Standaard Link Specific People

<# .SYNOPSIS Default Link Specific People .DESCRIPTION Sets default sharing links to specific people only (most secure) .NOTES NL Baseline v2.0 #> #Requires -Version 5.1 #Requires -Modules Microsoft.Graph [CmdletBinding()] param([switch]$Monitoring) $ErrorActionPreference = 'Stop' Write-Host "`n========================================" -ForegroundColor Cyan Write-Host "Default Link Specific People" -ForegroundColor Cyan Write-Host "========================================`n" -ForegroundColor Cyan function Invoke-Monitoring { try { Connect-MgGraph -Scopes "Domain.Read.All" -NoWelcome -ErrorAction Stop $domain = (Get-MgDomain | Where-Object { $_.IsDefault }).Id $tenantName = $domain.Split('.')[0] Connect-SPOService -Url "https://$tenantName-admin.sharepoint.com" -ErrorAction Stop $tenant = Get-SPOTenant $result = @{ isCompliant = ($tenant.DefaultSharingLinkType -eq 'Direct') linkType = $tenant.DefaultSharingLinkType permission = $tenant.DefaultLinkPermission } Write-Host " Default Sharing Link Type: $($tenant.DefaultSharingLinkType)" -ForegroundColor $( if ($tenant.DefaultSharingLinkType -eq 'Direct') { 'Green' }else { 'Red' } ) Write-Host " Default Link Permission: $($tenant.DefaultLinkPermission)" -ForegroundColor Gray Write-Host "`n Link Types (secure to less secure):" -ForegroundColor Cyan Write-Host " • Direct: Specific people only (most secure)" -ForegroundColor Green Write-Host " • Internal: Anyone in organization" -ForegroundColor Yellow Write-Host " • Anonymous: Anyone with link (least secure)" -ForegroundColor Red Write-Host "`n Security Benefits:" -ForegroundColor Cyan Write-Host " • Prevents accidental broad sharing" -ForegroundColor Gray Write-Host " • Requires explicit user selection" -ForegroundColor Gray Write-Host " • Reduces data exposure risk" -ForegroundColor Gray if ($result.isCompliant) { Write-Host "`n[OK] COMPLIANT - Links default to specific people" -ForegroundColor Green exit 0 } else { Write-Host "`n[FAIL] NON-COMPLIANT - Default sharing too broad!" -ForegroundColor Red exit 1 } } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } try { if ($Monitoring) { Invoke-Monitoring } else { Write-Host "Use: -Monitoring" -ForegroundColor Yellow } } catch { throw } finally { Write-Host "`n========================================`n" -ForegroundColor Cyan } function Invoke-Remediation { <# .SYNOPSIS Herstelt de configuratie naar de gewenste staat .DESCRIPTION Dit is een monitoring-only control, remediation delegeert naar monitoring #> [CmdletBinding()] param() Write-Host "[INFO] Dit is een monitoring-only control" -ForegroundColor Yellow Write-Host "[INFO] Running monitoring check..." -ForegroundColor Cyan Invoke-Monitoring }