Skip to main content
Version: 2.1.0

Test-MtEntraMsolPowerShellBlocked

SYNOPSIS​

Checks if the legacy MSOnline (MSOL) PowerShell module is blocked from authenticating to the tenant

SYNTAX​

Test-MtEntraMsolPowerShellBlocked [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION​

The MSOnline (MSOL) and Azure AD PowerShell modules were retired by Microsoft and no longer receive security updates. The blockMsolPowerShell setting on the tenant's authorization policy lets an admin explicitly block authentication requests from the legacy MSOnline PowerShell module's service principal, closing an unsupported and unmonitored administrative access path.

This setting isn't enabled by default for every tenant, so it needs to be checked explicitly rather than assumed to already be in place.

EXAMPLES​

EXAMPLE 1​

Test-MtEntraMsolPowerShellBlocked

Returns true if the legacy MSOnline (MSOL) PowerShell module is blocked from authenticating to the tenant

PARAMETERS​

-ProgressAction​

Determines how PowerShell responds to progress updates generated by a script, cmdlet, or provider, such as the progress bars generated by Write-Progress.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters​

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS​

OUTPUTS​

System.Boolean​

NOTES​

https://maester.dev/docs/commands/Test-MtEntraMsolPowerShellBlocked