MT.1015 - At least one Conditional Access policy is configured to block access for unknown or unsupported device platforms.
Overview
Microsoft recommends blocking access for unknown or unsupported device platforms.
Learn more: https://learn.microsoft.com/entra/identity/conditional-access/howto-policy-unknown-unsupported-device
Remediation action
Review the configuration described above.
Test Metadata
| Field | Value |
|---|---|
| Test ID | MT.1015 |
| Severity | Medium |
| Suite | Maester |
| Product | Entra ID |
| Feature | Conditional Access |
| Area | Access control |
| Resource type | Tenant |
| User impact | Medium |
| Implementation cost | Low |
| MITRE ATT&CK | T1078.004 Cloud Accounts |
| Supports controls | nist-800-53-r5:AC-2(11), nist-800-53-r5:CM-7 |
| PowerShell test | Test-MtCaBlockUnknownOrUnsupportedDevicePlatform |
| Services | Graph |
| Compatible licenses | AAD_PREMIUM |
Source
- Test:
tests/maester/entra/Test.MT.1015.ps1 - Documentation:
tests/maester/entra/Test.MT.1015.md