Block-SignInOfSharedResources.ps1

#Needs ExchangeOnline and MSOLService
$SharedMailboxes = Get-EXOMailbox -Filter {(recipienttypedetails -eq "SharedMailbox") -or (recipienttypedetails -eq "EquipmentMailbox") -or (recipienttypedetails -eq "RoomMailbox")} | get-MsolUser | Select-Object UserPrincipalName,blockcredential,recipienttypedetails
$SignInEnabledSharedMailboxes = $SharedMailboxes | Where-Object {$_.BlockCredential -eq $False}
$SignInEnabledSharedMailboxes | Export-CSV C:\temp\report.csv -NoTypeInformation
If ($SignInEnabledSharedMailboxes) {
Write-Host "[BAD] $($SignInEnabledSharedMailboxes.Count) shared mailboxes were found with signin enabled."
Do {
$Answer = Read-Host -Prompt 'Do you want to disable signin for all shared mailboxes? (y/n)'
If (!($Answer -match 'y' -or $Answer -match 'n')) {Write-Host 'Please answer "y" for Yes or "n" for No.'}
}
Until ($Answer -match 'y' -or $Answer -match 'n')
If ($Answer -match 'y') {
Write-Host "[GOOD] Disabling signin for all shared mailboxes."
$SignInEnabledSharedMailboxes.UserPrincipalName | ForEach-Object { Set-MsolUser -UserPrincipalName $_ -BlockCredential $true}
} Else {
Write-Host "[INFORM] Please contact the customer and resolve the issue"
}
} Else {
Write-Host "[GOOD] No shared mailboxes were found with signin enabled."
}