When attempting to migrate a Microsoft 365 organization from federated authentication to Password Hash Sync, there are a couple of gotchas that can impact how you manage certain accounts. These changes in authentication behavior determine whether you need to implement new workflows or business processes–changes surrounding expired accounts and accounts flagged to force password change on next logon.… [ Continue reading ]
Bringing back some old tools!
As we’ve been working on refreshing the Microsoft 365 Administration Inside Out book (https://www.amazon.com/gp/product/0137908857), I came across several scripts that I mentioned in the book that have since been lost due to the retirement of the TechNet Gallery.
So, I’ve pulled them back, refreshed them, and uploaded them to the PowerShell Gallery. … [ Continue reading ]
Blocking Screen capture
Earlier today, a customer asked me how to block screen capture on Windows 10/11 devices. Turns out, there are a few things we can do in the box.
Here we go!
Disclaimer: This post discusses modifying the Windows Registry. Please make a backup before changing any settings.… [ Continue reading ]
Get Team privacy and ownership settings
One of my former peers pinged me the other day asking if I had a script in my back pocket that would allow an analyst at a customer to get a list of Teams, whether they were public or private, and who the owners were.… [ Continue reading ]
Use the Windows Speech Synthesizer to read Hitchhiker’s Guide to the Galaxy to you
While messing around today on lunch, I got it in my head that it would be fun to have my computer read the infamous “Hitchhiker’s Guide to the Galaxy” to me.
While I didn’t intend for it to happen in the worst possible way, I did succeed.… [ Continue reading ]
Update to AADConnect Network Communications Test
Today’s a bugfix day! Woo!
One of my peers, @DerrickBaxter, brought a few issues to my attention that I resolved:
- Updated password write-back endpoints
- Updated syntax for checking for RODCs
- Error resolving Administrator Roles
- Failing Azure AD Credential check functionality that logged both failure AND success
I’ve also updated a few other things, including updating the checks for DCOM/OLE permissions, trusted sites, and execution policies.… [ Continue reading ]
Scripting a SharePoint, OneDrive, or Teams library to sync with the OneDrive for Business client
In today’s episode of “weird ways to do things,” we’ll look at scripting synchronizing a SharePoint library with the OneDrive for Business client.
There are a few ways to skin this cat.
The Right Way
First, I’d recommend using Group Policy.… [ Continue reading ]
Blocking voicemail attachment delivery
Today, I was approached by a peer with a particularly interesting situation–blocking a particular type of system-generated message from hitting the mailbox. In particular, a voicemail.
Background
Voicemail messages in Exchange Online / Teams Phone world are delivered via email to the recipient’s mailbox and generally include the voicemail as an audio attachment in addition to a transcription of the message. … [ Continue reading ]
Converting a Classic SharePoint site to a modern Communications site
Earlier today, I was working with a customer to begin enabling Viva Connections.
One of our prerequisites is ensuring the root site is the home site and that it is configured as a modern Communications site. For customers that provisioned their SharePoint environments several years ago but never really invested time in it, it the default SharePoint site may still be a legacy classic team site.… [ Continue reading ]
Update to AAD Connect Communications Test
Greetings!
While working with a new customer this week, I was reviewing the Azure AD Connect prerequisites, and it turns out we have updated the prereq list as well made some information public about what the installation wizard checks for.
As such, I have updated the tool.… [ Continue reading ]
PowerShell function: Get-HashFromString
Hi, everyone!
In a previous post, I built a function on how to get an MD5 hash from a file stored in memory. I had a particular need this holiday season to compute a hash of a text input string, so I thought I would share my solution with you:
Function Get-HashFromString($String)
{
$md5hash = New-Object -TypeName System.Security.Cryptography.MD5CryptoServiceProvider… [ Continue reading ] Update to Wipe Exchange Online Mailbox Script
Earlier this evening, a former peer asked me about trying to bulk delete items from the Drafts folder on a customer’s Exchange Server 2010. While Microsoft Exchange Server 2010 reached end of support in October 2020, it still will work (though we certainly don’t recommend keeping it around, as it’s no longer receiving regular maintenance, support, or security updates).… [ Continue reading ]
Update to AADConnect Network Communications Test
Hey!
It’s been a while since I’ve updated this tool. One of my peers, Didier Akakpo, pointed out that we have a new endpoint to add for Self-Service Password Reset Writeback.
As such, I’ve updated the tool to include this endpoint under $OptionalResources for Commercial and GCC-Moderate tenants.… [ Continue reading ]
Removing on-premises proxy address on the way to the cloud
Several years ago, I wrote a script and a blog post to help customers use AAD Connect to strip out proxy addresses during the synchronization process. The goal was to keep the on-premises AD proxyAddresses attribute for users untouched, as it was needed for other applications and communication on-premises.… [ Continue reading ]
Update to Teams Auto Answer Script
Hey-o!
It looks like there may have been an encoding problem for some folks with the recent update of the Teams-AutoAnswer script. I’ve updated the encoding in the file and re-posted it, so please let me know if you have problems.… [ Continue reading ]
