AZ-Intec-GmbH/ConditionalAccessBaseline
4
0
Fork 0
mirror of https://github.com/j0eyv/ConditionalAccessBaseline.git synced 2026-09-28 10:25:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update README with error handling details

Browse Source 
Added information about Windows sign-in restore failure and policy CA205.
This commit is contained in:
j0eyv
2026-03-27 10:50:59 +01:00
committed by GitHub
parent bc49df689a
commit 302aa02284
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+2
View File
@@ -433,6 +433,8 @@ This policy blocks agent identities with a high risk level from accessing resour
2. Error: Policy contains invalid applications: ServicePrincipalNotFound. Some ServicePrincipals might be missing in your tenant. You can manually create these by using `New-MgServicePrincipal -AppId *****-*****-******` |
3. Windows first sign-in restore fails with error _You can’t get there from here. This application contains sensitive information and can only be accessed from devices or client applications that meet management compliance policy._. This is blocked by policy CA205 (CA205-Internals-BaseProtection-AnyApp-Windows-CompliantorAADHJ). Add an exclusion for **Microsoft Activity Feed Service** (d32c68ad-72d2-4acb-a0c7-46bb2cf93873) in this policy.
## Importing the baseline
These PowerShell scripts are using Microsoft Authentication Library (MSAL), Microsoft Graph APIs and Azure Management APIs to manage objects in Intune and Azure. The scripts has a simple WPF UI and it supports operations like Export, Import, Copy, Download, Compare etc.