Set-SPOSite单站执行正常但批量循环设置敏感度标签异常求助

问题背景 #

可以通过以下命令单独为租户内的SharePoint站点设置敏感度标签：

# Get the label (required ExchangeOnlineManagement module)
Connect-IPPSSession -userprincipalname wise@redacted
 
$c = Get-Credential wise@redacted
 
Connect-SPOService -Url https://redacted-admin.sharepoint.com -Credential $c -ModernAuth:$true -AuthenticationUrl https://login.microsoftonline.com/organizations

Set-SPOSite -identity {site_url} -SensitivityLabel:'{GUID of sens label here}'

但尝试通过下方代码为所有未被用户手动设置标签的站点配置默认标签时，执行过程中频繁抛出Site already has a sensitivity label错误，说明循环内的if ($site.SensitivityLabel -eq '')判断未正确触发，导致对已有标签的站点执行了Set-SPOSite操作：

# Get the label (required ExchangeOnlineManagement module)
Connect-IPPSSession -userprincipalname wise@redacted
     
$c = Get-Credential wise@redacted
     
Connect-SPOService -Url https://redacted-admin.sharepoint.com -Credential $c -ModernAuth:$true -AuthenticationUrl https://login.microsoftonline.com/organizations

#Create a progress counter and fail counter
$count = 0
$fail = 0

#get all sites
write-host "Collecting site data" -ForegroundColor Yellow
$SiteCollections = Get-SPOSite -Limit All
write-host "Collecting site data - COMPLETED" -ForegroundColor Green

#get a count of total sites
$total = $SiteCollections.count
write-host "There are $total total sites." -ForegroundColor Green
 
foreach ($site in $SiteCollections){
    $count++
    try{
        if ( $site.SensitivityLabel -eq '' ){ 
            Set-SPOSite $site -SensitivityLabel:'{GUID}'
            } else {
                $label = $site.SensitivityLabel 
                Write-host "Site already has a sensitivity label: $label"
                $site.Url | Out-File '.\Sites_already_labeled.txt' -Append
            }
    } catch {
    $sitename = $site.Name
    "Bad site: $sitename" | Out-File '.\Failed_change_sites.txt' -Append
    $fail++
    Write-Host "Failed site count = $fail" -ForegroundColor Blue
    Write-Host "Failed site = $sitename" -ForegroundColor Blue
    }
    Write-Host "Processing Site $count of $total" -ForegroundColor Red
}

已单独测试if ($site.SensitivityLabel -eq '')逻辑确认可正常触发，但批量执行时失效。

问题分析 #

核心原因是Get-SPOSite返回的SensitivityLabel属性值，在站点无敏感度标签时并非空字符串（''），而是$null。你的判断条件仅检查空字符串，导致实际无标签的站点未被命中，反而对已有标签的站点执行Set-SPOSite操作，触发报错。

此外，部分站点可能已通过租户级自动标签策略应用了默认标签，这类站点的SensitivityLabel会有值，也会导致Set-SPOSite报错。

解决方案 #

1. 修正判断条件 #

将判断逻辑改为同时检查$null和空字符串，确保覆盖所有无标签的场景：

if ($site.SensitivityLabel -eq $null -or $site.SensitivityLabel -eq '') { 
    Set-SPOSite $site -SensitivityLabel:'{GUID}'
}

或更简洁的写法：

if (-not $site.SensitivityLabel) { 
    Set-SPOSite $site -SensitivityLabel:'{GUID}'
}

2. 增加调试输出（可选） #

在循环内添加调试输出，确认每个站点的SensitivityLabel实际值，便于排查问题：

foreach ($site in $SiteCollections){
    $count++
    # 输出当前站点的标签状态
    Write-Host "Processing site: $($site.Url) | SensitivityLabel: '$($site.SensitivityLabel)'" -ForegroundColor Cyan
    try{
        # ... 原有判断和执行逻辑
    }
    # ... 原有异常处理逻辑
}

3. 区分手动/自动标签（可选） #

如果你的需求是仅跳过用户手动设置的标签，而非租户自动应用的默认标签，需要额外调用Get-SPOSiteSensitivityLabel获取标签的应用方式：

foreach ($site in $SiteCollections){
    $count++
    try{
        $labelDetails = Get-SPOSiteSensitivityLabel -Identity $site.Url
        # 仅当标签未设置，或标签是自动应用的（非手动）时执行设置
        if (-not $site.SensitivityLabel -or $labelDetails.AppliedByPolicy) {
            Set-SPOSite $site -SensitivityLabel:'{GUID}'
        } else {
            $label = $site.SensitivityLabel 
            Write-host "Site has manually set sensitivity label: $label"
            $site.Url | Out-File '.\Sites_manually_labeled.txt' -Append
        }
    } catch {
        # ... 原有异常处理逻辑
    }
}

内容的提问来源于stack exchange，提问作者Wise