From 2aa9862fc61a289232e4a64586826685d30e683f Mon Sep 17 00:00:00 2001 From: merill <1288081+merill@users.noreply.github.com> Date: Wed, 22 Jul 2026 13:09:36 +0000 Subject: [PATCH] [create-pull-request] automated change --- website/docs/commands/Test-MtConnection.mdx | 15 ++-- .../Test-MtEntraMsolPowerShellBlocked.mdx | 74 +++++++++++++++++++ website/docs/commands/docusaurus.sidebar.js | 1 + .../Test-MtEntraMsolPowerShellBlocked.mdx | 74 +++++++++++++++++++ 4 files changed, 158 insertions(+), 6 deletions(-) create mode 100644 website/docs/commands/Test-MtEntraMsolPowerShellBlocked.mdx create mode 100644 website/versioned_docs/version-2.1.0/commands/Test-MtEntraMsolPowerShellBlocked.mdx diff --git a/website/docs/commands/Test-MtConnection.mdx b/website/docs/commands/Test-MtConnection.mdx index 6e5eba8d8..4d5c26632 100644 --- a/website/docs/commands/Test-MtConnection.mdx +++ b/website/docs/commands/Test-MtConnection.mdx @@ -37,11 +37,11 @@ Returns a Boolean value. ### EXAMPLE 2 ```powershell -Test-MtConnection -Service All -Details +Test-MtConnection -Details ``` -Checks if the current session is connected to all Microsoft 365 services including Azure, Microsoft Graph, Exchange Online, Exchange Online Protection (SecurityCompliance), SharePoint Online (PnP), and Microsoft Teams. -Returns a custom object that contains the connection details for all services. +Returns a connection summary for all supported services. +Default services are listed first, followed by the opt-in Active Directory and GitHub services. ### EXAMPLE 3 @@ -74,12 +74,13 @@ Returns $false if Connect-MtGitHub has not been called in this session. The service to check the connection for. Valid values are 'ActiveDirectory', 'All', 'Azure', 'AzureDevOps', 'ExchangeOnline', 'GitHub', 'Graph', 'SecurityCompliance' (or 'EOP'), 'SharePointOnline', and 'Teams'. -Default is 'Graph'. +The default Boolean check is for Microsoft Graph. +When -Details is used without -Service, all services are checked and summarized. Active Directory and GitHub require an explicit connection before testing; unlike other services they have no auto-detection. Active Directory is not included in -Service All. GitHub is not included in -Service All. -Each service must be checked explicitly. +Their current session state is included in the default -Details summary. ```yaml Type: String[] @@ -95,7 +96,9 @@ Accept wildcard characters: False ### -Details -Return the full details of all connections instead of just a boolean value. +Return connection details instead of just a Boolean value. +When -Service is omitted, the summary includes all default and opt-in services. +Microsoft Graph details include the scopes in the current context and any required Maester scopes that are missing. ```yaml Type: SwitchParameter diff --git a/website/docs/commands/Test-MtEntraMsolPowerShellBlocked.mdx b/website/docs/commands/Test-MtEntraMsolPowerShellBlocked.mdx new file mode 100644 index 000000000..43dd36323 --- /dev/null +++ b/website/docs/commands/Test-MtEntraMsolPowerShellBlocked.mdx @@ -0,0 +1,74 @@ +--- +sidebar_class_name: hidden +description: "Checks if the legacy MSOnline (MSOL) PowerShell module is blocked from authenticating to the tenant" +id: Test-MtEntraMsolPowerShellBlocked +title: Test-MtEntraMsolPowerShellBlocked +hide_title: false +hide_table_of_contents: false +custom_edit_url: https://github.com/maester365/maester/blob/main/powershell/public/Test-MtEntraMsolPowerShellBlocked.ps1 +--- + +## SYNOPSIS + +Checks if the legacy MSOnline (MSOL) PowerShell module is blocked from authenticating to the tenant + +## SYNTAX + +```powershell +Test-MtEntraMsolPowerShellBlocked [-ProgressAction ] [] +``` + +## DESCRIPTION + +The MSOnline (MSOL) and Azure AD PowerShell modules were retired by Microsoft and no longer receive +security updates. +The blockMsolPowerShell setting on the tenant's authorization policy lets an admin +explicitly block authentication requests from the legacy MSOnline PowerShell module's service +principal, closing an unsupported and unmonitored administrative access path. + +This setting isn't enabled by default for every tenant, so it needs to be checked explicitly rather +than assumed to already be in place. + +## EXAMPLES + +### EXAMPLE 1 + +```powershell +Test-MtEntraMsolPowerShellBlocked +``` + +Returns true if the legacy MSOnline (MSOL) PowerShell module is blocked from authenticating to the tenant + +## PARAMETERS + +### -ProgressAction + +Determines how PowerShell responds to progress updates generated by a script, cmdlet, or provider, such as the progress bars generated by Write-Progress. + +```yaml +Type: ActionPreference +Parameter Sets: (All) +Aliases: proga + +Required: False +Position: Named +Default value: None +Accept pipeline input: False +Accept wildcard characters: False +``` + +### CommonParameters + +This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216). + +## INPUTS + +## OUTPUTS + +### System.Boolean + +## NOTES + +## RELATED LINKS + +[https://maester.dev/docs/commands/Test-MtEntraMsolPowerShellBlocked](https://maester.dev/docs/commands/Test-MtEntraMsolPowerShellBlocked) diff --git a/website/docs/commands/docusaurus.sidebar.js b/website/docs/commands/docusaurus.sidebar.js index e69dfdeec..2c36b46ec 100644 --- a/website/docs/commands/docusaurus.sidebar.js +++ b/website/docs/commands/docusaurus.sidebar.js @@ -625,6 +625,7 @@ module.exports = [ 'commands/Test-MtEntraIDConnectSsso', 'commands/Test-MtEntraIDConnectSyncOnPremisesObjectIdentifierUpdatesBlocked', 'commands/Test-MtEntraIDConnectSyncSoftHardMatching', + 'commands/Test-MtEntraMsolPowerShellBlocked', 'commands/Test-MtExoDelicensingResiliency', 'commands/Test-MtExoMailTip', 'commands/Test-MtExoModernAuth', diff --git a/website/versioned_docs/version-2.1.0/commands/Test-MtEntraMsolPowerShellBlocked.mdx b/website/versioned_docs/version-2.1.0/commands/Test-MtEntraMsolPowerShellBlocked.mdx new file mode 100644 index 000000000..43dd36323 --- /dev/null +++ b/website/versioned_docs/version-2.1.0/commands/Test-MtEntraMsolPowerShellBlocked.mdx @@ -0,0 +1,74 @@ +--- +sidebar_class_name: hidden +description: "Checks if the legacy MSOnline (MSOL) PowerShell module is blocked from authenticating to the tenant" +id: Test-MtEntraMsolPowerShellBlocked +title: Test-MtEntraMsolPowerShellBlocked +hide_title: false +hide_table_of_contents: false +custom_edit_url: https://github.com/maester365/maester/blob/main/powershell/public/Test-MtEntraMsolPowerShellBlocked.ps1 +--- + +## SYNOPSIS + +Checks if the legacy MSOnline (MSOL) PowerShell module is blocked from authenticating to the tenant + +## SYNTAX + +```powershell +Test-MtEntraMsolPowerShellBlocked [-ProgressAction ] [] +``` + +## DESCRIPTION + +The MSOnline (MSOL) and Azure AD PowerShell modules were retired by Microsoft and no longer receive +security updates. +The blockMsolPowerShell setting on the tenant's authorization policy lets an admin +explicitly block authentication requests from the legacy MSOnline PowerShell module's service +principal, closing an unsupported and unmonitored administrative access path. + +This setting isn't enabled by default for every tenant, so it needs to be checked explicitly rather +than assumed to already be in place. + +## EXAMPLES + +### EXAMPLE 1 + +```powershell +Test-MtEntraMsolPowerShellBlocked +``` + +Returns true if the legacy MSOnline (MSOL) PowerShell module is blocked from authenticating to the tenant + +## PARAMETERS + +### -ProgressAction + +Determines how PowerShell responds to progress updates generated by a script, cmdlet, or provider, such as the progress bars generated by Write-Progress. + +```yaml +Type: ActionPreference +Parameter Sets: (All) +Aliases: proga + +Required: False +Position: Named +Default value: None +Accept pipeline input: False +Accept wildcard characters: False +``` + +### CommonParameters + +This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216). + +## INPUTS + +## OUTPUTS + +### System.Boolean + +## NOTES + +## RELATED LINKS + +[https://maester.dev/docs/commands/Test-MtEntraMsolPowerShellBlocked](https://maester.dev/docs/commands/Test-MtEntraMsolPowerShellBlocked)