From dd6fa392b2b35ab75223d9a0a7b0f5626efbe2cd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rafa=C5=82=20Fitt?=
 <36852431+rafalfitt@users.noreply.github.com>
Date: Tue, 2 Apr 2024 11:44:50 +0200
Subject: [PATCH] Add Azure Virtual Desktop Azure Resource Manager Provider

The app called Azure Virtual Desktop Azure Resource Manager Provider (app ID 50e95039-b200-4007-bc97-8d5790743a63) is only used for retrieving the user feed and shouldn't have multifactor authentication.
Source: https://learn.microsoft.com/en-us/azure/virtual-desktop/set-up-mfa?tabs=avd#:~:text=Don%27t%20select%20the%20app%20called%20Azure%20Virtual%20Desktop%20Azure%20Resource%20Manager%20Provider%20(app%20ID%2050e95039%2Db200%2D4007%2Dbc97%2D8d5790743a63).%20This%20app%20is%20only%20used%20for%20retrieving%20the%20user%20feed%20and%20shouldn%27t%20have%20multifactor%20authentication.
---
 .../Microsoft365DSCCAPolicies/M365TenantConfig.ps1          | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ConditionalAccessSamplePolicies/Microsoft365DSCCAPolicies/M365TenantConfig.ps1 b/ConditionalAccessSamplePolicies/Microsoft365DSCCAPolicies/M365TenantConfig.ps1
index 522592f..e4cb985 100644
--- a/ConditionalAccessSamplePolicies/Microsoft365DSCCAPolicies/M365TenantConfig.ps1
+++ b/ConditionalAccessSamplePolicies/Microsoft365DSCCAPolicies/M365TenantConfig.ps1
@@ -106,7 +106,7 @@ Configuration M365TenantConfig
             Credential                               = $Credscredential;
             DisplayName                              = "CA100-Admins-BaseProtection-AllApps-AnyPlatform-MFAANDCompliant";
             Ensure                                   = "Present";
-            ExcludeApplications                      = @("d4ebce55-015a-49b5-a083-c84d1797ae8c");
+            ExcludeApplications                      = @("d4ebce55-015a-49b5-a083-c84d1797ae8c","50e95039-b200-4007-bc97-8d5790743a63");
             ExcludeGroups                            = @("CA-BreakGlassAccounts","CA-Persona-Admins-BaseProtection-Exclusions","CA-Persona-Microsoft365ServiceAccounts","CA-Persona-AzureServiceAccounts","CA-Persona-CorpServiceAccounts");
             ExcludeLocations                         = @();
             ExcludePlatforms                         = @();
@@ -1046,7 +1046,7 @@ Configuration M365TenantConfig
             Credential                               = $Credscredential;
             DisplayName                              = "CA500-GuestAdmins-BaseProtection-AllApps-AnyPlatform-MFA";
             Ensure                                   = "Present";
-            ExcludeApplications                      = @();
+            ExcludeApplications                      = @("50e95039-b200-4007-bc97-8d5790743a63");
             ExcludeGroups                            = @("CA-BreakGlassAccounts","CA-Persona-GuestAdmins");
             ExcludeLocations                         = @();
             ExcludePlatforms                         = @();
@@ -1942,7 +1942,7 @@ Configuration M365TenantConfig
             Credential                               = $Credscredential;
             DisplayName                              = "CA400-Guests-BaseProtection-AllApps-AnyPlatform-MFA";
             Ensure                                   = "Present";
-            ExcludeApplications                      = @();
+            ExcludeApplications                      = @("50e95039-b200-4007-bc97-8d5790743a63");
             ExcludeGroups                            = @();
             ExcludeLocations                         = @();
             ExcludePlatforms                         = @();