Apply an Intune Scope Tag to a group of devices based on the device owner attributes. Please note this OVERWRITES current tags. In order to provide administrative isolation in Intune Microsoft use the concept of Tags. Tags apply to policies, app assignments, profiles and devices and an administrator with the appropriate role can only see… Read More »
I’ve written a fair bit about how I use Function apps and Flow to get data about 365 environments. There are clear advantages and disadvantages of each. Flow is incredibly slow, difficult to process data in and is in general restricted to what you can take out of Microsoft Graph. Function Apps allow you to… Read More »
This will allow you to securely stick a password or any other secret in a Key Vault for usage in a PowerShell function app (or anything else). You can of course stick the password or whatever directly in the app settings or even an (encrypted) file in your function app but this way has four… Read More »
This will build on my multiple posts building up a template function in a function app that allows scripted control and reporting on Microsoft 365. This will be the last part of my template app as once we have AAD, Exchange, Teams and Graph capabilities we are pretty much complete. In honesty the graph part… Read More »
I’m a big fan of running powershell in function apps. Sorry, no that’s wrong – I’m a big fan of NOT running powershell on “reporting servers”, “management boxes”, “that vm that does the 365 stuff” or anywhere where there is even the slightest chance I’m going to find myself fixing a problem on a windows… Read More »
And on the seventh year of Exchange Online did the Version 2 PowerShell module be released and there was great rejoicing. Except for people trying to work in Azure Function Apps. Pretty much the most common reporting or regular maintenance activities in 365 is managing Exchange. We all have a tonne of powershell scripts for… Read More »
Its just one of those things. Everything is great in your tenant all best practise, no creaky old servers anywhere then the phone rings and someone from the BI team says they need an hourly output of some stuff in csv and the columns have to be in a particular order. Or someone NEEDS a… Read More »
You know that reporting server? Runs those PowerShell scripts to grab custom reports, add group prefixes and other general 365 maintenance tasks? Uses that global admin password that is exempt from MFA because it needs to run these scripts or uses a highly privileged ClientID/Secret? Means anyone that can get access to the drive with… Read More »