DOWST.DEV

Office 365 audit reports will be helpful to identify security events, monitor user activities, track file sharing, investigate forensic events, etc. Most admins prefer PowerShell over [.]

thoughts? I was going to do every 2 weeks, but not sure if that is too quick. Big update as I'm s...

365AutomatedLab, but I'll be honest after Microsoft made the announcement of no more new Dev tenants it hurt a bit as I know how useful they are on learning and testing features and PowerShell without hurting your production environment.

manager when creating a new user. Also added a feature so that when you use the parameter -UseDevelope...

"deleted" SharePoint sites the recycle bin. The reason for it is you can't mass delete SharePoint sites from the GUI and sometimes you create SharePoint sites that aren't in your Excel workbook and this just makes it easier.

announcement that you can no longer create new Free 365 Dev Tenants. I'm really hoping they revert that decision, or make the Dev Tenant even better. I honestly don't think it's a money grab, but more for security. If it is toot easy to create a temp tenant it is a great tool for bad actors. I'll leave it at that for now, and will probably do a bigger blog post on it in the future.

for user accounts. V1.3 expands the amount of detail reported for each method, such as the phone number used for SMS challenges, or the email address used for SSPR. It's a small but important detail that's useful to administrators. However, it also comes with a potential privacy issue, so the script must handle that too.

customers start using these new cmdlets right away.

- managing multiple admins is no small feat. Microsoft 365 administrators hold significant responsibilities like getting users on board, handling passwords, overseeing various

and beautiful) and forget to add an alert to indicate when a license SKU is running low? I have not seen any feature within Office 365 that sends one a notification when a tenant license SKU is low.

PC's using PowerShell and Microsoft Graph. This mini series should help you get started with automating

PC's using PowerShell and Microsoft Graph. This mini series should help you get started with automatingContinue reading

course just one part of the new beta Secure Score module. The next one is actually the more fun part; applying the correct security settings to a tenant.

Extended Security License (ESU)Continue Reading

SDK. We didn't have one to hand, so we wrote a new script to illustrate the principles of how to process license assignments for a set of user accounts (which don't necessarily have to come from a CSV file). We even included some error handling!

in Office365. He found that when he went to the new Settings Pane for Modern Authentication he could change settings specifically to block older clients.

managed identity. The module has several parameters:

they advise us to migrate all the scripts to the MS Graph PowerShell. But finding the equivalent cmdlets and updating the scripts can be tough. Don't worry! Microsoft heard our struggle!

Code, just as you wish. Please start with the following steps to begin the deployment (the Hashtags are comments):

administrators; it is a critical task to do! While our primary concern is safeguarding our data with these policies, it's equally important

Microsoft 365 PowerShell and use ISV products instead. It's a silly position to argue. PowerShell is an important automation tool for administrators that can't be replaced by any ISV product. ISV products have their place and fill many gaps, but arguing to dump PowerShell and use ISV products instead just can't be justified.

created by applications in the directories of Office 365 tenants. The accounts are created through Azure B2B collaboration (by applications that generate invitations to join Office 365 Groups, like Teams and Planner) or SharePoint sharing invitations for documents or folders. It's one thing to invite people outside your tenant to collaborate; it's a horse of a different color to manage the resulting guest accounts.

document which mobile devices exist in a O365 tenant and put them into IT-Glue as configurations. I figured I'd help him real quick and blog about it.

lot more questions about documenting Secure Score with the Secure Application model.

can cause (image) damage to an organization. The PowerShell script DomainHealthChecker.ps1 checks the SPF, DKIM and DMARC record of one or more email domains and gives advice if necessary.

Skype for Business Online PowerShell. To connect to this service, you need to download and install the latest SkypeOnlineConnector module and create a remote PowerShell session to the service.

in today's world of highly sought after cloud management skills. With expert guidance, IT pros will learn how to leverage the muscle of PowerShell to automate many advanced administrative tasks not otherwise accessible in the Office 365 Admin Center. You will discover how to unlock configuration options and automate tasks in order to free up valuable time and resources.

The new edition of the book is available HERE and is a Nov 2022 Edition! Go get your copy now, or if you are a subscriber (THANK YOU!) you can download an update to your subscription. The next update should...

organization. Let's spend some time to learn some default use cases lot of exchange admins have to do. In this article I'm showing a various combination of different PowerShell cmdlets, with special focus in the new Exchange Online cmdlets. You can do a much more crazy stuff, but I want to show some basics.

in Exchange Online management using EXO V2 Module. Today, we are delighted to announce general availability of this feature along with the support for macOS.

key component of the zero-trust model. However, setting them up incorrectly can have serious consequences, like unintentionally compromising your entire Microsoft 365 security.

your business needs. But with that flexibility comes complexity. Managing Microsoft 365 licenses and the cost spent on all those licenses can lead to confusion and can be a challenge.

reducing help desk reliance in the organization. However, before users can utilize SSPR, admins must enable self-service password reset, and users must register their authentication methods.

different admin roles for each administration purpose will help the company to track, monitor, and support the people and resources that belong to the company.

faster and better method of managing Exchange Online via PowerShell - It just has some downsides right now for most Microsoft Partners.

requires some PowerShell to figure out the answer with some human-friendly results. The outcome is a script that analyzes sensitivity label policies to find where a user gets their labels from. It's another example of how useful PowerShell can be.

creations can lead to severe consequences, such as data breaches and compromises in sensitive information. Admins play a critical role in safeguarding organizational data by [...]

and 'Send On Behalf.'

enabled or not.

your users have what is needed to keep the business running. Whether you assign licenses directly or you use Group Based Licensing

defense in protecting sensitive information within Microsoft 365 environments. As organizations increasingly adopt to configure MFA, it becomes essential for administrators to monitor the authentication methods registered by users.

Generally, this is good advice that you should follow. However, the older cmdlet can do a job in certain circumstances, so don't write it off completely. More importantly, make sure that filtering of objects is done using server-side filters. This will improve script performance significantly.

redeemed? Here is a quick example PowerShell cmdlet using MS Graph API to enumerate them by creation date and either delete or disable them as you wish

However, they were only available from each individual service such as Teams, OneDrive, Exchange, SharePoint and Yammer. If you wanted a holistic view you needed to query each of the services API's and collate the responses for each identity. In August 2020 Microsoft added the ability to get M365 User Usage Reports to the BETA Microsoft Graph API. This means you can now use the Microsoft Graph Reports API to get a Microsoft 365 Individual User Usage Report with PowerShell rather than using the Microsoft 365 Admin Portal and the reports functionality there.

primary licensing as you need at one time. Currently, the Microsoft Dev Environment only allows 25 lice...

products) and your script fails because it does not find the newly created object. Yeah that's a big issue especially in the wonderful cloud, and if you want to automate tasks. So I invested some time to script this issue, which is not really difficult. It may help others during scripting.

PowerShell workshop. There are many variables, and one has the right answer. To start the ball rolling, this article describes how I write PowerShell for Microsoft 365 using a variety of modules such as Exchange, SharePoint, Teams, and the Microsoft Graph PowerShell SDK.

are not. If you want to hide all the groups used by Teams, here's how to do the job with PowerShell

security measure? Constant MFA issues can be frustrating! Here are some common MFA issues; as you read, consider how you might address these challenges.

some caveats such as not removing Exchange Online licenses. Organizations might want to do this to save money on Microsoft 365 license fees while an account is temporarily unused. Removal of Exchange Online licenses can result in the loss of a mailbox, and you don't want that to happen if you're disabling accounts just because someone is on a long-term sabbatical or other leave of absence.

accounts, but by combining data from multiple sources we can write a script to generate a report showing details of user password settings and MFA status.

automation script has gone awry that decided to "clean up" your Office 365 tenant unintentionally. In that case, you've got some mailbox restoration to do! Why pay big money for expensive software when you can do it for free using some knowledge and a little PowerShell?

only retrieved the first 200 workspaces. I hadn't realized that the Get-SPOContainer cmdlet supported an odd form of pagination to retrieve workspace data. In any case, I figured out how to page top find all available workspaces and updated the script. It's just another example of oddness in the SharePoint Online PowerShell module

tasks such as managing servers, endpoints or processes, more streamlined and efficient. However, since the proliferation of cloud technology, we’re now facing a new challenge, managing and automating the cloud environment.

reporting of shared mailbox quotas. The old script used just Exchange Online PowerShell. This versions mixes Exchange Online and the Graph SDK and throws in some certificate-based authentication to boot to allow the script to send email from something other than the signed-in account.. It all comes together, using chunks of code from other scripts to speed up writing. It's the PowerShell way...

deletion of OneDrive documents found in the searches. While you can remove email using a content search action, Office 365 doesn't includ e a method to cleanup OneDrive documents found by content searches....

modules (all with their own kinks) are used. However, PowerShell is very approachable and it's surprising what you can do with just a couple of lines of code. Working examples are great learning tools to help PowerShell newcomers (and maybe experienced coders) come up with solutions to problems. A couple of years ago, we created the Office 365 for IT Pros GitHub repository. Since then, we've been populating the repository with PowerShell scripts created to illustrate new features or to demonstrate how to approach solving an administrative problem in an Office 365 tenant. The repository currently holds a collection of 81 scripts.

single-sign-on, a search fix, and some additional "proxy" cmdlets that can be used as examples for making more "friendly" ones.

from the Microsoft Graph PowerShell SDK.

have our own approach. This article lays out a simple three-step method to write scripts to interact with Microsoft 365 objects.

information and to deal with expired license subscriptions. You can download V1.94 of the script from GitHub. Before attempting to run the licensing report script, take the time to read previous articles to understand the basics of the script and how to generate the files used for pricing information.

which is designed to gather key data to consider during the migration planning process.

use with Exchange Online PowerShell V2. This feature provides customers the ability to run non-interactive scripts using Modern Authentication. This feature requires version 2.0.3-Preview or later of the EXO PowerShell V2 module, available via PowerShellGallery.

are curious on changes that come with the new module version. In the world of continuous change, it is hard to keep track of these changes as new cmdlets or parameters get added to support new features, and some get removed as they become obsolete. So, how to discover what those changes are after updating to the latest module?

of alerting policies. The first getting alerts for M365 or Azure P1/P2 users via the Graph API, these alerts are pretty cool as you can see if users are connecting from tor nodes/VPN nodes, or from stuff like malware linked IPs. Monitoring these alerts actively via your RMM helps you in making sure that users are as safe as they can be.

client had some leavers in the company and not notify us as the administrators, or that the client had some very inactive users that don't really need to be licensed or could be converted to a shared mailbox for example.

user, and if the OST size is nearing it's maximum size, as a bonus I'm also giving you the option of alerting on active PST files. The offline mode is just a handy gizmo to notify users that they might've misclicked - It still happens to our users from time to time.

their Exchange Online Environment. So, I have listed the top 15 useful PowerShell cmdlets for admins to manage their Exchange mailboxes efficiently.

SharePoint data to an Azure Subscription. There was no PowerShell module to query and configure things, but that has changed because the Beta module was released three days ago. In this blog post, I will describe my first experience trying to use the new module.

Export-MsIdAppConsentGrantReport cmdlet to generate a report of OAuth app permissions. Allied with the ImportExcel module, the cmdlet can produce a very nice workbook containing lots of information about permissions held by the apps in a tenant. But even better, you can export the data to PowerShell and use it in your scripts.

some strange mails. So I had a look at the O365 security and clompliance center. After searching some reports I found out, that every E-Mail four users receive was redirected to a GMAIL address. The report also said that it was done with some inboxrules (the user never set up). Here some screenshots from the Azure Security Center and Compliance Center.

properties in the?Export-MailboxDiagnosticLogs?cmdlet. The properties record different kinds of mailbox activity and I included a script to generate a report based on the properties. The output is a CSV file that can be opened in Excel or imported in Power BI. All is well.

PowerShell for Office 365.

time to manage. However, in order to achieve these benefits in a shared system, Microsoft has to make certain changes so that their systems are more efficient and cost effective, something they can then pass on to...

arrays. The Send-MgUserMail is a great graph cmdlet to send Emails using the Graph API endpoint, this post is fully explained in the Send-MgUserMail BodyParameter Explained. But going through these hashtables is a challenge, and its more complicated.

tenant is quite

days to 365 days. This isn't anything big or complicated to do. It's an everyday task really. But I was wondering, how short can I make the PowerShell script to do this for all meeting rooms?

BitLocker actions against remote devices, and report on their use primarily via Microsoft Graph and Intune. I work and talk with a lot of folks in highly distributed environments (thinking of you, all of my EDU friends!).

methods.

explains how to use PowerShell to remove licenses from accounts when an equivalent service plan is available from another license. It's the kind of fix-up operation that tenant administrators need to do on an ongoing basis.

explains how to use PowerShell to remove licenses from accounts when an equivalent service plan is available from another license. It's the kind of fix-up operation that tenant administrators need to do on an ongoing basis.

usually involved some gyrations. Then Microsoft updated the Get-SPOSite cmdlet with the IncludePersonalSite switch and things became easier. For instance, a reader asked if it was possible to generate a report listing all the OneDrive for Business sites in a tenant with the storage allocated and used for each site. No problem, we thought, as we scanned the internet to see if people had already solved the problem. As it happens, several example scripts are available, but we ended up writing our own because it was possible to simplify the code . We also store the output in a CSV file as it's a very flexible format for reporting or further analysis (like importing into Power BI).

information using Entra ID portal, PowerShell, and Graph API Explorer. Although restricted from making changes, non-admins can still explore user information, group details, device details, etc.

to run the report on users who have access to the site / list / library and all sub-sites or sub-items. If you have a pretty complex structure of sites / lists and permissions you wouldn't like to spend all your time by manually going and checking permission. Also, if you don't have any reporting tools like ShareGate - PowerShell would be the best option here.

provide credentials....

administrative tasks within Microsoft 365. Among the recent factors causing me to consider using Graph APIs with PowerShell are:

joining an Office 365 tenant forced me to think about the best solution. The issue isn't finding a script to do the job because there's plenty of scripts published in places like the TechNet Gallery

opportune time to change that with the availability of tools and functions that are now available. In this article, we focus on how to use PowerShell to manage Microsoft 365. In addition, we consider how to use cloud services to manage PowerShell code, testing, security controls, and more.

collaboration, documents sharing, and accessing necessary resources for their roles. Based on the permissions granted, users can perform actions on files and folders such as deletion, download, modifying, and more.

dealing with objects, the Microsoft Graph PowerShell SDK's ToJsonString method is very useful. The method outputs a string containing JSON content, but only for object properties that have a value. This makes the much easier to use the output as the basis for a template object or as the payload body to create an object in another tenant.

identity and service principals. Lots of demos including service principals with secrets and certificates with PowerShell. Concepts apply to AZ CLI as well.

organization. Currently PowerShell users do not have a unified experience for accessing all of Microsoft Graph. This session introduces our preview Microsoft Graph PowerShell module generated from Microsoft Graph metadata using the same technology the Azure team is using to build their management PowerShell modules. Come learn how you can quickly use this to do ad-hoc interrogation of Microsoft Graph data and also build scripts that can perform unattended processes on your organization's data.

PowerShell module was published PowerShellGallery.com. With the latest update, users can now create comprehensive documentation in Markdown format, complete with an intuitive table of contents. This feature has been highly anticipated and requested by Read more

teams and groups within a Microsoft 365 tenant. The script code has been developed over the years. The last version converted to Graph API requests to improve performance. This time, the upgrade is to use the Microsoft Graph PowerShell SDK to make the code easier to maintain.

However, that doesn't mean the two can't work together. In this article we explore how to use Exchange Online PowerShell with Azure Automation while waiting for Microsoft to deliver a full solution.

365. There are potentially numerous mailboxes that aren't used and those won't be migrated to Office 365 because there's no sense in paying for licensing for them. How do you determine what mailboxes are in use?

if you want to know which domains are sending most mail, you need to do some work. In this article, we cover how to use cmdlets from the Microsoft Graph PowerShell SDK to create reports about user mail activity over time and the traffic sent by different domains.

with a bunch of changes to highlight different aspects such as license costs for disabled user accounts and inactive user accounts. Copious use of some very dubious color choices makes the HTML report created by the script look very nice (if you're color blind) and the new version can generate an Excel worksheet.

your Exchange Online resources in Azure Cloud Shell.