Comments on: Using PowerShell to Manage Conditional Access (CA) Policies

By: Yanyan Lasala

Yanyan Lasala — Sat, 08 Oct 2022 12:02:55 +0000

Great article. Question, how can I add a member to condition policy? For example I want to add someone to included or excluded.

By: Olu Omolola

Olu Omolola — Fri, 04 Feb 2022 10:15:37 +0000

Many thanks for your help in putting things together. Please how can I use this to extract Ipranges and output to a txt or csv file? Get-AzureADMSNamedLocationPolicy | Where {$_.DisplayName -ne 'Chicago office'} | ft DisplayName,Id Get-AzureADMSNamedLocationPolicy | Where {$_.DisplayName -ne 'London office'} | ft DisplayName,Id,IpRanges but not getting the desired list of the IPs complete. Please can you help? Many thanks

By: daye

daye — Thu, 23 Dec 2021 01:45:49 +0000

How to convert the conditional access user/exclude user’s objectID to displayname or userprincipalname?

If I use $policyobjecitID.condition.user.excludeuser, I got all the exclude users objetID, how to convert them to azureAD displayname or Principalusername?

Thank you.

By: daye

daye — Wed, 22 Dec 2021 23:56:03 +0000

Thanks for the great article. Question,

If I want to list users/exclude users, I can run this:
$condtionalaccesspolicyID.condition.users
$condtionalaccesspolicyID.condition.users.excludeUsers,

I just got the ObjectID, not the displayname or UserPrincipalname, How I can convert it into displayname or userprincipal name ? Thanks.

By: Sourav

Sourav — Fri, 29 Oct 2021 20:12:30 +0000

Hi,

Great article!

Quick question –
In the summary of the policy settings you have mentioned – “Two Names Locations included, where MFA will not be enforced”.

Shouldn’t it be “….. where MFA will be enforced” instead of “will NOT be”, since you are including those 2 locations in your policy?

Thanks,
Sourav

By: Tony Redmond

Tony Redmond — Mon, 06 Sep 2021 09:48:10 +0000

In reply to Dean Gross. Thanks. It happens (a lot).

By: Dean Gross

Dean Gross — Thu, 02 Sep 2021 19:14:08 +0000

This guy copied your article https://simpleitpro.com/index.php/2021/03/30/using-powershell-to-manage-conditional-access-ca-policies/

By: Silviu

Silviu — Thu, 24 Jun 2021 06:55:27 +0000

Great stuff written here. Keep it up!

By: Tony Redmond

Tony Redmond — Mon, 14 Jun 2021 19:15:08 +0000

In reply to Matthew Prentice. Thanks. We've updated the text.

By: Matthew Prentice

Matthew Prentice — Mon, 14 Jun 2021 17:16:01 +0000

Looks like a typo early in the article.

**Note that both the AzureAG and AzureADPreview PowerShell modules contain these cmdlets.

I assume that should be “AzureAD” not “AzureAG”.