[x] Confirm that the recommendation details are accurate and complete as per the CIS benchmark.
Validate test for a pass
[ ] Confirm that the automated test results align with the manual audit steps outlined in the CIS benchmark.
Specific conditions to check:
Condition A: The OneDriveSharingCapability setting is configured to "Disabled" using the PowerShell cmdlet Get-SPOTenant | fl OneDriveSharingCapability.
Condition B: The OneDriveSharingCapability is set to "Only people in your organization" in the SharePoint admin center under Policies > Sharing > OneDrive.
Condition C: OneDrive content sharing is not more permissive than SharePoint content sharing.
Validate test for a fail
[ ] Confirm that the failure conditions in the automated test are consistent with the manual audit results.
Specific conditions to check:
Condition A: The OneDriveSharingCapability setting is not configured to "Disabled" using the PowerShell cmdlet Get-SPOTenant | fl OneDriveSharingCapability.
Condition B: The OneDriveSharingCapability is not set to "Only people in your organization" in the SharePoint admin center under Policies > Sharing > OneDrive.
Condition C: OneDrive content sharing is more permissive than SharePoint content sharing.
Add notes and observations
[ ] Compare the automated audit results with the manual audit steps and provide detailed observations.
Automated audit produced info consistent with the manual audit test results? (Yes/No)
Without disclosing any sensitive information, document any discrepancies between the actual output and the expected output.
Document any error messages, removing any sensitive information before submitting.
Identify the specific function, line, or section of the script that failed, if known.
Provide any additional context or observations that might help in troubleshooting.
If needed, the helpers folder in .\source\helpers contains a CSV to assist with locating the test definition.
Validation for Test-OneDriveContentRestrictions.ps1
Recommendation Details
Test-OneDriveContentRestrictions.ps1
Tasks
Validate recommendation details
Validate test for a pass
Get-SPOTenant | fl OneDriveSharingCapability
.Validate test for a fail
Get-SPOTenant | fl OneDriveSharingCapability
.Add notes and observations
If needed, the helpers folder in .\source\helpers contains a CSV to assist with locating the test definition.