One of my devices came with the frustrating “Killer Networking” package from Intel. The only thing it kills is performance, causing noticeable delays in accessing SharePoint Online sites or other properties where round-trip time between your device and the target host is important.… [ Continue reading ]
Troubleshooting Entra Connect permissions sync errors
Over the years, I’ve written a couple of different blog posts and tools designed to help identify AD objects with broken inheritance–primarily because they intersect with mailbox migrations or AAD Connect–err, Entra Connect Sync–problems,
Today, we’ll dig into some automation I put together to help identify why Entra Connect is failing to write-back to on-premises AD objects.… [ Continue reading ]
Stop Edge from switching browser profiles when opening sites
If you’re like a lot of folks, you probably click through dialog boxes and prompts on autopilot because you (think) you’ve seen them a million times. Sometimes, though, that can have unwanted (but not necessarily unexpected) consequences.
For example, let’s say you are working with a variety of Microsoft 365 tenants (such as a dev and production tenant), and as such, you create multiple Edge browser profiles.… [ Continue reading ]
Troubleshooting AADSTS50105: Your administrator has configured the application Microsoft Graph Command Line Tools (’14d82eec-204b-4c2f-b7e8-296a70dab67e’) to block users unless they are specifically granted (‘assigned’) access to the application.
While working on a recent tenant-to-tenant migration, I wanted to start updating my tooling to work with the new MgGraph cmdlets. Am I the only one that thinks “MgGraph” sounds like a value meal?
Anyway.
During the connection process, I ran into this error:
… [ Continue reading ]AADSTS50105: Your administrator has configured the application Microsoft Graph Command Line Tools (’14d82eec-204b-4c2f-b7e8-296a70dab67e’) to block users unless they are specifically granted (‘assigned’) access to the application.Â
“Get-Credential” fails with “Cannot process command because of one or more missing mandatory parameters: Credential.”
This morning, I was working with a new build of Windows 11 (22H2) and came across this frustrating error:

After running the Get-Credential cmdlet, the console is immediately returned to me with an error that I didn’t specify the -Credential parameter.… [ Continue reading ]
Updating the RDP port for an Azure VM
This week, I found myself unable to log into an Azure-hosted VM due to a new managed firewall rule. The new rule was put in at priority 0 and it specifically blocks inbound 3389.
Now, with it blocked, I’m unable to log into the server to update it. … [ Continue reading ]
Resetting a Surface Device from media when your device is toast
Sometimes, our instructions are lacking. Today, I needed to recover my Surface Book 2 device. I thought, easy—I’ll just use the Reset PC option inside the Control Panel.
After the initial reset (using the delete my files option), Windows Explorer wouldn’t launch.… [ Continue reading ]
Conducting an interactive SMTP session
While updating my EOP best practices post (which you most definitely should read), I was thinking about a task that I get asked with some regularity (not as much as when I was in the field consulting, but still pretty regularly). … [ Continue reading ]
Updating the default mail/mailto handler in Windows 11
After getting my new Windows 11 device out of the box, I installed the Microsoft 365 apps suite and was off to the races. Or so I thought.
It would appear that Outlook didn’t register itself as a the default mail protocol handler (mailto: hyperlinks), so every time I click on a mail link, I get prompted to configure Windows Mail.… [ Continue reading ]
Quick-and-dirty Catch-All Mailbox for GCC Channel Meeting Invitations
It’s well-known that our Government Community Cloud instance of Office 365 doesn’t support emailing a channel. This can be problematic when you are attempting to schedule a channel meeting and include recipients not on the platform. What ends up happening is the recipient can actually receive an NDR (because they can’t send the meeting acceptance back to the channel).… [ Continue reading ]
Find and Fix Broken AD Object Inheritance
A few years back, I created a script for a customer to help find broken AD object inheritance during an Exchange migration. I then created a blog post to go through it.
However, time has marched on and the TechNet Gallery fell off the face of the earth, and I needed to update this. … [ Continue reading ]
SOLVED: Add-PnPFile: format-default : The collection has not been initialized. It has not been requested or the request has not been executed. It may need to be explicitly requested.
While hammering out a script for one of my customers today, I decided that it would be a nice touch to upload a log file (that I’d handily built with this function) to their SharePoint team site.
What could go wrong?… [ Continue reading ]
Resolved: Error: A special Rpc error occurs on server [servername]: The source data is corrupted or not properly Base64 encoded
Friday, while building a new lab to use while writing a chapter for our new Microsoft Teams book, I went through the normal process in Exchange to request a certificate and apply it. Easy peasy normally, right?
It should have been. … [ Continue reading ]
Update to AAD Network Communications Test
It’s literally been a year since I’ve updated it–mainly because we haven’t made any significant endpoint changes.
I did detect some CRL endpoint updates and a few other odds and ends for Worldwide Commercial and GCC Moderate, so I’ve updated the AAD Network Communications Test tool accordingly.… [ Continue reading ]
Unable to Install NuGet Provider
While writing my last post, I uncovered a problem on one of my lab machines:
