Simplifying Microsoft 365 Admin Role Audits with a PowerShell Script In the world of Microsoft 365 administration, knowing who holds what admin roles is key for security. I’ve created a PowerShell script that makes auditing these roles straightforward and efficient. Using Microsoft Graph, the script fetches all admin roles within your Microsoft 365 environment and…
Leave a CommentEffortlessly Retrieve Your Microsoft Tenant ID with PowerShell and Microsoft Graph In the dynamic world of IT and cloud services, the Microsoft Tenant ID plays a pivotal role, especially for administrators and developers working with Microsoft 365 and Azure services. It acts as a unique identifier for your organization’s tenant in Microsoft’s cloud platform, essential…
Leave a CommentEnhancing Security with Microsoft-Managed Conditional Access Policies Microsoft’s introduction of automatically managed Conditional Access policies within Microsoft Entra marks a significant step forward in simplifying and enhancing security measures for organizations of all sizes. This initiative underscores the commitment to not just react to the cyberthreat landscape but to proactively safeguard user access and identity…
Leave a CommentManaging guest user accounts in Microsoft Entra (formerly Azure Active Directory) is a critical aspect of maintaining the security and functionality of your organization’s tenant. Guest accounts often require specific permissions that differ from those of regular users, and sometimes, it becomes necessary to elevate these permissions by changing the account type from Guest to…
Leave a CommentConfigure Terms of Use in Azure Active Directory In this post, we will look at how to configure Azure Active Directory Terms of Use. What are Azure AD Terms of Use: Terms of use in Azure AD is an easy way for organizations to present information to their end users. The information presented ensures that…
Leave a CommentI am a Global Admin but don’t have access to Azure Subscriptions. One of the questions I get frequently is “If you are a Global Administrator, can you grant yourself access to the Azure Subscriptions?” The answer is YES you can and straight forward as well. To get started, navigate to Azure Active Directory and…
Leave a CommentConditional Access Policy Templates In this post, we will look at Conditional Access Policy Templates a feature which is currently still in Public Preview. These templates are designed to provide a more convenient method of deploying new policies based on Microsoft’s recommendations. If you are new to Conditional access policies or simply just want to…
Leave a CommentConditional Access policy for Guest and External Accounts In post, I will go through the steps of setting up a Conditional Access Policy which will enforce MFA for Guest and External Accounts. This will add another layer of protection if guest account credentials were compromised. To get started we need to sign into the Azure…
Leave a CommentClear Inactive Devices in Microsoft Intune In this short post, we will look at the options available in Intune to remove inactive devices. The feature is called “Device clean-up rules.” To get started with enabling this feature, lets first have a look at what is Device Clean up rules. With Intune device clean=up rules you…
Leave a CommentSecuring Azure Active Directory from PowerShell abuse Malware attacks are evolving and once common tactics are becoming a thing of the past. Attack strategies, like using a third-party hacking program or injecting viruses from external sources, are almost obsolete as they leave a distinct footprint. Most antimalware tools can now detect the presence of a…
Leave a CommentCreate Office 365 Dynamic Distribution Group In this short post we will look at how to create Dynamic Distribution Groups in Office 365 using Azure AD, Exchange Online PowerShell. To get started we will look at how to create a Dynamic Distribution group using Azure AD. Navigate to Azure Active Directory > Mange >> Groups…
Leave a CommentConfigure Azure AD Connect Pass Through Authentication Azure pass-through authentication allows user to login to cloud and on-premise applications by using the same passwords. Pass-through authentication validated the password against the on-premise active directory. Prerequisite needed: Global Admin account Azure AD Connect 1.1.750.0 or later Windows Server 2012 R2 or later with TLS 1.2 enabled…
Leave a Comment
