Dynamic PIM role activation picker

If you’ve spent any time in an organization that takes least privilege seriously, you’ve met Privileged Identity Management. PIM is wonderful. PIM is responsible. PIM is the security equivalent of eating your vegetables.

PIM is also the reason I’ve spent a measurable percentage of my adult life clicking Activate, typing a justification, waiting for a blade to load, clicking Activate again, and then discovering I needed a different role anyway.… [ Continue reading ]

Troubleshooting Entra Connect permissions sync errors

Over the years, I’ve written a couple of different blog posts and tools designed to help identify AD objects with broken inheritance–primarily because they intersect with mailbox migrations or AAD Connect–err, Entra Connect Sync–problems,

Today, we’ll dig into some automation I put together to help identify why Entra Connect is failing to write-back to on-premises AD objects.… [ Continue reading ]

Microsoft Edge Internal URLs reference

Microsoft Edge has a bunch of interesting internal URLs. How many, you ask?

Tons.

The URLs are basically broken into two sections: safe URLs and unsafe URLs. Safe URLs will show you interesting information (mostly diagnostic data) about your browser. Unsafe URLs, however, may crash your browser (some of them are even designed to do just that).… [ Continue reading ]

SMTP Security Vulnerabilities

Email Is Still 1982, and Nobody Wants to Talk About It

Here is a sentence that should terrify you more than it does: the protocol responsible for basically all business communication on Earth was designed before anyone thought to ask whether the people sending messages might be lying about who they are.… [ Continue reading ]

Find a value in any property in AD

A few days ago, I was trying to find all instances of a value stored in AD.  I was trying to understand all of the places that a particular partial GUID value was being used. so I had to come up with a way to search all properties for all objects across the directory space.… [ Continue reading ]

Legacy OneDrive for Business folder redirection

As we’re updating the Office 365 Administration Inside Out book (now called Microsoft 365 Administration Inside Out), I came across this chapter I wrote on OneDrive for Business Known Folder Move (KFM). This is the legacy method that won’t work for new deployments, but wanted it documented for posterity so that we could reference it for folks that inherited deployments using it so they know what to roll back.… [ Continue reading ]