Duplicate all members of one security group into another (unless they already exist) I needed to do this for reasons and got very bored of instructing people how to do it through the GUI outputting the members of one group then bulk importing them to the next so scripted it. I actually prefer the export… Read More »
With the death of Basic Auth a lot of “Admin Scripts” doing…stuff are dead or dying. In https://www.matts-stuff.co.uk/2022/08/18/application-registration-for-accessing-mailboxes/ I went through using an app registration and Exchange App Access Policy to allow an app to send and receive as a single mailbox. The other thing people seem to want to do is manage files and… Read More »
With the imminent death of basic auth and a shocking number of application people who have not taken any steps whatsoever to do anything about it I have been creating a LOT of applications to send and receive mail via graph. This is basically building a service principal, giving it the access then using an… Read More »
So many many years ago we used to have a lovely tool called search-mailbox which allowed us to search for some mail based on some parameters then permanently purge the results from the mailbox. This capability has been removed and replaced with the pairing of Compliance searches and Compliance search actions. The big issue for… Read More »
As if distributions lists weren’t annoying enough (what with the setting them up, the explaining how they work, the explaining what a moderator is and the having to seek and destroy someone’s medical data out of 75,000 user mailboxes when your explanations were ignored) there are two types (static and dynamic) and at rest the… Read More »
After much project work, experimentation and general messing around with new and exciting stuff back to what I started this site for – an actual PowerShell script to do an actual task. This grabs a bunch of mailboxes and gets the delegates then outputs to a csv file. It’s a little more complicated than you… Read More »
It appears that the method for scripting in phone authentication methods using the AzureAD powershell module (as detailed at https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-authenticationdata#set-and-read-the-authentication-data-through-powershell) no longer functions – it adds the phone numbe in AAD but does not set it as an authentication method. There is a note on the article: which basically seems to indicate that going forward… Read More »
A huge missing capability in flow and logic apps (apart from there being no damn clipboard in logic apps) is the ability to turn off steps for testing. This is obvious once you think of its but there actually a 10 second way to do this – Stick the step(s) into a Condition where 1=2:… Read More »
So I was creating a logic app (which I’ll probably document later it dumps email to a SharePoint library based on RegEx) and building an account for it to run under (terrible I know but managed identities are great for providing access to azure resources but not so much for office 365 stuff yet without… Read More »
I had to run a discovery on the company name attribute for all users on a 30k+ user tenant to see if they were properly populated and identify where we had users either with an incorrect or no Company Name attribute set. The tenant contained users from multiple business units with their own userprincipalname domain… Read More »