Microsoft 365 - Azure Active Directory

Reporting Microsoft Entra ID Administrative Units

Tony Redmond — Mon, 17 Jul 2023 14:44:19 +0000

Microsoft Entra administrative units are gaining in popularity. Restricted administrative units are now available and many Purview solutions support administrative units. In this article, we explain how to use Microsoft Graph PowerShell SDK cmdlets to create a report about administrative units, role assignments for their management, and their membership.

The post Reporting Microsoft Entra ID Administrative Units appeared first on Practical 365.

How to Bulk Delete Azure AD Accounts

Tony Redmond — Wed, 05 Jul 2023 10:00:00 +0000

Most articles covering how to bulk delete Azure AD accounts use a CSV file to hold the input set of accounts for removal. That approach works, but there are better ways to do the job if the contents of Azure AD are accurate.

The post How to Bulk Delete Azure AD Accounts appeared first on Practical 365.

Maintaining Manager-Employee Relationships Stored in Azure AD

Tony Redmond — Tue, 27 Jun 2023 10:00:00 +0000

Maintaining accurate Azure AD User Account manager links is important because many Microsoft 365 features like the Organization chart in Teams, the user profile card, and Outlook's Org Explorer depend on the information. This article covers how to use PowerShell to maintain the manager-employee links.

The post Maintaining Manager-Employee Relationships Stored in Azure AD appeared first on Practical 365.

Microsoft Sets March 2024 Date for Retirement of Old Azure AD PowerShell Modules

Tony Redmond — Fri, 16 Jun 2023 11:36:01 +0000

After much humming and hawing, Microsoft reset the retirement date for several old Azure AD modules to March 30, 2024. The nine-month extension is there to help customers convert scripts to use the Microsoft Graph PowerShell SDK or Graph API requests. On the upside, the extra time is good as it creates space to migrate scripts. On the downside, there's still some challenges in converting from the old Azure AD modules.

The post Microsoft Sets March 2024 Date for Retirement of Old Azure AD PowerShell Modules appeared first on Practical 365.

Practical Protection: Asking the Right Questions to Break the Kill Chain

Paul Robichaux — Thu, 15 Jun 2023 15:23:10 +0000

You can’t disrupt a chain if you can’t identify the links. In this blog, Paul Robichaux goes over some of the ways you can break a Kill Chain in your environment. And it all starts with asking yourself the right questions.

The post Practical Protection: Asking the Right Questions to Break the Kill Chain appeared first on Practical 365.

TEC European Roadshow 2023 – London, Paris, and Frankfurt: Identity and Microsoft 365 Security Tips

Steve Goodman — Wed, 10 May 2023 10:00:00 +0000

At the end of March, Practical 365 traveled with the TEC European roadshow, traveling between three cities in Europe over a week, listening to experts talking primarily about security-focused topics aimed at improving your Microsoft 365, Azure AD and Active Directory. Read our whistle-stop tour of the most important points made by expert speakers.

The post TEC European Roadshow 2023 – London, Paris, and Frankfurt: Identity and Microsoft 365 Security Tips appeared first on Practical 365.

How to Find the Right Set of Azure AD User Objects or Mailboxes to Process with PowerShell

Tony Redmond — Mon, 08 May 2023 10:00:00 +0000

Many PowerShell scripts written to automate operations in Microsoft 365 tenants fetch Azure AD users or mailboxes to process. In this article, we explain how to fetch user objects effectively by using filters to make sure that scripts process the right set of accounts or mailboxes.

The post How to Find the Right Set of Azure AD User Objects or Mailboxes to Process with PowerShell appeared first on Practical 365.

Practical Protection: Limiting the Damage from Local Admin Accounts

Paul Robichaux — Wed, 03 May 2023 10:00:00 +0000

Because of the way the Windows security model works, it’s not currently possible to eliminate the use of passwords for local administrator accounts. Given that fact, the next best solution is to remediate the biggest problems with passwords for these local accounts, including weakness, reuse, and tenure. In this article, we discuss how the Local Administrator Password Solution (LAPS) helps with all of those!

The post Practical Protection: Limiting the Damage from Local Admin Accounts appeared first on Practical 365.

Adding an Expiration Date for Azure AD Guest Accounts

Tony Redmond — Tue, 02 May 2023 10:00:00 +0000

Microsoft has long been asked to support guest account expiration, just like the functionality available for on-premises Active Directory accounts. Engineering priorities have not allowed the developers to work on the feature, but it's possible to do the job with PowerShell as we explain here.

The post Adding an Expiration Date for Azure AD Guest Accounts appeared first on Practical 365.

How to Update Azure AD Guest Accounts With Thumbnail Photos

Tony Redmond — Mon, 24 Apr 2023 10:00:00 +0000

It's good to put a face on Azure AD Guest Accounts by updating the accounts with thumbnail photos. This article explains how to approach the process of gathering suitable photos and uploading them to Azure AD. We also discuss how to speed up the process by finding guest accounts that are missing photos so that the script can focus on those accounts.

The post How to Update Azure AD Guest Accounts With Thumbnail Photos appeared first on Practical 365.