Duplicate all members of one security group into another (unless they already exist) I needed to do this for reasons and got very bored of instructing people how to do it through the GUI outputting the members of one group then bulk importing them to the next so scripted it. I actually prefer the export… Read More »
With the imminent death of basic auth and a shocking number of application people who have not taken any steps whatsoever to do anything about it I have been creating a LOT of applications to send and receive mail via graph. This is basically building a service principal, giving it the access then using an… Read More »
So many many years ago we used to have a lovely tool called search-mailbox which allowed us to search for some mail based on some parameters then permanently purge the results from the mailbox. This capability has been removed and replaced with the pairing of Compliance searches and Compliance search actions. The big issue for… Read More »
As if distributions lists weren’t annoying enough (what with the setting them up, the explaining how they work, the explaining what a moderator is and the having to seek and destroy someone’s medical data out of 75,000 user mailboxes when your explanations were ignored) there are two types (static and dynamic) and at rest the… Read More »
After much project work, experimentation and general messing around with new and exciting stuff back to what I started this site for – an actual PowerShell script to do an actual task. This grabs a bunch of mailboxes and gets the delegates then outputs to a csv file. It’s a little more complicated than you… Read More »
It appears that the method for scripting in phone authentication methods using the AzureAD powershell module (as detailed at https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-authenticationdata#set-and-read-the-authentication-data-through-powershell) no longer functions – it adds the phone numbe in AAD but does not set it as an authentication method. There is a note on the article: which basically seems to indicate that going forward… Read More »
I had to run a discovery on the company name attribute for all users on a 30k+ user tenant to see if they were properly populated and identify where we had users either with an incorrect or no Company Name attribute set. The tenant contained users from multiple business units with their own userprincipalname domain… Read More »
Apply an Intune Scope Tag to a group of devices based on the device owner attributes. Please note this OVERWRITES current tags. In order to provide administrative isolation in Intune Microsoft use the concept of Tags. Tags apply to policies, app assignments, profiles and devices and an administrator with the appropriate role can only see… Read More »
I’ve written a fair bit about how I use Function apps and Flow to get data about 365 environments. There are clear advantages and disadvantages of each. Flow is incredibly slow, difficult to process data in and is in general restricted to what you can take out of Microsoft Graph. Function Apps allow you to… Read More »
This will allow you to securely stick a password or any other secret in a Key Vault for usage in a PowerShell function app (or anything else). You can of course stick the password or whatever directly in the app settings or even an (encrypted) file in your function app but this way has four… Read More »