Network 25372: Global Secure Access (GSA) client is deployed on all managed endpoints

[ashwinikarke]

No description provided.

[Copilot]

Pull request overview

This PR adds a new Global Secure Access (GSA) assessment that validates client deployment coverage across Intune-managed endpoints and documents the associated risk and remediation guidance.

Changes:

• Introduces Test-Assessment-25372 PowerShell assessment that compares GSA device usage with Intune-managed device counts and categorizes outcomes (pass / investigate / fail) based on deployment percentage and data edge cases.
• Generates a rich markdown summary for the assessment, including device counts, percentage coverage, and evaluation window.
• Adds detailed markdown content (Test-Assessment.25372.md) describing the risk of incomplete GSA client deployment and step-by-step remediation actions across platforms.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
src/powershell/tests/Test-Assessment.25372.ps1	New assessment test that queries GSA device usage and Intune-managed devices, evaluates deployment coverage against thresholds, and emits a structured markdown report plus test result metadata.
src/powershell/tests/Test-Assessment.25372.md	New markdown content explaining the security impact of missing GSA client deployment, with remediation links for Windows, macOS, iOS, Android, and monitoring.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[alexandair]

LGTM