Locating accounts in Active Directory that are expired but still active

While working with a customer over the past few weeks implementing a new AAD Connect synchronization rule to disable expired accounts, we wanted to evaluate how many accounts might be selected by such a rule.

Checking hundreds, thousands, or even tens of thousands of accounts by hand doesn’t rank high on anyone’s list–fortunately, that’s what PowerShell was made for.… [ Continue reading ]

Working around accounts that expire with AAD Connect

When attempting to migrate a Microsoft 365 organization from federated authentication to Password Hash Sync, there are a couple of gotchas that can impact how you manage certain accounts.  These changes in authentication behavior determine whether you need to implement new workflows or business processes–changes surrounding expired accounts and accounts flagged to force password change on next logon.… [ Continue reading ]

Workflow Automation with Microsoft Power Automate – Second Edition!

Hola!

I’m super excited to announce that the second edition of Workflow Automation with Microsoft Power Automate has been released! It’s available immediately.

This book features a ton of updates (product, connector, action and parameter names).  We’ve changed the way some features work, so I wanted to capture those changes (the old ways still work, but it’s best to be up-to-date).… [ Continue reading ]

Legacy OneDrive for Business folder redirection

As we’re updating the Office 365 Administration Inside Out book (now called Microsoft 365 Administration Inside Out), I came across this chapter I wrote on OneDrive for Business Known Folder Move (KFM). This is the legacy method that won’t work for new deployments, but wanted it documented for posterity so that we could reference it for folks that inherited deployments using it so they know what to roll back.… [ Continue reading ]

Blocking Screen capture

Earlier today, a customer asked me how to block screen capture on Windows 10/11 devices.  Turns out, there are a few things we can do in the box.

Here we go!

Disclaimer: This post discusses modifying the Windows Registry. Please make a backup before changing any settings.[ Continue reading ]

Update to AADConnect Network Communications Test

It’s been a few months since I’ve updated this tool, but feedback from two individuals led me to a couple of small updates:

  • Updated the method by which domain controllers are selected for testing.  Previously, I just used the $env:LOGONSERVER variable to find the authenticating DC and didn’t actually use any of the other DCs in site (any of which AAD Connect can bind to). 
[ Continue reading ]