Unlock Secure and Effortless Authentication with Microsoft Entra ID Temporary Access Pass (TAP) In my continuous journey of exploring how Microsoft solutions enhance security, I’ve found that Microsoft Entra ID’s Temporary Access Pass (TAP) is a game-changer for simplifying authentication processes. TAP is designed to help users onboard, recover access, or transition to passwordless authentication…
A Guide to Executing Test-MdiReadiness.ps1 In today’s rapidly evolving cybersecurity landscape, ensuring your environment’s readiness for advanced protection solutions is crucial. Microsoft’s Test-MdiReadiness.ps1 script is a powerful tool designed by the Microsoft Team to streamline the deployment of Microsoft Defender for Identity (MDI). This script provides a thorough pre-deployment check, assessing your domain, domain controllers,…
Ensuring Microsoft Defender for Identity Deployment Success with Test-MdiReadiness.ps1 In the world of cybersecurity, preparation is key. This is especially true when deploying sophisticated protection tools like Microsoft Defender for Identity (MDI), which safeguards your organization against advanced threats and insider actions. To ensure a smooth and effective deployment, leveraging the Test-MdiReadiness.ps1 script is a…
How to enable Active Directory recycle bin In this post we will look at two ways of how to enable Active Directory recycle bin. The first option will be via the GUI and second using PowerShell. Open Server Manager then click on Tool >> Active Directory Administrative Centre. From the Administrative Centre on the left-hand…
Configure ADFS for Office 365 Requirements: External DNS records for example: fs.o365cloudlab.co.za Internal DNS records for example: fs.thatcloud.com Valid SSL Certificate Service Account with Domain Admin rights More about the requirement can be found here at the Microsoft blog. To get started we need to install the ADSF roles and features. Run Windows PowerShell as…
How to find FSMO Roles Holder Active Directory In this post, I will look at two ways you can find out which Domain Controller holds the FSMO Roles. The first option is to use CMD and run it as Administrator, then run the following cmdlet. NETDOM /Query FSMO Now let’s go ahead and get the…
HOW TO: Add UPN Suffixes to a Forest This article describes how to add UPN suffixes to a forest. Adding these suffixes gives you the ability to use a friendly user-logon name that does not match the domain’s or parent domains’ naming structure. “You can use Active Directory Domains and Trusts to add user…
How to Find Domain Controllers with Windows Powershell. Get-ADDomainController Gets one or more Active Directory domain controllers based on discoverable services criteria, search parameters or by providing a domain controller identifier, such as the NetBIOS name. In this post I will showcase how to get all the below listed information using Windows PowerShell….
Active Directory Recovery using DELL Active Directory Recovery Manager. In this post I will go through the option of installing and configuring Dell Active Directory Recovery Manager. What is Dell Active Directory Recovery Manager? Recovery Manager for Active Directory enables you to quickly restore your environment without taking AD offline but still maintain…
Assign Office 365 Licenses with Active Directory Groups In this post I will walk through the options of assigning Office 365 Licenses based on Active Directory Group membership. Microsoft has recently released the new feature in Azure Active Directory which allows you to apply Azure licenses as well as Office 365 licenses based on group…
Exchange Mailbox has “Empty HomeMDB attribute” After doing an Mailbox Move one of Mailboxes ran into an issue where it lots its “HomeMDB” attribute. How do we resolve this ? There is a quick and easy fix to resolve this , to start we need to open “ADSI Edit” . Select “Default naming context” Once…
The following Script was created to assist a help desk department to quickly get a list of ‘Members’ from an Active Directory Group. This is a very simple script that prompts you for a Group Name and will then use Grid-View to display the results. Original Post : https://gallery.technet.microsoft.com/Get-Domain-Group-Members-bf33a1a2?redir=0 GetGroupMembers #ThatLazyAdmin