExists.ps1