Commands › Exchange Online

Get-DeviceConditionalAccessRule

Exchange Online ExchangeOnlineManagement Get-*

This cmdlet is functional only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell. Use the Get-DeviceConditionalAccessRule cmdlet to view mobile device conditional access rules in Basic Mobility and Security in Microsoft 365.

Quick start script

# Get-DeviceConditionalAccessRule — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Get-DeviceConditionalAccessRule | Format-List

# 3. Export for evidence / drift tracking
Get-DeviceConditionalAccessRule | Export-Clixml .\DeviceConditionalAccessRule-$(Get-Date -Format yyyyMMdd).xml

Syntax

Get-DeviceConditionalAccessRule [[-Identity] <ComplianceRuleIdParameter>]
 [-CompareToWorkload]
 [-DomainController <Fqdn>]
 [<CommonParameters>]

Parameters (3)

Parameter	Type	What it controls
-Identity	ComplianceRuleIdParameter	The Identity parameter specifies the mobile device conditional access rule that you want to view. The name of the rule uses the syntax `<Mobile device conditional access policy name>{<GUID value>}`. For example,...
-CompareToWorkload	SwitchParameter	The CompareToWorkload switch specifies whether to compare the mobile device conditional access rule to Intune rules. You don't need to specify a value with this switch.
-DomainController	Fqdn	This parameter is reserved for internal Microsoft use.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.