Retention Onedrive

<# .SYNOPSIS Retention Policy OneDrive 7 Jaar .DESCRIPTION Retention policy voor OneDrive for Business moet configured worden met 7-jaar retention voor persoonlijke document opslag en compliance. .NOTES Filename: retention-onedrive.ps1 Author: Nederlandse Baseline voor Veilige Cloud Version: 2.0 Related JSON: content/m365/data-lifecycle-management/retention-onedrive.json #> #Requires -Version 5.1 #Requires -Modules ExchangeOnlineManagement [CmdletBinding()] param( [Parameter()][switch]$Monitoring, [Parameter()][switch]$Remediation, [Parameter()][switch]$Revert, [Parameter()][switch]$WhatIf ) $ErrorActionPreference = 'Stop' Write-Host "`n========================================" -ForegroundColor Cyan Write-Host "Retention Policy OneDrive 7 Jaar" -ForegroundColor Cyan Write-Host "========================================`n" -ForegroundColor Cyan $script:RetentionDays = 2555 $script:RetentionYears = 7 function Invoke-Monitoring { try { Write-Host "Monitoring:" -ForegroundColor Yellow Connect-IPPSSession -ShowBanner:$false -ErrorAction Stop $policies = Get-RetentionCompliancePolicy -ErrorAction Stop | Where-Object { $_.OneDriveLocation -ne $null -and $_.OneDriveLocation.Count -gt 0 } $result = @{isCompliant = $false; totalPolicies = $policies.Count; compliantPolicies = 0 } if ($policies.Count -eq 0) { Write-Host " No OneDrive retention policies" -ForegroundColor Red } else { foreach ($policy in $policies) { $rules = Get-RetentionComplianceRule -Policy $policy.Name -ErrorAction SilentlyContinue $maxDays = 0 foreach ($rule in $rules) { if ($rule.RetentionDuration) { $days = [int]$rule.RetentionDuration if ($days -gt $maxDays) { $maxDays = $days } if ($days -ge $script:RetentionDays -and $policy.Enabled) { $result.compliantPolicies++ $result.isCompliant = $true } } } Write-Host " Policy: $($policy.Name) - $maxDays days" -ForegroundColor $(if ($maxDays -ge $script:RetentionDays) { "Green" }else { "Yellow" }) } } Write-Host "`n Total: $($result.totalPolicies) | Compliant: $($result.compliantPolicies)" -ForegroundColor Cyan if ($result.isCompliant) { Write-Host "`nCOMPLIANT" -ForegroundColor Green; exit 0 } else { Write-Host "`nNON-COMPLIANT" -ForegroundColor Red; exit 1 } } catch { Write-Host "ERROR: $_" -ForegroundColor Red; exit 2 } } function Invoke-Remediation { try { Write-Host "Remediation:" -ForegroundColor Yellow Connect-IPPSSession -ShowBanner:$false -ErrorAction Stop $policyName = "OneDrive $script:RetentionYears Year Retention" $policy = New-RetentionCompliancePolicy ` -Name $policyName ` -Comment "Nederlandse Baseline - $script:RetentionYears year OneDrive retention" ` -OneDriveLocation All ` -Enabled $true -ErrorAction Stop $rule = New-RetentionComplianceRule ` -Name "$policyName - Rule" ` -Policy $policyName ` -RetentionDuration $script:RetentionDays ` -RetentionComplianceAction Keep -ErrorAction Stop Write-Host " Policy created" -ForegroundColor Green exit 0 } catch { Write-Host "ERROR: $_" -ForegroundColor Red; exit 2 } } function Invoke-Revert { try { Connect-IPPSSession -ShowBanner:$false -ErrorAction Stop $policyName = "OneDrive $script:RetentionYears Year Retention" $policy = Get-RetentionCompliancePolicy -Identity $policyName -ErrorAction SilentlyContinue if ($policy) { Remove-RetentionCompliancePolicy -Identity $policyName -Confirm:$false -ErrorAction Stop Write-Host " Policy removed" -ForegroundColor Yellow } exit 0 } catch { Write-Host "ERROR: $_" -ForegroundColor Red; exit 2 } } try { if ($Revert) { Invoke-Revert } elseif ($Monitoring) { Invoke-Monitoring } elseif ($Remediation) { Invoke-Remediation } else { Write-Host "Use: -Monitoring | -Remediation | -Revert" -ForegroundColor Yellow } } catch { throw } finally { Write-Host "`n========================================`n" -ForegroundColor Cyan }