As Exchange Online admins, there are various reasons we may want to remove a mail from one of our users mailboxes. We may want to remove a specific Phishing mail, or a sensitive mail that was sent to the wrong person. To do this, we can create a new content search and delete the results, …
Continue reading Search and Delete and Emails from Exchange Online with Graph API and PowerShell
Conditional Access is a vital component of any Azure AD / Microsoft 365 tenancy. It is an extremely flexible and effective tool to help shape and enforce authentication criteria such as MFA and device compliance. While creating Conditional Access Policies can be very straightforward, as they grow, they can become quite complex and it can …
Continue reading Enable the Conditional Access Insights and Reporting Workbook
My advice to customers who want to use PST files in their environment is pretty simple - don't. Aside from the fact that PST files have no built in governance or information protection features (except setting a password), any organization using Exchange Online should have more than enough storage available between primary and archive mailboxes …
Continue reading Coming Soon – Retention Policies for PST files in OneDrive and SharePoint Online
When reporting on mailboxes in Exchange Online, we don't get a view of the license assignment. This can be valuable information where organizations are running a mixture of Exchange Online SKUs with different mailbox allowances and Archive support. I've put together a very quick and easy script to report on mailbox sizes and assigned licenses …
Continue reading Quick and Easy Mailbox Size and License Report
I recently wrote an article about how we can add a disclaimer to email messages outside of business hours to promote a healthy work / life balance. I then received a question asking if we can achieve something similar for Teams messages. While we can't add a disclaimer, we can leverage Microsoft Cloud App Security …
Continue reading Right to Disconnect: How to Block Teams Messages After Business Hours
A while ago I uploaded a quick script to document Conditional Access Policies out to JSON files. This has been really useful for me to export out policies but one issue I had with it was that the users and applications were represented as Object IDs and this wasn't very user friendly when passing on …
Conditional Access is one of the most powerful tools you can use to protect your Office 365 / Azure AD tenant. From enforcing device compliance to requiring MFA from untrusted locations, the flexibility it offers provides administrators with an extremely flexible and effective identity and access management solution. While Conditional Access has been around a …
Continue reading Azure AD Conditional Access Continuous Access Evaluation Becoming Default
The Graph API is an amazingly powerful tool for both developers and admins to achieve some really cool things in Microsoft 365. There are multiple ways to leverage it using multiple languages but for somebody coming from an infrastructure background, that wants to manage, report or automate tasks in Microsoft 365, PowerShell makes the most …
Continue reading 7 Tips for Working with the Graph API in PowerShell
I often get asked by customers about the frequency of MFA for Office 365 / Azure AD. There is an assumption that when we enabled MFA, users should get prompted when they log in every morning. By default that isn't the case - and has never really been the case. It also really shouldn't be …
Conditional Access Policies are often critical to an organizations security configuration for Microsoft 365 and any other integrated apps that leverage Azure AD. I've been using this script for a while to document and 'snapshot' Conditional Access Policies in customer environments and thought I would share via GitHub. The script will gather each existing Conditional …
Continue reading Script to Quickly Document your Conditional Access Policies
