Search for: azure automation

154 Results

Avoid Windows Task Scheduler When Running Microsoft 365 PowerShell Scripts

Many people use the Windows Task Scheduler to run PowerShell scripts. The Task Scheduler works, but it creates a dependency on a specific workstation and isn't as secure as you might like. Running Microsoft 365 PowerShell scripts in Azure Automation is a much better idea. It's time to dump the Task Scheduler!

Continue Reading Avoid Windows Task Scheduler When Running Microsoft 365 PowerShell Scripts

Disabling PowerShell for Exchange Online Users

Most Microsoft 365 user accounts don't need access to Exchange Online PowerShell. It's an administrative tool that end users don't get much value from. In this article, we explore the best way to disable Exchange Online PowerShell using a script that can run interactively or as a scheduled Azure Automation runbook (the best way for automatic management).

Continue Reading Disabling PowerShell for Exchange Online Users

Using Managed Identities with RBAC for Applications

RBAC for Applications is a new method to secure Azure AD app access to Exchange Online mailboxes. In this article, we explain how to use Managed Identities in Azure Automation with RBAC for Applications making sure that scripts can only access selected mailboxes.

Continue Reading Using Managed Identities with RBAC for Applications

Practical Graph: Finding Owners for Ownerless Apps from Audit Data

When administrators create new Entra ID apps, the apps don't have an owner unless an owner is explicitly assigned. The net result is that a tenant can end up with many ownerless apps. In this article, we explain how to find ownerless apps, and how to use audit data to find suitable owners for those apps. All done with PowerShell, of course.

Continue Reading Practical Graph: Finding Owners for Ownerless Apps from Audit Data

How to Limit Groups Administrator Access to Specific Groups

This article explains how to scope groups administration using apps and restricted administration units to make sure that only certain administrators can manage certain groups programmatically. Although this is probably not something that is needed for some tenants, it's a technique that could be used in many situations.

Continue Reading How to Limit Groups Administrator Access to Specific Groups

Practical Graph: Use Audit Data to Improve Finding Inactive Copilot Users

A previous article explained how Microsoft 365 usage report data can highlight inactive Copilot users. If we add audit data to the mix, the analysis becomes much richer because we can see exactly what use people make of different Copilot apps, like Word, Chat, Outlook, and so on. Better data means better decisions!

Continue Reading Practical Graph: Use Audit Data to Improve Finding Inactive Copilot Users