Directory extensions allow organizations to customize the data stored for Entra ID objects such as users, groups, and devices, You need to create and manage directory extensions with PowerShell. This article explains how to do the job with cmdlets from the Microsoft Graph PowerShell SDK.
In this installment of Practical Protection, Paul Robichaux Talks about Password Banning in your Entra ID Tenant and why everyone should implement this extra layer of protection.
License assignment to Entra ID accounts with PowerShell is easy if licenses are available and the account doesn't already have the license. In this article, we explore how to check license availability and make sure that we don't try to assign a license that's already present.
On the show this week, Steve, Paul and Rich are joined by Microsoft's VP Director of Identity Security, Alex Weinert, to discuss almost all things related to securing identities. We hear about what happened behind the scenes during Storm-0558, and we discuss essential steps to protect Microsoft 365. And we discuss the latest news in the world of Microsoft 365 - in particular we discuss the new Teams 2.1 client that recently became GA, and for those still running on-premises or Hybrid Exchange Servers, it is time to get patching.
Microsoft 365 user accounts have user principal names (for sign in) and primary SMTP addresses (to receive email). Is it a good idea to reuse user principal names or SMTP addresses that become available when an employee leaves the organization. It might seem like a good idea, but it's really not and should be avoided. We explain why here.
Group-based licensing is a simple way to automate the distribution of licenses to members of security groups. In this article, we review how the mechanism works and show how to automate operations with PowerShell. Finally, we update the tenant licensing report to include group-based licensing and to highlight duplicate license assignments.
This blog is a recap of Sean Metcalfs TEC session on The Current State of Microsoft Identity Security: Common Security Issues and Misconfigurations.
In this blog, James Yip reviews Microsoft's Entra ID Cross-Tenant Sync feature, and how it can make things a lot easier when deploying a M&A project.
Over time, Microsoft 365 tenants tend to accumulate large numbers of guest accounts in Entra ID. And over time, some of those accounts become obsolete and inactive. In this article, we explore how to use PowerShell to analyze the activity of guest accounts to figure out what accounts are inactive and which are candidates for removal. It's something you should do annually.
After figuring out how to convert a script from using Azure AD licensing cmdlets (due to stop working in June 2022), we move on to create a licensing report for a tenant using cmdlets from the Microsoft Graph SDK for PowerShell. The code is pretty straightforward, but you need to do some up-front work to extract and prepare some input files containing product and service plan codes. Given that Microsoft is increasing its license fees, it's a good time to report this information...
