Many Microsoft 365 and Exchange Server logs contain IP addresses. To find out where the IP addresses come from and if they are internal or external, PowerShell developers can use online web-based geolocation services. It's important not to overuse the services because you could be throttled.
Azure AD system-preferred authentication means that users must use their strongest authentication method when they sign-into Azure AD. The change emphasizes the desirability of strong authentication methods over weak. Now in preview, Microsoft plans to make the policy effective for everyone in July 2023.
Sensitivity labels support local language values, meaning that you can translate the display name and tooltip for labels so that they appear in the language chosen by a user. Most people don't both because it's painfully slow to insert the translated strings for multiple languages. However, when you apply a mixture of PowerShell and the Microsoft Translator service, the task becomes so much easier.
You can manage sensitivity label settings through the Microsoft Purview compliance portal, but it's hard to see all the settings for labels in a consumable manner. This article describes how to use PowerShell to extract and report sensitivity label settings, including highlighting rights assignments that might be out of date. It's an example of just how useful PowerShell is to Microsoft 365 administrators.
Microsoft 365 Wiper malware is a category of threat where attackers penetrate a tenant and remove data. In this article, we discuss if Microsoft 365 Wiper malware could remove all the files from SharePoint Online sites and what actions tenant administrators can take to defend against the apps that might wreak such havoc.
Microsoft 365 security is a big topic. Focus is important when it comes to getting things done. In this article, we suggest five areas that administrators could work on during 2023 to improve the security posture of their tenant. You might already have established full control over some of these areas. Even if you have, it's still good to consider if you can improve security.
Dynamic Azure AD administrative units are like dynamic Azure AD groups in that they have a membership rule to calculate their membership. Azure AD uses the rule to find members regularly, so the administrative unit never goes out of date. That is, assuming the properties of Azure AD user accounts are maintained and up to date.
Many commentators got very exercised about the Microsoft 365 outage of 25 January 2023. The root cause was an untested configuration change to a WAN router which shouldn't have happened, but that's no reason to conclude that cloud services are flawed.
It's great to be able to run Graph API requests in PowerShell scripts if everything goes right. This article describes why some common Graph API errors occur in scripts and what to do when the errors happen. Most errors are due to permissions assigned to the Azure AD apps used to run scripts and getting the basics will resolve those problems.
It's easy to apply sensitivity labels to new teams, but what happens if you need to apply labels to a batch of existing teams? This article explains the basic steps necessary to find teams without labels, figure out the labels to apply, and apply the selected labels.
Exchange 2013 support ends on April 11, 2023. After that, Microsoft will not make fixes for security or functionality problems available to customers. It's time to make the decision to upgrade to Exchange 2019 or move to Exchange Online. Most organizations will find that Exchange Online is the right choice. Exchange 2019 is appropriate for organizations that have the right skills, experience, and investment to run a secure Exchange service.
Microsoft 365 tenants can create Azure AD accounts in different ways. No matter whether you create accounts manually or with PowerShell scripts, the important thing is to end up with the right data in Azure AD because many Microsoft 365 features depend on accurate directory.
