Working around accounts that expire with AAD Connect

When attempting to migrate a Microsoft 365 organization from federated authentication to Password Hash Sync, there are a couple of gotchas that can impact how you manage certain accounts.  These changes in authentication behavior determine whether you need to implement new workflows or business processes–changes surrounding expired accounts and accounts flagged to force password change on next logon.… [ Continue reading ]

Blocking Screen capture

Earlier today, a customer asked me how to block screen capture on Windows 10/11 devices.  Turns out, there are a few things we can do in the box.

Here we go!

Disclaimer: This post discusses modifying the Windows Registry. Please make a backup before changing any settings.[ Continue reading ]

Update to AADConnect Network Communications Test

Today’s a bugfix day! Woo!

One of my peers, @DerrickBaxter, brought a few issues to my attention that I resolved:

  • Updated password write-back endpoints
  • Updated syntax for checking for RODCs
  • Error resolving Administrator Roles
  • Failing Azure AD Credential check functionality that logged both failure AND success

I’ve also updated a few other things, including updating the checks for DCOM/OLE permissions, trusted sites, and execution policies.… [ Continue reading ]

Blocking voicemail attachment delivery

Today, I was approached by a peer with a particularly interesting situation–blocking a particular type of system-generated message from hitting the mailbox.  In particular, a voicemail.

Background

Voicemail messages in Exchange Online / Teams Phone world are delivered via email to the recipient’s mailbox and generally include the voicemail as an audio attachment in addition to a transcription of the message. … [ Continue reading ]

Converting a Classic SharePoint site to a modern Communications site

Earlier today, I was working with a customer to begin enabling Viva Connections.

One of our prerequisites is ensuring the root site is the home site and that it is configured as a modern Communications site.  For customers that provisioned their SharePoint environments several years ago but never really invested time in it, it the default SharePoint site may still be a legacy classic team site.… [ Continue reading ]

PowerShell function: Get-HashFromString

Hi, everyone!

In a previous post, I built a function on how to get an MD5 hash from a file stored in memory.  I had a particular need this holiday season to compute a hash of a text input string, so I thought I would share my solution with you:

Function Get-HashFromString($String)
{
  $md5hash = New-Object -TypeName System.Security.Cryptography.MD5CryptoServiceProvider
[ Continue reading ]