Search for: Practical PowerShell

865 Results

How to Report High-Priority App Permissions That Hackers Might Exploit

Microsoft 365 tenants usually include many Entra iD apps. These apps hold permissions, including permissions that hackers like to exploit. This article explains how to use PowerShell to detect apps with high-priority permissions and report them to administrators for review.

Continue Reading How to Report High-Priority App Permissions That Hackers Might Exploit

Stop GIFShell Attack by Modifying Teams External Access

The GIFShell attack describes how attackers can penetrate Teams to run commands using special GIFs, including the ability to exfiltrate data. One practical and quick way to stop similar attacks is to limit the set of Teams organizations your tenant will communicate with by establishing an allow list for external access.

Continue Reading Stop GIFShell Attack by Modifying Teams External Access

You’ve Migrated…​ But What Did You Leave Behind?

Preparation, Preparation, and More Preparation Migrations in Microsoft 365 are a complex beast. It seems every time you feel like you have captured everything, more apps or functionalities appear. Every shiny new tool Microsoft releases is another consideration for migration teams and IT departments. Planning for migrations – tenant-to-tenant or otherwise – is a mammoth […]

Continue Reading You’ve Migrated…​ But What Did You Leave Behind?

One Last Chance to Pause the Great Exchange Online Basic Authentication Shutoff

The great remove basic authentication from Exchange Online project is rapidly approaching the October 1 date when Microsoft will start removing support for basic authentication for seven email connectivity protocols. We've known about this date for well over a year, but some organizations need a little extra time to be ready. Microsoft is offering a one-time three-month extension to January 1, 2023. After that, they're going to proceed with the final termination.

Continue Reading One Last Chance to Pause the Great Exchange Online Basic Authentication Shutoff

Alas Kaizala, All is Lost

On August 26, Microsoft announced that they will retire Kaizala in August 2023. The Kaizala retirement is not big news because it's been coming for a while. If you want to get ahead of the game, you can remove the Kaizala service plans from the Office 365 licenses assigned to user accounts. We explain how to do the job in an example PowerShell script.

Continue Reading Alas Kaizala, All is Lost