On the show this week, Steve and Paul talk through a plethora of new updates arriving in Microsoft Teams, Entra ID's leap towards zero trust, plus MVP Andy Huneycutt joins the Podcast to discuss Copilot for Microsoft 365 adoption.
Microsoft doesn't provide a PowerShell cmdlet to return an accurate MFA status for Entra ID user accounts, but by combining data from multiple sources we can write a script to generate a report showing details of user password settings and MFA status.
In this article, Sean McAvinue explains what an Azure AD Assessment is and how it can assess and report on your Entra ID configuration, as well as plan the remediation of any discovered issues.
Cmdlets from the Microsoft Graph PowerShell SDK are available to manage conditional access policies. The challenge in using PowerShell rather than the Entra ID admin center GUI is how policy settings are structured. But practice (and some experimentation) makes perfect, as we discuss in this article.
Sometimes tenants need to switch Microsoft 365 licenses for Entra ID user accounts, usually to upgrade functionality. This is easy to do manually for one or two accounts, but it's a boring exercise when you need to process more, especially when each account might have a different set of disabled service plans in the original license. This article explains how to process account licenses with PowerShell.
Directory extensions allow organizations to customize the data stored for Entra ID objects such as users, groups, and devices, You need to create and manage directory extensions with PowerShell. This article explains how to do the job with cmdlets from the Microsoft Graph PowerShell SDK.
In this installment of Practical Protection, Paul Robichaux Talks about Password Banning in your Entra ID Tenant and why everyone should implement this extra layer of protection.
License assignment to Entra ID accounts with PowerShell is easy if licenses are available and the account doesn't already have the license. In this article, we explore how to check license availability and make sure that we don't try to assign a license that's already present.
On the show this week, Steve, Paul and Rich are joined by Microsoft's VP Director of Identity Security, Alex Weinert, to discuss almost all things related to securing identities. We hear about what happened behind the scenes during Storm-0558, and we discuss essential steps to protect Microsoft 365. And we discuss the latest news in the world of Microsoft 365 - in particular we discuss the new Teams 2.1 client that recently became GA, and for those still running on-premises or Hybrid Exchange Servers, it is time to get patching.
Microsoft 365 user accounts have user principal names (for sign in) and primary SMTP addresses (to receive email). Is it a good idea to reuse user principal names or SMTP addresses that become available when an employee leaves the organization. It might seem like a good idea, but it's really not and should be avoided. We explain why here.
Group-based licensing is a simple way to automate the distribution of licenses to members of security groups. In this article, we review how the mechanism works and show how to automate operations with PowerShell. Finally, we update the tenant licensing report to include group-based licensing and to highlight duplicate license assignments.
This blog is a recap of Sean Metcalfs TEC session on The Current State of Microsoft Identity Security: Common Security Issues and Misconfigurations.
