Added check for CA policy to be enabled

maester365 · Dec 5, 2023 · 51e809e · 51e809e
1 parent 07111f6
commit 51e809e
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/src/public/Test-MtCaHasDeviceCompliance.ps1 b/src/public/Test-MtCaHasDeviceCompliance.ps1
@@ -23,7 +23,7 @@ Function Test-MtCaHasDeviceCompliance {
 
   $policies = Get-MtConditionalAccessPolicies
 
-  $result = & { Set-StrictMode -Off; $policies.value.grantcontrols.builtincontrols -contains 'compliantDevice' }
+  $result = & { Set-StrictMode -Off; $policies.value.grantcontrols.builtincontrols -contains 'compliantDevice' -and $pol.value.state -eq 'enabled' }
   return $result
 
 }
diff --git a/tests/Identity/Test-ConditionalAccessBaseline.Tests.ps1 b/tests/Identity/Test-ConditionalAccessBaseline.Tests.ps1
@@ -3,11 +3,11 @@ BeforeDiscovery {
 }
 
 BeforeAll {
-
+    $policies = Get-MtConditionalAccessPolicies
 }
 
 Describe "Conditional Access Baseline Policies" -Tag "CA", "Security", "All" {
     It "ID1001: At least one Conditional Access policy is configured with device compliance" {
-        Test-MtCaHasDeviceCompliance | Should -Be $true
+        Test-MtCaHasDeviceCompliance $policies | Should -Be $true
     }
 }