diff --git a/powershell/public/maester/entra/Test-MtCaGroupsRestricted.ps1 b/powershell/public/maester/entra/Test-MtCaGroupsRestricted.ps1 index d4c456330..668cb460f 100644 --- a/powershell/public/maester/entra/Test-MtCaGroupsRestricted.ps1 +++ b/powershell/public/maester/entra/Test-MtCaGroupsRestricted.ps1 @@ -30,7 +30,7 @@ } try { - $Policies = Get-MtConditionalAccessPolicy | Where-Object { $_.state -eq 'enabled' } + $Policies = Get-MtConditionalAccessPolicy | Where-Object { $_.state -in @('enabled','enabledForReportingButNotEnforced') } $Groups = $Policies.conditions.users | Where-Object { @($_.includeGroups).Count -gt 0 -or @($_.excludeGroups).Count -gt 0