Skip to main content

Get-XdrIdentityConfigurationRemediationActionAccount

SYNOPSIS​

Retrieves the remediation action account configuration for Microsoft Defender for Identity.

SYNTAX​

Get-XdrIdentityConfigurationRemediationActionAccount [-Force] [-ProgressAction <ActionPreference>]
 [<CommonParameters>]

DESCRIPTION​

Gets the remediation action account configuration from Microsoft Defender for Identity. If remediation is configured to use Local System, returns the configuration status. If remediation uses a dedicated account, returns both the configuration status and the account details. This function includes caching support with a 30-minute TTL to reduce API calls.

EXAMPLES​

EXAMPLE 1​

Get-XdrIdentityConfigurationRemediationActionAccount
Retrieves the remediation action account configuration using cached data if available.

EXAMPLE 2​

Get-XdrIdentityConfigurationRemediationActionAccount -Force
Forces a fresh retrieval of the remediation action account configuration, bypassing the cache.

EXAMPLE 3​

$config = Get-XdrIdentityConfigurationRemediationActionAccount
if ($config.IsRemediationWithLocalSystemEnabled) 
    Write-Host "Using Local System account for remediation"
 else 
    Write-Host "Using dedicated account: $($config.RemediationAccounts[0].AccountName)"

Retrieves the configuration and checks which account type is being used.

PARAMETERS​

-Force​

Bypasses the cache and forces a fresh retrieval from the API.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProgressAction​

The ProgressAction parameter is a common parameter, not a cmdlet parameter. For more information, see about_CommonParameters.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters​

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS​

OUTPUTS​

Object​

Returns a configuration object containing:​

- IsRemediationWithLocalSystemEnabled: Boolean indicating if Local System is used​

- RemediationAccounts: Array of remediation account details (only if not using Local System)​

NOTES​