-
Notifications
You must be signed in to change notification settings - Fork 6
/
8-AuditGroups.ps1
33 lines (28 loc) · 1.57 KB
/
8-AuditGroups.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
#--------------------------------------
# Retrieve all groups where classification is blank or null
#--------------------------------------
$GroupsWithNoClassification = Get-UnifiedGroup | Where-Object {$_.Classification -Eq $Null -or $_.Classification -Eq ""} | Sort-Object DisplayName | Select DisplayName, Classification, ExternalDirectoryObjectId
#--------------------------------------
# Set the classification of each group to "internal"
#--------------------------------------
ForEach ($g in $GroupsWithNoClassification) {
If ($Null -eq $g.Classification -or $g.Classification -eq "") {
Set-UnifiedGroup -Identity $G.DisplayName -Classification "internal"
Write-Host "The group classification setting for $($G.DisplayName) was updated to internal."
}
}
Write-Host "$($GroupsWithNoClassification.count) groups"
#--------------------------------------
# Identify which groups have a mismatch of properties
#--------------------------------------
$GroupsWithClassificationMismatch = Get-UnifiedGroup | `
Where-Object {$_.AccessType -eq "Public" -and $_.Classification -eq "High"} | `
Select DisplayName, Classification, AccessType, ExternalDirectoryObjectId
#--------------------------------------
# Set the Access Type to Private for all "High" groups
#--------------------------------------
ForEach ($g in $GroupsWithClassificationMismatch) {
Set-UnifiedGroup -Identity $g.DisplayName -AccessType "Private"
Write-Host "The following Group privacy setting was updated: $($g.DisplayName)"
}
Write-Host "$($GroupsWithClassificationMismatch.count) groups"