Find a value in any property in AD

A few days ago, I was trying to find all instances of a value stored in AD.  I was trying to understand all of the places that a particular partial GUID value was being used. so I had to come up with a way to search all properties for all objects across the directory space.… [ Continue reading ]

Locating accounts in Active Directory that are expired but still active

While working with a customer over the past few weeks implementing a new AAD Connect synchronization rule to disable expired accounts, we wanted to evaluate how many accounts might be selected by such a rule.

Checking hundreds, thousands, or even tens of thousands of accounts by hand doesn’t rank high on anyone’s list–fortunately, that’s what PowerShell was made for.… [ Continue reading ]

Working around accounts that expire with AAD Connect

When attempting to migrate a Microsoft 365 organization from federated authentication to Password Hash Sync, there are a couple of gotchas that can impact how you manage certain accounts.  These changes in authentication behavior determine whether you need to implement new workflows or business processes–changes surrounding expired accounts and accounts flagged to force password change on next logon.… [ Continue reading ]

Workflow Automation with Microsoft Power Automate – Second Edition!

Hola!

I’m super excited to announce that the second edition of Workflow Automation with Microsoft Power Automate has been released! It’s available immediately.

This book features a ton of updates (product, connector, action and parameter names).  We’ve changed the way some features work, so I wanted to capture those changes (the old ways still work, but it’s best to be up-to-date).… [ Continue reading ]

Legacy OneDrive for Business folder redirection

As we’re updating the Office 365 Administration Inside Out book (now called Microsoft 365 Administration Inside Out), I came across this chapter I wrote on OneDrive for Business Known Folder Move (KFM). This is the legacy method that won’t work for new deployments, but wanted it documented for posterity so that we could reference it for folks that inherited deployments using it so they know what to roll back.… [ Continue reading ]