{"id":211147,"date":"2024-03-05T15:33:53","date_gmt":"2024-03-05T15:33:53","guid":{"rendered":"https:\/\/www.ninjaone.com\/?post_type=script_hub&p=211147"},"modified":"2024-03-05T15:33:53","modified_gmt":"2024-03-05T15:33:53","slug":"sakerstall-modern-autentisering-aktiverad-office-365-powershell","status":"publish","type":"script_hub","link":"https:\/\/www.ninjaone.com\/sv\/script-hub\/sakerstall-modern-autentisering-aktiverad-office-365-powershell\/","title":{"rendered":"S\u00e5 h\u00e4r s\u00e4kerst\u00e4ller du att modern autentisering \u00e4r aktiverad i Office 365 med PowerShell"},"content":{"rendered":"

Modern autentisering<\/a> \u00e4r en s\u00e4kerhetsfunktion i Office 365 som anv\u00e4nder Azure Active Directory (AAD) f\u00f6r att autentisera anv\u00e4ndare. Den st\u00e5r som en ledstj\u00e4rna f\u00f6r s\u00e4kerhet och \u00f6verskuggar traditionella autentiseringsmetoder som Basic Authentication. Varf\u00f6r? Modern autentisering anv\u00e4nder starkare kryptering och ett extra lager av tv\u00e5faktorsautentisering, vilket g\u00f6r den till en formidabel f\u00f6rsvarsmekanism i dagens cyberlandskap.<\/p>\n

Att f\u00f6rst\u00e5 manuset<\/h2>\n

I grund och botten \u00e4r skriptet utformat f\u00f6r att ge klarhet i statusen f\u00f6r modern autentisering \u00f6ver anv\u00e4ndarprofiler i en Office 365-milj\u00f6<\/strong>. Hur uppn\u00e5r den detta? Genom att noggrant g\u00e5 igenom varje anv\u00e4ndarprofil p\u00e5 maskinen och inspektera de registerv\u00e4rden som \u00e4r kopplade till modern autentisering. Om den st\u00f6ter p\u00e5 v\u00e4rdet 0 \u00e4r det en tydlig indikator p\u00e5 att modern autentisering \u00e4r inaktiverad f\u00f6r den specifika anv\u00e4ndarprofilen.<\/p>\n

Manus<\/h2>\n
#Requires -Version 5.1\r\n\r\n<#\r\n.SYNOPSIS\r\n    Monitors if user profiles have modern auth for Office 365 enabled or disabled.\r\n.DESCRIPTION\r\n    Monitors if user profiles have modern auth for Office 365 enabled or disabled.\r\n    Check if HKEY_CURRENT_USERSOFTWAREMicrosoftOffice15.0CommonIdentityEnableADAL is set to 1.\r\n    Check if HKEY_CURRENT_USERSOFTWAREMicrosoftOffice16.0CommonIdentityEnableADAL is set to 0.\r\n    Returns an exit code of 1 if one user has modern auth disabled.\r\n    Returns an exit code of 0 if all user have modern auth enabled.\r\n.EXAMPLE\r\n     No parameter needed.\r\n.OUTPUTS\r\n    None\r\n.NOTES\r\n    Minimum OS Architecture Supported: Windows 10, Windows Server 2016\r\n    Release Notes:\r\n    Initial Release\r\nBy using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/terms-of-use.\r\n    Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n    Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n    Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n    Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n    Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n    Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n    EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n#>\r\n\r\n[CmdletBinding()]\r\nparam ()\r\n\r\nbegin {\r\n    function Test-IsElevated {\r\n        $id = [System.Security.Principal.WindowsIdentity]::GetCurrent()\r\n        $p = New-Object System.Security.Principal.WindowsPrincipal($id)\r\n        $p.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)\r\n    }\r\n}\r\nprocess {\r\n    if (-not (Test-IsElevated)) {\r\n        Write-Error -Message \"Access Denied. Please run with Administrator privileges.\"\r\n        exit 1\r\n    }\r\n    # Loop through each user's profile\r\n    # Check if HKEY_CURRENT_USERSOFTWAREMicrosoftOffice15.0CommonIdentityEnableADAL is set to 1\r\n    # Check if HKEY_CURRENT_USERSOFTWAREMicrosoftOffice16.0CommonIdentityEnableADAL is set to 1\r\n\r\n    $Path = @(\"SOFTWAREMicrosoftOffice15.0CommonIdentity\", \"SOFTWAREMicrosoftOffice16.0CommonIdentity\")\r\n    $Name = \"EnableADAL\"\r\n\r\n    $Script:FoundModernAuthDisabled = $false\r\n\r\n    # Get each user profile SID and Path to the profile\r\n    $UserProfiles = Get-ItemProperty -Path \"HKLM:SOFTWAREMicrosoftWindows NTCurrentVersionProfileList*\" |\r\n        Where-Object { $_.PSChildName -match \"S-1-5-21-(d+-?){4}$\" } |\r\n        Select-Object @{Name = \"SID\"; Expression = { $_.PSChildName } }, @{Name = \"UserHive\"; Expression = { \"$($_.ProfileImagePath)NTuser.dat\" } }, @{Name = \"UserName\"; Expression = { \"$($_.ProfileImagePath | Split-Path -Leaf)\" } }\r\n\r\n    # Loop through each profile on the machine\r\n    Foreach ($UserProfile in $UserProfiles) {\r\n        # Load User ntuser.dat if it's not already loaded\r\n        If (($ProfileWasLoaded = Test-Path -Path \"Registry::HKEY_USERS$($UserProfile.SID)\") -eq $false) {\r\n            Start-Process -FilePath \"cmd.exe\" -ArgumentList \"\/C reg.exe LOAD HKU$($UserProfile.SID) $($UserProfile.UserHive)\" -Wait -WindowStyle Hidden\r\n        }\r\n\r\n        # Read the user's registry\r\n        $Path | ForEach-Object {\r\n            $Key = Join-Path -Path \"Registry::HKEY_USERS$($UserProfile.SID)\" -ChildPath $($_)\r\n            $Value = Get-ItemProperty -Path $Key -ErrorAction SilentlyContinue | Select-Object $Name -ExpandProperty $Name -ErrorAction SilentlyContinue\r\n            if (\r\n                (\r\n                    $_ -like \"*15.0*\" -and\r\n                    $Value -ne 1 -and\r\n                    $(Test-Path -Path $Key -ErrorAction SilentlyContinue)\r\n                ) -or\r\n                (\r\n                    $_ -like \"*16.0*\" -and\r\n                    $Value -eq 0\r\n                )\r\n            ) {\r\n                Write-Host \"$($UserProfile.UserName) ModernAuth is not enabled.\"\r\n                $Script:FoundModernAuthDisabled = $true\r\n            }\r\n        }\r\n \r\n        # Unload NTuser.dat\r\n        If ($ProfileWasLoaded -eq $false) {\r\n            [gc]::Collect()\r\n            Start-Sleep 1\r\n            Start-Process -FilePath \"cmd.exe\" -ArgumentList \"\/C reg.exe UNLOAD HKU$($UserProfile.SID)\" -Wait -WindowStyle Hidden | Out-Null\r\n        }\r\n    }\r\n    if ($FoundModernAuthDisabled) {\r\n        Write-Output $false\r\n        exit 1\r\n    }\r\n    else {\r\n        Write-Output $true\r\n        exit 0\r\n    }\r\n}\r\nend {}<\/pre>\n
 <\/p>\n\n
F\u00e5 tillg\u00e5ng till \u00f6ver 300+ skript i NinjaOne Dojo<\/p>\n
F\u00e5 tillg\u00e5ng till<\/a><\/p>\n<\/div>\n
Hur IT-proffs kan dra nytta av detta<\/h2>\n
Scriptet \u00e4r inte bara ett verktyg, det \u00e4r en l\u00f6sning som \u00e4r skr\u00e4ddarsydd f\u00f6r IT-proffs. S\u00e5 h\u00e4r kan det f\u00f6r\u00e4ndra spelplanen:<\/p>\n
    \n
  1. Proaktiv \u00f6vervakning<\/strong>: Innan en potentiell s\u00e4kerhetslucka blir ett fullskaligt problem kan IT-personal med hj\u00e4lp av skriptet identifiera och \u00e5tg\u00e4rda fall d\u00e4r modern autentisering \u00e4r inaktiverad.<\/li>\n
  2. Effektivitet n\u00e4r den \u00e4r som b\u00e4st<\/strong>: Tiden \u00e4r av yttersta vikt inom IT. Skriptet automatiserar den annars tr\u00e5kiga processen att individuellt kontrollera varje anv\u00e4ndarprofil, vilket frig\u00f6r v\u00e4rdefull tid.<\/li>\n
  3. Tydlighet och riktning<\/strong>: Inga fler gissningar. Skriptet ger tydlig feedback om vilka anv\u00e4ndarprofiler som beh\u00f6ver uppm\u00e4rksammas, vilket banar v\u00e4g f\u00f6r riktade och effektiva \u00e5tg\u00e4rder.<\/li>\n<\/ol>\n
    NinjaOne: Din partner f\u00f6r IT-hantering<\/h2>\n
    Skriptet erbjuder en fokuserad l\u00f6sning, men genom att integrera det med en omfattande IT-hanteringsplattform<\/a> som NinjaOne f\u00f6rst\u00e4rks dess kapacitet. NinjaOne tillhandah\u00e5ller en enhetlig plattform som f\u00f6renklar IT-driften. N\u00e4r det g\u00e4ller modern autentisering i Office 365 kan NinjaOne s\u00f6ml\u00f6st k\u00f6ra skriptet vid schemalagda intervall. Resultatet? Realtidsvarningar till IT-team<\/a> om eventuella avvikelser, vilket s\u00e4kerst\u00e4ller att s\u00e4kerheten f\u00f6rblir kompromissl\u00f6s.<\/p>\n
    Avslutande tankar<\/h2>\n
    I den st\u00e4ndigt f\u00f6r\u00e4nderliga IT-v\u00e4rlden \u00e4r modern autentisering i Office 365 inte bara en funktion – det \u00e4r en n\u00f6dv\u00e4ndighet. Genom att utnyttja det diskuterade skriptet och integrera det med robusta l\u00f6sningar som NinjaOne kan IT-personal st\u00e4rka sitt f\u00f6rsvar och se till att deras organisationer alltid ligger steget f\u00f6re i cybers\u00e4kerhetsspelet.<\/p>\n","protected":false},"author":35,"featured_media":142185,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","_lmt_disableupdate":"no","_lmt_disable":""},"operating_system":[4212],"use_cases":[4255],"class_list":["post-211147","script_hub","type-script_hub","status-publish","has-post-thumbnail","hentry","script_hub_category-windows","use_cases-systemkonfiguration"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.ninjaone.com\/sv\/wp-json\/wp\/v2\/script_hub\/211147","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ninjaone.com\/sv\/wp-json\/wp\/v2\/script_hub"}],"about":[{"href":"https:\/\/www.ninjaone.com\/sv\/wp-json\/wp\/v2\/types\/script_hub"}],"author":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/sv\/wp-json\/wp\/v2\/users\/35"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/sv\/wp-json\/wp\/v2\/comments?post=211147"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/sv\/wp-json\/wp\/v2\/media\/142185"}],"wp:attachment":[{"href":"https:\/\/www.ninjaone.com\/sv\/wp-json\/wp\/v2\/media?parent=211147"}],"wp:term":[{"taxonomy":"script_hub_category","embeddable":true,"href":"https:\/\/www.ninjaone.com\/sv\/wp-json\/wp\/v2\/operating_system?post=211147"},{"taxonomy":"use_cases","embeddable":true,"href":"https:\/\/www.ninjaone.com\/sv\/wp-json\/wp\/v2\/use_cases?post=211147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}