MT.1024: Enable PHS if hybrid

[jkerai1]

Test shows fail even though no Entra Connect is configured and tenant is cloud only

[merill]

Thanks @jkerai1 that's a valid point.

[weyCC81]

I have also seen this before, can be confirmed

[tdcthosc]

MT.1024 is recommendations parsed from Entra directly, so the recommendation can be dismissed in the Entra portal if not applicable.

[l-gosling]

@jkerai1 The statement by @tdcthosc is correct and in the current release, I see a suitable description for this in the test result.

If this is implemented, the test will be skipped.

If this has solved your problem, please close the issue.

[SamErde]

This test result is based on active Microsoft Entra recommendations that are mistakenly suggesting PHS for domains that do not have OnPremisesSyncEnabled. This should be resolved by dismissing the recommendation in the Entra portal.

To avoid this false positive, we could add a Graph call that checks if the domain has sync enabled and use that to suppress the recommendation -- but I would still recommend resolving or dismissing the recommendation itself.

Get-MgDomain | Select-Object Id, AuthenticationType, IsDefault, IsVerified, IsInitial, OnPremisesSyncEnabled | Format-Table -AutoSize