Convincing people to use MFA is one challenge. Convincing them to use a stronger authentication method than SMS is another. This article explains how to use PowerShell to find people still using SMS for MFA and send email to ask them to upgrade their authentication method.
The need to restore deleted user accounts sometimes arises. The process is well understood and options are available to do the job in the Entra and Microsoft 365 admin centers. But if you need to restore a deleted user account and change its user principal name, that operation can only be done with PowerShell. This article explores why updating a user principal name during a restore might be necessary and the code to restore accounts.
This article explains how to use the SharePoint Pages API to create new site pages with the Microsoft Graph PowerShell SDK after reading information from an RSS feed. Parsing the RSS feed to find article details is just one of the challenges encountered and solved to accomplish the goal.
In an announcement that will surprise many, Microsoft announced the introduction of a tenant-wide external recipient rate limit for Exchange Online tenants to roll out starting on March 3, 2025. The new limit is designed to stop bad actors using Exchange Online as a spam platform. Microsoft says that its telemetry indicates that the new TERRL will not impact many tenants, but that fact is worth checking for any organization.
Most Microsoft 365 tenants have a collection of Entra ID apps to manage. One task might be to control access to Entra ID apps, so the question is how best to do this. Assignments for users and groups control the ability to use apps while custom app roles are there for developers to determine what a user can done when they run an app.
The Microsoft Graph API offers great access to SharePoint Online site content, but sometimes the need exists to resist app access to SharePoint Online sites. That's where the Sites.Selected Graph permission comes in by allowing administrators to dictate exactly which sites an app can access. Practice the Principle of Least Permission!
Everyone's very excited about the potential goodness of Copilot agents, but how Microsoft 365 tenants will manage potentially thousands of agents in the future is something that isn't clear. Some administrative capabilities are in the Microsoft 365 admin center, but are these sufficient? We don't think so, and this article explains why and what we'd do about the problem.
Microsoft 365 Copilot licensing costs a lot of money. At $360 annually, it's important to make sure that everyone with a license makes full use of Copilot to become more productive and efficient. Usage data is available in the Graph, and some PowerShell can reveal who's using Copilot and who's not. With that data, you can decide whether to remove licenses for reassignment to other users.
A previous article described a script to find SharePoint Online files that didn't have retention labels. This article picks up the thread and shows how to use the data generated by the previous script to apply retention labels to the unlabeled files using cmdlets from the Microsoft Graph PowerShell SDK. Some issues are met along the way, but the script works and does the job, which is all that counts at the end of the day.
Microsoft is all in for Copilot at present and agents are a big part of the story. Multiple ways exist to create a declarative agent for use with Copilot in BizChat and Teams. This article reviews how to create an agent with the Teams Toolkit, Copilot Studio, and Microsoft 365 Copilot - and if any usage data are created for custom agents.
Purview Data Lifecycle management includes many ways to apply retention labels to SharePoint Online files, some of which require E5 licenses. Tools are available to show you what files have retention labels, but finding unlabeled SharePoint files is difficult because no out-of-the-box methods are available. Here we show how to use a content search to find unlabeled SharePoint files, and how to adjust the search results to have usable data for further processing.
Often tenants create user sign-in reports based on the sign-in data held in user account properties. This article explains how to supplement that information with insights about the apps users sign into using sign-in audit logs. The combined information is more valuable than simply knowing when someone last successfully signed in.
