DOWST.DEV

group. This talk focused on how to properly setup remoting security and logging options. I talk briefly about how remoting works with some simple examples of what a real-world remoting connection looks like.

as a PowerShell remoting protocol. Unfortunately, this is not a topic that typically comes up for Windows-centric IT Pros. I know this is definitely true in my case, and a deficiency I have been working on. On the plus side, Windows 10 ships with the OpenSSH client installed and ready to go. But what about the OpenSSH Server? On Windows platforms, you need to enable and configure this element if you want to use SSH remoting in PowerShell. Naturally, I'd like to do this with PowerShell and also remotely. First up, I want to show you how to setup the OpenSSH Server component on Windows 10.

and then enable RD. Not really. In this blog post I will show you how you can enable RD with PowerShell. Let's jump in.

so it will be a matter of calling one PowerShell function

tutorial is for you. In this tutorial, you're going to learn, step-by-step, how to configure VS code to connect over SSH via key exchange for both a user with sudo rights (homelab in this guide) and the built in root user.

Linux and macOS. This new cross-platform approach allows users to take advantage of some pretty cool features. In this blog post, I am quickly going to show you, how you can use PowerShell Remoting to copy files from Windows to Linux systems.

up valuable CPU cycles. What do you do? Kill it!

in this short how-to covering creating and managing sessions.

Directory (AD) domain, authentication is not quite straightforward. PSRemoting in a workgroup requires a few pieces to set up if you don't have Kerberos available.

administrators. This is especially helpful when accessing servers from macOS or Linux machines or Windows computers not part of the Active Directory domain, as enabling PowerShell remoting can be complicated in this scenario. By default, SSH on Windows Server 2025 uses password authentication, which you should change to public key authentication for enhanced security.

is a common occurrence. This post explains how you manage these situations.

fixed!

their way. How can you tell when you're in a PSSession and what info is available about the session itself?

PowerShell Remoting

that a GUI based logon such as through mstsc or the physical or virtual console hangs/goes slowly.

then any remoting beyond there gets a big red ACCESS DENIED. Maybe you've tried CredSSP, but people say that isn't safe. Read today's post for a completely legit, secure, safe, and easy way to enable Kerberos double hop for PowerShell remoting.

environment. I love having one interface with tabs for different terminal profiles. Windows Terminal makes it easy for me to have tabs open to PowerShell 7, Windows PowerShell, an Ubuntu instance or even a PowerShell session with no profile. The last piece I needed was an easy way to launch a Windows Terminal profile and connect to a remote computer. Want to see how I did it?

all of the various technologies that make PSRemoting work. This guide will not cover how to use PSRemoting. You'll see plenty of references to many of our how-to guides throughout.

systems. This tutorial shows you how to create, manage and effectively use PowerShell sessions for remote administration.

soon, I thought it might be good to revisit this topic. Here's the potential issue. If you've been installing PowerShell 7 releases for a while, and have been enabling PowerShell remoting, you most likely have a list of remoting session configurations like this.

the application executing this script only has SYSTEM access. This is especially useful when performing tasks from RMM(Remote Monitoring and Management) systems that do not have the abilty to execute monitoring components in user-space.

remote management needs between Windows, Linux, and macOS.

and management services, such as Azure Policy, Update Management, Security Center, Azure Monitor, and many more.

module daily and I realized there is still value in the ISE as a remoting interface so I dusted off the code and polished it up.

that when done right; PowerShell remoting is equal to SSH. The problem is that Microsoft and Windows get a bad rap because most people assume Windows is not secure. I invite you to watch the video and take notes. If you have questions, please reach out to me via the comments here or via the contact information posted int he video. Also, you can more links on this website that discuss remoting in detail.

lot of articles around the trends of adoption of cloud services and all software that should facilitate the challenge of enabling in every country the same practices and processes of working remotely.

customers start using these new cmdlets right away.

tricky and complex as there is currently no solution out-of-the-box. Here some examples:

when Microsoft discontinued basic authentication for Microsoft 365 tenants, making certificate-based authentication mandatory.

(September 2022) and the deprecation of Remote PowerShell (RPS) Protocol (December 2022). Today, we are announcing that starting April 1, 2023, we will start blocking RPS connections for all tenants c...

your Exchange Online audit logs. Starting from April 30, 2024, we will be deprecating the following four cmdlets in the Exchange Online V3 module:

can cause (image) damage to an organization. The PowerShell script DomainHealthChecker.ps1 checks the SPF, DKIM and DMARC record of one or more email domains and gives advice if necessary.

configure the Junk Mail Settings for this shared mailbox in Outlook itself.

post I will show how to track messages with PowerShell.

tenants. They even started to disable it last year for tenants that had not used it. It's a good thing they are taking this step to make our tenants more secure. The big questions though is,

script to perform a fully automated unattended setup of Exchange Server 2013, Exchange Server 2016 or Exchange Server 2019 (Desktop and Core) is supported).

organization-wide coordination without requiring additional licenses. However, it's crucial to get shared mailbox size reports in Microsoft 365 to tackle potential storage issues. Tracking shared mailbox usage, including the total size aids in capacity planning and enables organizations to maintain a responsive email environment.

faster and better method of managing Exchange Online via PowerShell - It just has some downsides right now for most Microsoft Partners.

ability to send emails as a "generic user" or shared mailbox helps us hide behind a proxy when needed.

Unauthenticated email has become difficult to pass in many mail systems. You don't want to miss an important email notification because you relied on outdated PowerShell cmdlets. The built-in cmdlet Send-MailMessage no longer covers sending email securely.

we will look at how to get a list of calendar events or remove...

group. Yes, the new UI in the AAD portal helps, but doesn't provide all the information. On the other side there are a ton of PowerShell modules e.g.: MSOL, AzureAD or AzureADPreview.

The default behavior is the following:

about disposition review items in either a pending or disposed state. It's possible that you don't care very much about records management, retention labels, or disposition processing, but if you do, you'll be glad that the new cmdlet exists.

use with Exchange Online PowerShell V2. This feature provides customers the ability to run non-interactive scripts using Modern Authentication. This feature requires version 2.0.3-Preview or later of the EXO PowerShell V2 module, available via PowerShellGallery.

user, and if the OST size is nearing it's maximum size, as a bonus I'm also giving you the option of alerting on active PST files. The offline mode is just a handy gizmo to notify users that they might've misclicked - It still happens to our users from time to time.

approach it? Then this is the book for you. Created by two experienced Microsoft Exchange (now Office and Apps) MVPs just for you.

methods.

rooms are used, which is why we have the room mailbox report script. In the second version of the script, we include code to figure out the daily usage pattern of individual rooms and for all rooms across the organization. The graphics in our bar chart are crude, but the chart is generated with a few lines of PowerShell, so feel free to improve the script.

critical to ensure those services are up and running. In the event that some services are not running, it's always good to know how to restart Exchange services with Powershell.

up. In this blog post, I'll show you how to do this.

365 mailbox using the Get-EXORecipient. Understanding Exchange Recipient Type Details When managing an Exchange environment, understanding the different types of recipients is crucial for effective administration. Exchange Online supports a variety of recipient types, each serving different purposes...

that matches the parameter..." Strange error because the parameter is there... Or is it? In this blog post, I will show you how Get-ManagementRole works in Exchange and how it can help you with issues like this.

365. There are potentially numerous mailboxes that aren't used and those won't be migrated to Office 365 because there's no sense in paying for licensing for them. How do you determine what mailboxes are in use?

permission for the default user to allow everyone in an organization to see each other's calendars. But you can use cmdlets from the Microsoft Graph PowerShell SDK too. The Graph SDK cmdlets are faster, but not enough to warrant replacing the Exchange cmdlet in scripts. We explain why here.

Dive Workshop starting August 20th. Come hang out with them, learn something new, and get your questions answered!

series is designed to get you ramped up and using PowerShell quickly. Learn how to use PowerShell quickly via your preferred format. If you prefer reading based training, a blog post is available for each PowerShell topic. If you prefer video format, there is a corresponding training video for each PowerShell lesson.

expirience. Provide or receive guidance on different Powershell topics. PSAtlas is a community driven, interactive knowledgebase of PowerShell.

you go from blinking cursor to knowing how to use PowerShell well enough to get your day jobs done!

basic architecture, how to write configurations, and how to author your own DSC resources.

goodness is now in it along with a ton of reorganization and editing! Enjoy! Free update to existing buyers.

topics that's designed to be like a conference in a book. This book not only delivers top-notch content that rivals any book on the market, but all royalties are donated to the OnRamp scholarship program which bootstraps others into the industry....

write PowerShell script, What are the advantages of using Windows PowerShell? And also this tutorial contains 51 top useful PowerShell examples with scripts.

@AzureAdvocates and puzzle solvers all over the world for #25DaysOfServerless adventures! We'll publish one Serverless coding challenge a day, for 25 days. Solve it in the programming language of your choice and submit your solution via GitHub. We'll showcase the best solutions every week and possibly in a final series recap!

Windows versions. Updating lists everywhere was a pain. PowerShell flavored Azure Functions to the rescue! Now I just have to update it once, and it's available everywhere.

mean, you can back up SQL server or NoSQL databases, and you can back up storage blobs and Azure files, so why not table storage? Microsoft do not provide any native backup solution for Azure table storage

combo has been my go-to solution for many automation tasks.

out and share your feedback!

PowerShell and PowerShell Core.

can connect to a storage queue and CosmosDB. For this post, we will see how you can use PowerShell in Durable functions. This functionality has been in public preview since August 2020. While some documentation is available, I want to focus on a practical example. This will be a bit of a step-by-step guide on how you can create your own Azure PowerShell Durable functions.

and testing to deploy a Function to Azure and even an Account storage queue-triggered Function that creates a Resource Group and Storage account from a queue message.

with a couple of in-depth posts on getting started and lessons learned.

production scenarios using the latest version of PowerShell.

how to create HTTP triggered functions written in PowerShell!

operate in; making a Discord bot is hardT. I've made some scripts for my own usage that integrate with Discord bots, but they've always been for my own use only.

how to cloudify your PowerShell scripts with Azure Functions!

credentials in code or configuration files. Thus, protecting sensitive information like connection strings, API keys, or passwords is crucial. This is where Azure Key Vault comes in, offering secure and centralized storage for all your secrets. In this article, I will explain how to retrieve secrets from the Key Vault within an Azure Function using PowerShell.

PowerShell Function App and trigger from Kudu and Logic Apps. The things he shows here are a great primer for multiple different scenarios, even if you aren?t using Kudu.

have written an extensive blog post about this subject before, which I encourage you to read if you have never created this connection before. I want to focus on how you can create a secure GitHub webhook to trigger an Azure PowerShell Function. We will make use of a secret that we will store in Azure Key vault.

service, including Microsoft. With Microsoft's Azure Functions, you can create function apps that support many languages, including Azure PowerShell.

exposure to anything other than Windows but I live on the command line most of the time and 'mac' -eq 'linux' anyway right?

PowerShell's Invoke-RestMethod cmdlet.

14,000 tickets a second, georedundant across 8 azure regions, cost $8 to run last month

learn more about this capability on the Hybrid Connections documentation. The following information describes how to use this capability to run PowerShell functions targeting an on-premises server. This server can then be used to manage all resources within the on-premises environment from an Azure PowerShell function.

workload grows, you may need to consider movingContinue Reading8 Min. Read

workload grows, you may need to consider movingContinue Reading9 Min. Read

I'd just detail a little bit real quick for you

workflows, now supports PowerShell. Common scenarios made possible by Durable Functions include orchestrating the management of complex Azure Resource deployments involving sequential and parallel steps. Long-running workflows are supported, and Durable Functions provides built-in HTTP endpoints for monitoring their progress.

Functions: Two new backend storage providers, and the General Availability of Durable Functions for PowerShell. In this post, we'll go into more details about the new capabilities that Durable Functions brings to PowerShell developers.

possible for you to automate operational tasks and take advantage of the native Azure integration to deliver and maintain services.

Eamon O'Reilly, who's leading the efforts at Microsoft for serverless automation, shows you how to get started.

Eamon O'Reilly, who's leading the efforts at Microsoft for serverless automation, shows you how to get started.

specialists get small digestible bites about new technologies, complex scripts, and solutions you could be implementing in your MSP today. I'm fairly anti-tool culture where MSPs get a different tool for each minor inconvenience and focus just on that tool, so I'll be focussed on modern technologies in the Microsoft stack, but also will cover other external tools if they make a big enough difference.

and PowerShell together. Next, I will show you how to deploy a PowerShell based Function.

They're easy to build and allow you get started without needing a degree in programming.... Our speaker, Jeremy Brown, will walk through the basics of serverless apps, build a simple app AND put it online in 45 minutes!

Azure/azure-functions-powershell-worker development by creating an account on GitHub.

announced that everyone can use them for free. Everyone...

serverless, validate HTTP parameters, throw descriptive errors, and bind PowerShell output to HTTP responses for robust web-friendly functions.

collection of CMDLets available to perform SCCM administration tasks.

more difficult for users to add printers to their workstation, this blogpost describes how you can add printers using Endpoint Manager and PowerShell in a easy way.

Manager 1902, complete with the actual scripts.

error handling, prompts for input, and more. You will be able to use these scripts to provision your Entra ID joined Cloud PCs for various scenarios, be it using a Microsoft Hosted network or an Azure Network Connection, Enterprise or Frontline builds, or choosing your Cloud PC image, language, or region etc.

like 0x87D00664 or -2016410012. If use the error lookup feature in CMTrace, you can generally convert the error to plain text. In the ConfigMgr console, if you are looking at deployment statuses or even SSRS reports, you will see the plain text listed, but that data doesn't exist in the database.

If you have many drivers added, it's way quicker to do that in PowerShell compared to comparing drivers in the boot image drivers tab.

only the Save-CMSoftwareUpdate changes has been documented, but I have found a few more changes when poking around in the 2403 PowerShell module. Here is a list of the Configuration Manager (SCCM) PowerShell module changes in version 2403.

tired of my team having to look up the DISM command line (no PowerShell equiv), so I thought I would write a new function to add to the OSD Module

probably discovered that, whilst it works fine in PowerShell 5, it doesn't work at all in PowerShell Core (5/6/7+). That's because the WinRT assemblies are not included in PowerShell Core - WinRT is an exclusively Windows thing

PowerShell?

interested in (timestamp, log data, etc.). Once we've separated the important bits, we can do whatever we'd like with that data. In this case, let's dive in on how we can write those logs to the Event Log for later forensic investigation.

just about everything.

care of downloading, packaging, distributing and deploying the applications described in XML “recipe” files. The goal is to be able to package any frequently updating application with little to no work after creating the recipes.

SCCM client health.

screen screenshot tat can be used both on Windows and on Windows PE.

I've updated it a bit, and I'm reposting and uploading the Task Sequence. There are no packages associated with it, all content it needs ... Read more

Cody wrote a function to do it! Just need to trigger the WMI Method.

modules? Transitioning to MS Graph PowerShell can be daunting, especially when searching for equivalent cmdlets. But fret not! I've curated a collection of essential PowerShell scripts tailored to manage your Microsoft 365 environment, all powered...

from queries than is available. In this article, we explain how to use pagination to retrieve data using Graph queries and SDK cmdlets.

Entra using the Developer Tools in your browser. The purpose of this walkthrough is to demonstrate how you can identify and extract the necessary Microsoft Graph API calls directly from the Entra portal, providing a foundation for automating this process with PowerShell.

work phones. Currently, they are sending a .vcf file and then having the employees manually save the contacts. While this works, the problem is if you need to send a new contact, you now need to send a new .vcf file to every employee and instruct them on how to save it. Similarly, if you ever need to remove a contact, you need to instruct your employees to manually delete that contact.

great to see some features finally become available via the command line interface .aka. PowerShell. Today we'll cover step by step on how.

at MMSMOA. It is also the latest post in my series on automating endpoint management tasks with Microsoft Graph and the MEMCM AdminService.

Microsoft Graph PowerShell and to start things out right we will first cover the How on connecting to Microsoft Graph PowerShell. Then over the coming weeks we will cover permissions, cmdlet discovery as well as some common...

properties shown by the Microsoft 365 user profile card. Previously this was possible using a Graph API request to the beta endpoint. Now everything is in production and Graph SDK cmdlets are available to make customization a tad easier.

API, which is a "new" kid on the block. For some time, I've used Microsoft Graph exclusively to send emails in favor of SMTP as it's much easier to manage and generally works over HTTPS.

registered apps is becoming the default for new apps. In this article, we describe how to update the app instance property lock to reflect the new default setting using cmdlets from the Microsoft Graph PowerShell SDK, including a script you can download and run.

Graph for Teams. Finally, I solved my mistakes and reran the hand to see if the report would be complete this time. Surprisingly, it gave me an error I'd never seen before. "Function cannot be created because function capacity 4096 has been exceeded for this scope". The error is at least weird because it's shown on a production server where I've just a handful of PowerShell modules installed, and I've never seen it on my development machine where I've over 200 modules.

Microsoft Graph API within a specified date range.

Microsoft cloud services. This enterprise identity system gives you accessContinue Reading10 Min. Read

2016 (not all the time). Some recent Graph hiccups meant that I had to apply some fixes and workarounds. At the same time, some users hit the infamous 'not recognized as a valid datetime' problem, so another update was needed. All good, clean fun.

review the help for a cmdlet either with Get-Help or checking on Microsoft's Learn pages. Sometimes I see things that trigger my curiosity and this has happened recently when I was reviewing cmdlets for one of Microsoft Graph's...

Graph PowerShell SDK. This led to some oddities in results when the number of audit events found by a search didn't match those reported by the Purview compliance portal. It all worked out in the end. In other news, the Set-MgRequestContext helped sort out some retry problems.

they realized that it would take time for administrators to become accustomed to PowerShell. Sensibly, Microsoft included a cmdlet logging facility in the Exchange Management Console (EMC) to allow administrators to see the PowerShell code used to execute different actions, such as creating a new mailbox.

using PowerShell.

will fully be decommissioned on June 30, 2022.

article describes why some common Graph API errors occur in scripts and what to do when the errors happen. Most errors are due to permissions assigned to the Azure AD apps used to run scripts and getting the basics will resolve those problems.

migration to Conditional Access.

accounts from Active Directory to Entra ID. The current advice is to use a cmdlet from the depreciated MSOL module to update settings. This article explains how to do the job with the Graph APIs, including cmdlets from the Entra PowerShell module.

large sets of user accounts. In this article, we discuss how to use Microsoft Graph PowerShell SDK cmdlets to manage group-based license assignments in a Microsoft 365 tenant. Assigning licenses to groups is very much like direct assignments, but some differences exist.

Graph PowerShell SDK. The question is whether the claimed benefits are more theoretical than actual. It's hard to say because it all depends on how someone uses the SDK for development or to run scripts. Anyway, it's a topic worth discussing.

Credentials and Certificate based authentication. Also with Delegated Permissions and Device Code flow authentication. The one I haven't written a post on is performing interactive authentication to Microsoft Graph using MSAL with PowerShell and Delegated Permissions. I have for Python so this post will complete the examples for both Python and PowerShell.

the commands and permissions needed to automate processes with Microsoft Graph PowerShell.

now and Microsoft is moving more management functions (such as License Management for Azure AD Accounts) to the platform. When Microsoft transitions a function to the Graph, organizations might have to update PowerShell scripts.

groups through the Graph. Be on the look out for the next part of this series!

MS Graph is key when it comes to automation of our tasks and activities, work smarter not harder!

such as Microsoft Endpoint Manager. As Microsoft sums it up, it's the gateway to data and intelligence in Microsoft 365.

Graph PowerShell as well as some of the requirements that go along with the connection. This week we will review how to find cmdlet for Graph to help start to break down what is available in this module as well...

He discusses how it works and how to interact with it to access the myriad of services in the Microsoft 365 Cloud.

He discusses how it works and how to interact with it to access the myriad of services in the Microsoft 365 Cloud.

effortlessly, enhancing your API skills quickly and efficiently.

PowerShell SDK, some inconsistencies await unwary developers. The SDK doesn't like $Null, doesn't support pipelining, insists on specific property casing at times, sometimes accepts user principal names and sometimes doesn't, and sticks valuable data in hash tables hiding in a property you might know nothing about. Good as it is to have the SDK cmdlets, they need to be treated with care as you transition from the old Azure AD and MSOL modules.

using the Microsoft Graph REST API, you would have to iterate through Entra ID sign-in logs. With new recent additions to the Microsoft Graph API Beta Endpoint, you can now return the UTC value just by parsing the user details and properties. The Microsoft documentation regarding the signInActivity resource type can be found here.

set of supported languages for code snippets.

have a corrupt token cache.

powerful but isn't very PowerShell friendly.

horrible job of announcing the news, but now that the SDK V2 is available, it's time to migrate scripts from earlier versions. Splitting the V1.0 and beta cmdlets into different modules is a big difference, as is renaming the beta cmdlets. But other points exist to consider as you migrate from the Microsoft Graph PowerShell SDK V1 to V2.

cmdlets seems to be altered with a Get-Help cmdlet for some unknown reason. This week we will cover yet another odd issue with the Graph PowerShell module and it is a thorn in my side whenever I see mistakes like...

AzureADPreview and MSOnline predecessors retire soon.

Microsoft changed cmdlet names. In another, it's an identity issue caused by incompatible assemblies. In both cases, questions have to be asked about the level of testing done by Microsoft before they release a new module. Bugs do happen, but testing should catch the obvious problems.

permissions are needed for that connection as it could determine which cmdlets we are able to run as well as what access is granted to manage objects with Graph PowerShell. Microsoft does provide a hand pair of cmdlets for determining cmdlets to...

specific actions in the Azure / Entra ID portal in the past. But you can also use it for Intune 🙂 In this blog post, I will show you how this works.

Christian dives into his journey to becoming an MVP, his insights on Microsoft Graph, and the impact it's having in the PowerShell community. We also explore the growing PowerShell community in Germany and get an exciting preview of the upcoming PowerShell Saturday event. Whether you're a PowerShell novice or a seasoned pro, this episode has something for everyone

(represented) and appRoleAssignments (within).

and cmdlets that require different permissions. In this blog post, I will show you how to query the permissions for a cmdlet, multiple cmdlets, or all cmdlets from a specific Microsoft Graph module.

Send-MailMessage cmdlet. Its major drawback is that it can only use Basic SMTP authentication and...

administrative tasks within Microsoft 365. Among the recent factors causing me to consider using Graph APIs with PowerShell are:

known. But it's much harder when the underlying foundation contributes to the craziness as described in this article. Graph pagination works in a specific way and Microsoft tunes the Graph to deliver great performance by reducing the set of properties returned for objects. Both can cause concern for developers.

known. But it's much harder when the underlying foundation contributes to the craziness as described in this article. Graph pagination works in a specific way and Microsoft tunes the Graph to deliver great performance by reducing the set of properties returned for objects. Both can cause concern for developers.

Graph APIs. This article looks at how to use the Send-MgUserMail cmdlet and compares it to the Send-MgUserMessage cmdlet (covered in depth in a previous article). Our conclusion is that you'll probably end up using Send-MgUserMail because it's easier to use.

group. Using the graph API documentation sent me on a wild goose chase so just wanted to write a small writeup if someone else ran into the same problem.

this article, we do the same with cmdlets from the Microsoft Graph PowerShell SDK. The results achieved with the Graph SDK aren't as good as those gained with PnP.PowerShell. Some of the SDK cmdlets don't function as expected and the resulting list is not as functional as the one generated by PnP. Oh well...

management PowerShell module, in that article, I also explained how to use Graph API queries in a PowerShell script executed in a runbook.

PowerShell SDK. However, a serious bug in V2.14 means that this (and perhaps V2.13.1) should be avoided until Microsoft fixes a problem that causes spurious output to be included when cmdlets like Get-MgUser and Get-MgGroup are run.

has been many months in the making. Actually, if I'll be perfectly honest... it's truly been a lifetime in the making.

Kazakh Ministry of Health Care, leading us to believe it targets Kazakhstan.

build on. It's not about doing wonderful things, it's about basics.

undesired effects, including remote code execution. We will also see that widely used solutions, like PowerShell Remoting and PowerShell Direct (Hyper-V), rely on such deserialization and could make you vulnerable to this kind of attack.

(2022-09-13) A quick post - I just published a new script for retrieving activity log events for an Azure subscription as the current options for searching and retrieving events didn't satisfy me.

that's considered the crown jewels. This is due to Active Directory still being the bread and butter for most organizations in regard to authentication and authorization. When it comes to security, automation is your best friend and keeping a close eye on privileged group membership should be on top of your list. This post will walk you through, how you can make sure no unwelcome objects make their way into privileged groups in on-premises AD, by leveraging Microsoft Sentinel and its option to run playbooks automated. This breaks down to Microsoft Sentinel generating an alert, which triggers the associated Playbook, which triggers a Logic app, which triggers a Runbook in an Automation Account, which ultimately runs a PowerShell script on an on-premises server.

Task Scheduler to run my Powershell scripts.

leverages the SSLabs API to test websites from the command line. Clem walks through why he is using the various settings that he added to his script. This is an excellent example of how API's can be leveraged to automate a task and query for certain suspect security settings.

kind of strange of relying on a third party closed service to generate and send passwords to clients. You're not 100% in control and often it misses some form of functionality like a password generator or somesuch.

deploy the Secure Defaults centrally, so I figured I would try to help with this.

course just one part of the new beta Secure Score module. The next one is actually the more fun part; applying the correct security settings to a tenant.

may be used by legitimate programs as well as malware to achieve persistence

Allows managing and monitoring the security posture of your resources.

conduct basic enumeration for the windows system. The machine is part of tryhackme room: hacking with powershell

and introduced port scanning and pattern matching. This video is part of TryHackMe OSCP Pathway - room: Hacking with Powershell.

security-related functions and serves as a secure root of trust for a computing system. It is a microcontroller that is integrated into a computer's motherboard or added as a discrete component.

what's changed and started browsing and comparing the various settings via the admin portal. Then I realized how that's not very optimal, and began looking for alternatives. I eventually got myself into trying something new, and went on to compare the Security Baselines Profiles using Powershell and the Microsoft Graph. The result of that journey is this post.

the reduction of the attack surface, which hardens applications such as Office, browsers, and Adobe Reader. The feature is not active by default and can be configured via group policies or PowerShell.

the protocols that facilitates this exchange is the Server Message Block (SMB), used predominantly in Windows environments. While SMB offers convenient file and printer sharing capabilities, it's essential to delve into one of its potential security pitfalls - unencrypted SMB [...]

keep these steps up to date but the module is still under development so the steps required to get set up could change at any time.

worry about the deep distracted deep reading needed in a slew of other CVE and parse relevant details to only their versions.

lists of passwords and then uploaded the code to Reddit. I received a lot of great critique on the code and even got some bugs pointed out. I decided to make it a challenge for myself and see if I could use the input from the good Reddit people and make the code better.

collection sensitive authentication information from individuals or systems. The goal of credential harvesting is to obtain usernames, passwords, or other authentication tokens that allow access to protected resources. This post will cover a variety of different credential harvesting techniques, how to leverage those techniques using SpecterInsight, and how to view the data in Kibana.

Administrators group on their Intune devices, and... That's where Custom Compliance policies come in 🙂 In this blog post, I will show you how to automatically check the Administrators group and mark the device as non-compliant if needed.

practical example:

Temporary Access Password and TAP is actually pretty cool, especially for MSPs deploying loads of devices. The TAP is a generated password th at has a maximum amount of uses...

prompting the user for logon credentials at boot time. Windows retrieves login account information from the registry, specifically three registry values: DefaultPassword,DefaultUserName,sDefaultDomainName. Anyone who has physical access to the computer can access the computer's contents, programs, and files, as well

access tools that are installed on a computer, and list the possible access URLs; that way he could easily document which access methods are open and audit them once in a while to see if he...

lot more questions about documenting Secure Score with the Secure Application model.

Server 2008. Like other Microsoft products, it also suffers from certain glitches, but many people around the globe rely on BitLocker Drive Encryption (BDE) to protect their data at rest.

by effectively creating a copy of them - that's what happens when you create a rule from a template.

Sign-in allows you to sign in using your M365 credentials and multifactor authentication token, or using a Azure AD Temporary Access Pass. Web-Sign in is pretty cool as users get presented with a modern authentication pop-up dialog when signing in, the same one they are used to seeing when logging into the Office suite applications.

boredom. Four months have passed, and I decided to share it with the world, as it may be helpful to some of you. Today I would like to introduce you to PSPGP - PowerShell module that provides PGP functionality in PowerShell.

information such as passwords with PowerShell. It is specifically for the encryption in transit and encryption at rest scenarios, where, for example, you may be sending data to a backend service and securely storing it in that service.

takes any text and encrypts it automatically, no password needed. Instead of a password, it uses either your user account and machine, or just your machine as a secret.

you can safely encrypt text on a machine. Now let's take a look at the decrypting part.

actors to exploit. As a result, it is crucial for organizations to start Enhancing PowerShell Telemetry to detect and respond to potential threats if they have not already done so. By utilizing PowerShell telemetry tools and log sources, organizations can enhance their

you are all set by then. Make sure to go through all your accounts, especially those old ones that you rarely ever touch, and see if you still need it or what is the best way

EntraFIDOFinder before the end of the year. Here are the main additions. New Features: I did some other cleanup and prepping for some future updates, but what do you think? Any other features we should add? Are [...]

of 4 blog posts is meant to supplement the talk and provide additional technical details. In this article, part 3 of the series, I describe a chain of 3 vulnerabilities that led to remote code exec

Hammond. Recorded in person in Utah, we delve into John's unique insights on PowerShell and its role in cybersecurity. John shares his experiences with PowerShell attacks, discussing how it's used in various malware and the importance of implementing security features like constrained language mode and script block logging. He highlights practical tips for making PowerShell environments more secure and emphasizes the need for continuous learning and experimenting within safe environments. We also explore how to transition into security-focused roles, with John providing valuable advice for those looking to combine their PowerShell skills with a career in cybersecurity.

collaboration in Office 365. While allowing collaboration with external users can enhance productivity, it also introduces security risks.

specific recommendations which may not be relevant to you. By navigating to the ASC's default initiative in the Azure Policy blade, you can disable a recommendation:

could have a very bad day. Recently, we uncovered one artifact that we would like to break down and showcase. We will get "into the wee ds" here and really deep-dive on the technical details, so put on your ear protection and let's walk down range...

coding aspects.

so it will be a matter of calling one PowerShell function

execution of specific PowerShell commands. If you are just looking for one specific command, you can run query as shown below. But if you are looking for several functions, then there is going to be a lot of manual editing, and so the idea was born to use PowerShell to help me generate an advanced hunting query.

one of the most common occurrences happens to be that users somehow don't get their tokens setup completely, and need to retrieve these again.

out, the 1E PowerShell module exists called the PSTachyonToolkit that lets you leverage the power of Tachyon PowerShell!

actor who has targeted at least 69 entities.

created to simplify the hardening of Windows. Now, HardeningKitty supports guidelines from Microsoft, CIS Benchmarks, DoD STIG and BSI SiSyPHuS Win10. And of course my own hardening list.

tutorial is for you. In this tutorial, you're going to learn, step-by-step, how to configure VS code to connect over SSH via key exchange for both a user with sudo rights (homelab in this guide) and the built in root user.

interesting to provide to all users, who are already familiar with it, a method to export all keys, certs and secrets stored in it once via Powershell.

backdoor on a box we're investigating . The box does not have any extra installed software such as sysinternals its just a basic windows image . This has lead me to wondering if there is a good way to detect process injection such as DLL hijacking or PE injection with native commands . Links to any resources or scripts is greatly appreciated .

gsudo and take control of your system!

your organizations, you're in luck. Managing NTFS permissions using a GUI is time-consuming especially when working with many users or groups. Luckily, we have PowerShell to make it all better. How? The Microsoft.PowerShell.Security module.

discuss why organizations should care about malicious PowerShell activity, how attackers use PowerShell to steal credentials (e.g., Mimikatz), and how to prevent and detect malicious PowerShell activity.

discuss why organizations should care about malicious PowerShell activity, how attackers use PowerShell to steal credentials (e.g., Mimikatz), and how to prevent and detect malicious PowerShell activity.

permissions that hackers like to exploit. This article explains how to use PowerShell to detect apps with high-priority permissions and report them to administrators for review.

the MS Defender Powershell module and wrote a helper function to scan on-demand a file using mpcmd.exe.

to organizational networks. Singular purpose devices made available through the Internet of Things (IoT) offering has increased network complexity even further with the ease of adding said devices to the network and sometimes without the knowledge of a system administrator. Hence the following received question: "How do I ensure all the appropriate ports are closed with all these devices being added to my network?"

Anti-Virus runtime solution installed is working as expected.

offers you more features and options than every other desktop operating system. Microsoft also provides users a free antivirus tool known as Microsoft Defender Antivirus.

file contents have not been modified. Administrators commonly use MD5/SHA256 checksum verification for downloaded OS distros...

additional files the malware has introduced to the system.

PowerShell-based incident response framework called Kansa. Kansa uses PowerShell Remoting to run user contributed modules across hosts in an enterprise to collect data for use during incident response, breach hunts, or for building an environmental baseline. This framework can be run across a single host, or even tens of thousands of hosts.

throughout.

Backdoors. This was part of TryHackMe Investigating Windows 2.0 lab.

novel PowerShell-based implant called PowerLess Backdoor, according to new research published by Cybereason.

vulnerability as it freezes some models of hard drives on older computers. [...]

changes associated with CVE-2023-24932 - Microsoft Support TLDR: GitHub: garytown/ConfigMgr/Baselines/CVE-2023-24932 Disclaimer: Before continuing, I've created all of this in a very short time with VERY LITTLE testing, so please, as with anything you're pulling from the internet, inspect and test before using

in KeePass, perhaps to run a script, 2) inject a password stored in KeePass into that PowerShell.exe process as a variable, such as for a secure string or a PSCredential object, but 3) you cannot expose the password as a command-line argument or other plaintext channel when launching PowerShell.exe because it could be logged or captured. This article will show you how to do it.

session with customers that highlighted a problem.  If any of us change the local admin password of the servers or redeploys the environment with a password of their own.  We no longer can access it without contacting the group and request the new password....

wherever they may be

started popping up. Errors that didn't really point to a security problem.

attackers to bypass Windows Defender Application Control (WDAC) enforcements and gain access to plain text credentials.

options available to manage, protect and monitor endpoints. I was not surprised a few months ago when I needed to implement a monitoring check for Nagios that there was a dedicated PowerShell module that did exactly what I needed.

actors to perform typosquatting attacks, spoof popular packages and potentially lay the ground for massive supply chain attacks.

and Teams, providing comprehensive data governance, compliance, and protection capabilities across these platforms. One of the standout components of this suite is the Audit Search Graph API, which is currently in public preview. It allows developers and administrators retrieve detailed audit logs programmatically, providing deep insights into user activities across Microsoft services. In this blog, I will explore the full potential of the Microsoft Purview Audit Search Graph API and demonstrate how to use the API through both PowerShell and HTTP methods.

shows how it's now detected. IEX now appears to have a new Fully Qualified Error ID.

this script we're trying to get all the files that could suffer from the Log4J issue in CVE-2021-44228.

pain points in our current stack is the monitoring of anti-virus, we often felt like there is not enough transparency and data returned via our RMM system. Either the system does not return the current state of alerts or forces us to use separate portals.

Access Management tool that will be living in your Azure environment, mostly designed for MSPs. If you want to see how AzPam looks or contribute, check out the Github page about it here. I should be pretty close to releasing an alpha version soon!

should always assume breach. The attack will come and it can strike from any direction - the Internet, on-prem, BYOD, etc. The first thing an organisation experiences after the fact is often confusion, fear, and panic. Not the best mix of feelings to have while trying to sort things out! Most organisations don't have a clear plan of what to do next.

alongside JEA to setup secure functions for non privileged users or services like SQL jobs or scheduled tasks, which has to use alternate credentials.

advice, instead of just how to work around it. Definitely worth a read.

PowerShell campaign that employs several advanced techniques to infiltrate networks, maintain persistence, and enable covert communications.

someone can get access to your systems. We talked about how he started his journey into ethical hacking, and the support he got when he submitted for hak5.

recommending system administrators to use PowerShell to prevent and detect malicious activity on Windows machines.

Director for a Managed Services Provider (MSP). From exploring the pitfalls of NTLM and discussing alternatives to learning the ins and outs of Jupyter and .NET interactive notebooks, we cover it all. We also compare major cloud providers and uncover untapped security features in Office 365 that you could be leveraging right now. Join us for an insightful conversation packed with valuable information and actionable advice for IT professionals navigating the ever-changing landscape of the industry.

different places that this damn protocol needs to be killed depending on the OS. It's still a work in progress (needs testing and error handling) but in case it's useful feel free to use it

manipulating them into executing a malicious PowerShell script.

created the module because I wanted to be able to:

GUID (AAGUID) during registration. An AAGUID is a 128-bit identifier indicating the key type, such as the make and model. Passkey providers on desktop and mobile devices are also expected to provide an AAGUID during registration.

always feels like a weak link in the security chain. I love running code as multiple accounts (my team probably has 75+ AD accounts we own), but hate everything else we have to do with those accounts.

and generates nicely viewable reports in HTML format by highlighting the spots that require attention. The script manipulates user data using facts collected with benchmark values.

tenant. The flexibility of Conditional Access means it can fit most organizational and security requirements easily. However, as with most things in technology, with flexibility there often comes complexity.

erase all the secrets, keys, and certificates in it.

product, and more.

configured on Active Directory domains.

automation? Isn't PowerShell just another command shell? No! Attend this talk by SANS Faculty Fellow Jason Fossen to see what PowerShell really is, how it's being used (and abused) today, and future trends.

an exciting announcement of PowerShelldle, a community tip, and a deep dive into my own PowerShell journey in response to a viewer question. The main segment is a fascinating conversation with Spencer Alessi, where we delve into the world of PowerShell and pentesting. Spencer generously shares the tools he would use as a sysadmin pentesting his own environment, including PowerSploit, PingCastle, Bloodhound, LockSmith, and ADeleg. He provides invaluable tips for PowerShell enthusiasts looking to transition into security and pentesting, shedding light on the current and emerging trends in the security landscape. Spencer also gives us insights into the role that PowerShell plays in his role as a pentester. Get ready for a riveting episode filled with tips, tools, and trends in the world of PowerShell and security.

when authenticating to an SFTP server.

security! Whether you're a red or blue teamer, you'll gain a deep understanding of PowerShell's security capabilities and how to use them.

PowerShell loads configuration files and runs scripts. This feature helps prevent the execution of malicious scripts.

our esteemed guest, Fred Weinmann. We explore the strengths and weaknesses of VS Code and the ISE, as well as discuss crucial topics like script block logging, Windows Event Forwarding, and the importance of code signing. Fred also gives us a sneak peek of his PSConfEU topics, highlighting JEA and parameter binding while providing valuable insights on the dos and don'ts of PS Remoting. Security aficionados won't want to miss our discussion on the biggest threats to PowerShell security and PowerShell profiles. Lastly, we catch up with Fred on his latest projects and developments in the PowerShell world. Don't miss this opportunity to learn and laugh with us!

line and terminal in Linux. They now seem to understand the strengths and advantages of the command line, and as a response, introduced the Windows PowerShell.

behavior is the same for the PowerShell attack. The following post focuses on PowerShell obfuscation and how to monitor with Microsoft Sentinel.

simply search copy and paste secret. The problem with navigating a GUI every day is that it's time consuming, and there's room for improvement, especially if you enjoy delving into some PowerShell and/or always have a terminal open.

to develop a password generator which outputs an account name and the corresponding password and stores it in the clipboard.

your IT Org has N different resource groups where you want to activate every day. It would be time consuming to activate them one by one. Instead, you can build a custom app using PowerShell or UI so that you can activate to all of these resource groups in one shot.

changes associated with CVE-2023-24932 - Microsoft Support Related: Words of Warning Once you've applied the mitigations outlined in the KB, the device is difficult to work with when it comes to boot media / reimaging.

Basic commands Scipts (Ping-Play, Enumeration, Silent Installer) and more

PowerShell. I already wrote a couple of posts about it. First Look into the beta module 1-Introduction 2-Installation and first steps 3-Use secrets in scripts Recently i tested a Macbooc Air M1 and wanted to use the secrets i had on my main Windows machine. The approac was to simply generate a CSV-file from the secrets and import it on the Mac. As a reminder, lets summarize what Secrets Managemt Architecture is about. Secrets are stored in Vaults Secrets may occur in the form

Constrained Mode? Microsoft explains this as follows: The ConstrainedLanguage mode permits all cmdlets and [...]

mind. Authored by a seven year Office 365 MVP, this book will provide you with practical advice on how to use PowerShell to manage the Security and Compliance Center.

effort it takes to manage and configure Windows. But much like the blue shell in Mario Kart, it can also wreak havoc when it's used as an attack mechanism. It has access to things like file systems, registries, certificate stores, and a whole host of other sensitive data.

Logging ETW providers

viewing the metadata of Kubernetes secrets.

for a while without enforced consistency of your Role Based Access Control, you might want to explore your existing RBAC assignments at scale or query the permissions for a specific user.

the way.

heard about the recommendation to disable the legacy protocol NetBIOS in Windows. If this is news to you, there's some interesting reading for you in this article: Adversary-in-the-Middle: LLMNR/NBT-NS Poisoning and SMB Relay, Sub-technique T1557.001 - Enterprise | MITRE ATT&CK NOTE: Before disabling anything, make sure you do your due diligence and monitor your environment for NetBIOS traffic, so you don't accidently break stuff!

PowerShell Gallery. Release 1.1.6 of the SailPoint IdentityNow PowerShell Module is the result of updates by Sean McGovern, Yannick Beot, David Minnelli and myself.

commands, script blocks, etc., that you have used. This can be very helpful if your computer or servers are hacked at your office. Or, if you just want to check things 😉 In this blog post, I will show you how to retrieve all those events locally and remotely and save those in an Excel sheet.

Enough Administration scenarios.

target critical organizations in Ukraine's military and security intelligence sectors, employing a refreshed toolset and new infection tactics.

PowerShell Gallery. Release 1.1.4 of the SailPoint IdentityNow PowerShell Module is the result of considerable effort by myself and Sean McGovern. Release 1.1.4's numerous updates comprise changes to cmdlets to account for changes to IdentityNow API authentication, four new cmdlets, cmdlet updates for API changes, bug-fixes and documentation updates..

spiffy new icon!

and SOAR (Security, Orchestration, Automation, and Response) product. Security is a constantly changing landscape, and Sabrina gives some tips on a successful test/deployment of Microsoft Sentinel to that you can get robots (AI) to help you think!

interconnected, safeguarding sensitive information such as API keys has never been more important. These keys grant access to valuable resources and services, making them targets for malicious actors if not adequately protected. Azure Key Vault offers a robust and secure solution for managing and storing API keys and other secrets. This article explores how you can leverage PowerShell Secrets Management with Azure Key Vault to ensure the security of your API keys.

up. We cover a lot of ground on security and PowerShell

and the cloud with David das Neves. From his beginnings as a developer to starting his own company, Shift Avenue, David shares the importance of addressing security misconfigurations, integrating security policies in the cloud, and the true meaning of DevOps. Additionally, we discuss tackling tech debt, embracing digital transformation, and David's commitment to sharing knowledge and fostering community growth. Join us for an inspiring chat packed with valuable insights.

security and harden PowerShell itself.

Graph API by PowerShell. But before doing this, I thought you should first need to know something about app registration in Azure Active Directory in this context. App registrations are really powerful, as you can raise any request if

then retrieve them from PowerShell.

running: Set-TlsConfiguration -EnableSecure -DisableInsecure Fortunately it IS that simple with the new PowerShell module TlsConfig

allows for passwords and secrets to be shared among users via Azure AD authentication and policies with the relatively inexpensive Azure Key Vault resource. While communications are always encrypted and stored securely when working with the Azure Key Vault, further security can be utilized to independantly encrypting the passwords before they are transmitted to Azure.

can exploit operating systems like Windows. Luckily, Windows logs OS security events to help you track down this behavior.

advance of Patch Tuesday; Sophos customers are protected

the interaction with the OS is done through the graphical interface although the underlying text-based interface still exists and is important to reach certain nooks and crannies that are not exposed graphically.

I open it in Windows Sandbox or use the urlscan.io website. In this blog post, I will show you how you can automate the check of a URL and see if it's safe or not 🙂

SharePoint Online site and Teams channel. At the time, I used a stored credential to authenticate and access SharePoint and Teams. Azure Key Vault offers another way to store secrets (bits of information) securely. This article explores how to store secrets in Azure Key Vault and retrieve and use the secrets in a runbook script and interactive PowerShell.

and tooltip for labels so that they appear in the language chosen by a user. Most people don't both because it's painfully slow to insert the translated strings for multiple languages. However, when you apply a mixture of PowerShell and the Microsoft Translator service, the task becomes so much easier.

PowerShell.

they are using too. I've updated it for the PowerShell version and the webversion. Enhancements I did notice that there is a difference for AAGUID 30b5035e-d297-4ff7-b00b-addc96ba6a98 where on Microsofts website it says it should be compatible

script. We dissect how each function of it works.

load and execute PowerShell commands within AutoIt scripts to evade detection. [...]

which will generate an output hash value in 256 bit. SHA-256 is designed by the National Security Agency (NSA). SHA-256 is one of the cryptographic hash functions. SHA-256 is also named one-way function where the generated hash value cannot be reversed theoretically. This makes SHA-256 very useful for password validation, challenge hash authentication, anti-tamper, digital signatures, X.509, SSL/TLS certificates etc.

years to reduce the attack surface on the Windows environment against viruses and spyware, and ransomware.

allows you to export security event logs to SQL Server Express, which Windows cleans from the system after a certain number of days. The tool enables you to create an offline Event Viewer for a specific computer.

focuses on enumerating different parts of a Windows machine to identify security weaknesses and point to components that need further hardening.

verify if the file, URL, domain name, or IP Address is trusted or not. Of course, it's not a silver bullet, but it brings tremendous value, and I often verify files I download before executing. Since I release a lot of new or updated PowerShell modules on a weekly/monthly basis, I thought it would be great to send newly released versions straight to Virus Total so I can have them checked before anyone executes them. I also hope to prevent false positives from some antivirus vendors that may tag my modules as malware because they haven't seen the DLL or PowerShell module in this form before. I've seen it happen to DBATools, so why not try and push my modules before users even use them?

need to secure that sensitive information! One way to do that is with the PowerShell SecretManagement module. Offering a convenient way for a user to store and retrieve secrets using PowerShell, the SecretManagement module also has the ability to interface with different back-end systems such as Azure KeyStore or KeePass too using an extension vault!

console-based GUIs. Today, it contains one very important cmdlet: Out-ConsoleGridView.

but in particular a new paradigm with which the form objects are specified; the article is not intended to be an exhaustive explanation of the product, for this please refer to the attached documentation.

PowerShell to automate GUIs. Since the UIAutomation assembly already comes with .Net it also can be accessed directly through PowerShell.

an interactive menu for users. We'll start with the basics of setting up a script, defining functions, and understanding how to handle user inputs in PowerShell.

PowerShell. For basic forms, we suggest using Universal Automation. For advanced forms, we suggest using Universal Dashboard.

PowerShell capabilities to my (Asset collection team) colleagues as there are endless possibilities what you can build using HTML + Powershell. After launching the html file in the chromium browser the webpage looks like below.

based service called POSH GUI available on poshgui.com. It writes the Winform code for you. In this video I'll explain what you need to know to develop your own UI with POSH GUI.

basic user attributes in Active Directory. Like anyone else, I presented the idea of using RSAT to let them modify users in ADUC or ADAC. This was not an ideal solution because ADUC can become overwhelming to someone that isn't technical. They wanted something that was extremely basic, easy to follow and work in without any guidance or instructions, and did not show the user anything else that they could not modify or needed to see.

automation you can use to with any form.

learn how to make your automations more flexible by accounting for things like hitting grid limits in Google Sheets.

interfaces? Sometimes command-line isn’t the best kind of interface for a particular instance. Building a PowerShell GUI for for your service desk is a great example. This is one of those times when it is more appropriate to build graphical tools instead.

methods of old in this updated how-to!

operations. But sometimes, you may want to make your scripts more user-friendly and interactive by adding a graphical user interface (GUI).

your most-used Powershell scripts.

action on the response.

Metro Design GUI.

massive amounts of UI code or using XML layouts. It is heavily inspired by ImGUI/DearPyGui to make it as easy as possible to use while keeping the configurability.

cmdlet coverage more and more, one cmdlet has always stood out as a top, cross-platform request. Today, we are excited to announce that?Out-GridView?is debuting on all Core-supported platforms through the?GraphicalTools Module.

PowerShell? We'll learn about Microsoft.PowerShell.ConsoleGuiTools and learn how to make use of the Out-ConsoleGridView command to get you started on your TUI journey.

since most of the actions it performs against devices are made in Powershell, I thought it might be the right place to promote it.

developers to produce web interfaces with a combination of Razor and PowerShell syntax.

interfaces between human and machine. Sometimes referred to as text-based user interfaces, they are starting to gain popularity again with projects like Terminal.Gui for .NET. In this guide, we take a deep dive into how to build TUIs with PowerShell and Terminal.Gui.

scripts.

library to provide the styling, such as MahApps Metro, or WPF UI. With the release of .Net 9, a Fluent theme is finally coming to WPF! There are still areas where 3rd party libraries will be ... Continue reading Using the Fluent Theme in WPF with PowerShell and .Net 9

Technically, it is the .NET Framework that provides for form handling, but with the latest Preview.2 of PowerShell 7, this is now possible!

list. To avoid creating SharePoint lists and manually adding different types of columns, I wrote a PowerShell script. While adding different types of columns to the SharePoint lists

organizational collaboration. However, with great connectivity comes great responsibility, particularly in safeguarding our digital ecosystem. Data breaches, excessive access rights, oversharing, etc., pose significant challenges in maintaining security in SharePoint Online. Recognizing that security is...

PowerShell. You can save time by doing it with PowerShell especially, if you want to create multiple sites as part of a backend process.

had to jump through many hoops and had an issue with running changes headless because the PowerShell modules didn't support it. Recently I've been in contact with the SharePoint team and we now have a functional API for most of the important admin settings.

with HTML table and CSV attachment. Features include:

briefly discussed how the Classic Mode for Custom Scripts has been affected by that change. The Custom Script setting in SharePoint and OneDrive has already been removed - the change took place in May 2024. There is a new PowerShell command (DelayDenyAddAndCustomizePagesEnforcement) that will allow administrators to delay any changes until November of this year. Additionally, the NoScriptSite setting will be configured to True for all existing sites except for specific site templates. How Will The Removal of Custom Script Settings Affect My Organization?

Pnp.PowerShell is now the best option as not much is happening in the official SharePoint Online management module or the tenant settings Graph API. the lack of progress is a pity, but perhaps it's also true that community-driven projects sometimes deliver better results.

developer extraordinaire, to explore the latest improvements to the PnP PowerShell module and how to get started with it. Gautam shares his unique perspective on automating SharePoint, working with Microsoft 365, and leveraging Microsoft Graph through PowerShell. We discuss practical use cases, best practices, and the significance of PnP PowerShell for modern IT and development workflows. From SharePoint tips to automation strategies, this episode is packed with insights for PowerShell enthusiasts and M365 developers alike. Whether you're just starting or looking for advanced techniques, Gautam provides actionable advice and plenty of inspiration!

tracking tasks to managing customer information and inventory. These lists not only streamline collaboration but also ensure that data is easily accessible and well-structured.

involve users from external organizations. External sharing in SharePoint Online and the ability to grant them access to our resources simplifies communication and bridges the collaboration gaps.

running the application, the client must create the specific SharePoint list on their site. So, I wrote a Power Shell script to create the SharePoint list along columns to avoid mistakes when creating it manually.

one below. This message asks the user permission to establish a new connection to the application. So, the user needs to connect to whatever connectors the app maker used for that application.

now possible with PowerShell Core!

best option for it. In this tutorial, I will explain how to rename multiple files using PowerShell. Rename Multiple Files Using PowerShell Recently, I was working on a project for a client in New York City.

date of a news page in SharePoint Online. This can be useful if you need to update the publish date of a news page to reflect changes in the content or to correct errors in the original publish date.

Except External Users and Anonymous links for OneDrive for Business. He had written a PowerShell script but had some errors.

examples of where the module can immediately add value for tenant administrators.

coverage has been administrative interfaces for SharePoint Online and Exchange Online. A small but valuable step in the right direction happened with the appearance of the settings resource type in the TenantAdmin namespace.

2024. The cmdlet is replaced by the Revoke-MgUserSignInSession cmdlet, which works across Microsoft 365 rather than just SharePoint Online. All of this happened while the 2nd annual PowerShell Script-Off happened at TEC 2024 and competitors struggled with what to do to secure a user account for an ex-employee.

PowerShell Gallery. List of new cmdlets included in the CSOM update.

You might be facing an issue right now when you are working with PnP PowerShell. Watch this video to know how you can resolve this and get going.

multi-tenant Entra ID app to a tenant-specific app. The change is scheduled for September 9, 2024, which doesn't leave a lot of time available for developers to review, update, and test PowerShell scripts based on PnP PowerShell. Some extra warning would have been nice.

Online sites. The Microsoft Graph PowerShell SDK includes cmdlets to work with Microsoft Lists and this article explains how to use the cmdlets to add new lists, add items to lists, retrieve data from lists, and remove items from lists.

worry, check out my blog post to learn how to reconnect your pages with PowerShell in a snap.

essential to enhance security effectively. As part of this, the multi-tenant PnP Management Shell Entra ID app was deleted on September 9, 2024, to improve application security. This change now requires admins to register their own...

file sharing and management across organizations. While it provides extensive capabilities, tracking file downloads is crucial for maintaining data security and compliance. This blog highlights the methods to audit file downloads in SharePoint Online. How to...

PowerShell SDK. While keeping digital debris online might have been unimportant in the past, it's something that can wreak havoc in the era of generative AI when tools like Copilot for Microsoft 365 are happy to consume obsolete and inaccurate material.

influence of Teams, most SharePoint Online external users are guest accounts, created when external people join the membership of Microsoft 365 Groups (teams). If the organization uses the SharePoint Online integration with Azure AD B2B collaboration, SharePoint also creates guest accounts when people share files or folders with external people.

licensing or workspace storage. MC678308 announces that Loop workspace storage will count against the tenant SharePoint Online storage quota. This article explains how to use the Get-SPOContainer cmdlet to fetch information about Loop workspaces and the storage they consume.

explain how to connect with SharePoint sites from Microsoft PowerShell. I will show you how to use the SharePoint Online management shell to connect with SharePoint Online sites and also how to work with SharePoint on-premises sites.

using Remove-AzureADUser as a replacement. It's a bad call because that cmdlet is part of a now-retired and soon to be deprecated module. Overall, recommendations like this make you think that Microsoft doesn't know what's happening across the whole of Microsoft 365. And you might be right.

removed when they are no longer needed. In this blog, Sean McAvinue explores how to combine relatively basic PowerShell and Azure Automation skills with Power Automate to create a clean, robust way to manage the lifecycle of SharePoint sites in your Microsoft 365 tenant.