Azure AD User setting Tenant Creation

Andres Bohren
Hi All, Since a few Days there is a new Setting in Azure AD User Settings "Tenant creation" https://aad.portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/UserSettings Per default this setting is set to "Yes". Means that a user with can create a new Azure AD Tenant. "No" means that only users with "Global Administrator" or "Tenant Creator" Admin Role can create Azure AD Tenants. I can't think much of a Szenario where this should be enabled. So setting this to "

Deploy PowerShell 7 Script on Azure Automation

Andres Bohren
Hi All, In this Blog Post i explain how to Create and Depoly a PowerShell 7 Runbook for Azure Automation with the AZ PowerShell Module. #Connect to Azure Connect-AzAccount #Get Automation Account Get-AzAutomationAccount I have two Azure Automation Accounts. In this Example, we use the second one. ############################################################################### # Create Runbook ############################################################################### $accountName = "icewolfautomation" $rgName = "RG_DEV" $location = "West Europe" $RunbookName = "DemoPS7" $scriptContent = @' #Connect to Exchange with Managed Identity

How to Manage PowerShell 5 and 7 Modules on Azure Automation

Andres Bohren
Hi All, As you might already know, i am a big Fan of Azure Automation. Recently i have used "Managed Identity with Exchange Online on Azure Automation". Yesterday there was a Release of "Microsoft.Graph PowerShell Module 1.17.0" and the Question of how to update the PowerShell Modules on Azure Automate arises once again. Basically i've covered that already in a Blog Post earlyer this Year "Update Modules on Azure Automation with AZ PowerShell"

Azure PowerShell Module Az 9.1.1 released

Andres Bohren
Hi All, Microsoft has released the AZ 9.1.1 PowerShell Module to the PowerShell Gallery just a few Hours ago. Az 9.1.1 https://www.powershellgallery.com/packages/az/9.1.1 Show Installed AZ Module and what's available in the PowerShell Gallery Get-InstalledModule AZ -AllVersions Find-Module AZ To uninstall all the old Modules and install the new Modules i have written a PowerShell Script that is published at my GitHub Repo. #Run Script directly from GitHub $ScriptFromGitHub = Invoke-WebRequest "

Microsoft.Graph PowerShell Module 1.17.0 released

Andres Bohren
Hi All, A few hours ago, Microsoft has released a new Version of the Microsoft.Graph PowerShell Module. Apparently it covers the latest API version and Help as well as some minor fixes. Microsoft.Graph 1.17.0 https://www.powershellgallery.com/packages/Microsoft.Graph/1.17.0 1.17.0 Release Notes https://github.com/microsoftgraph/msgraph-sdk-powershell/releases Let's check the installed Version and what's available on the PowerShell Gallery Get-InstalledModule Microsoft.Graph Find-Module Microsoft.Graph To install the newest Version of the PowerShell Modules and also uninstalling the old Versions, you can use my GitHub Script.

How IAM Systems can use Exchange RecipientManagement PSSnapin

Andres Bohren
Hi All, I have already blogged about the Exchange 2019 Recipient Managemen PowerShell that can Manage Echange Objects without an Exchange Server running. Install and use Exchange 2019 CU12 Recipient Management PowerShell https://blog.icewolf.ch/archive/2022/04/27/install-and-use-exchange-2019-cu12-recipient-management-powershell.aspx For Identity and Access Management Systems (IAM) provisioning, management and deprovisioning based in the past on crating a Remote PowerShell to Exchange Server. How do you Address this with the new Recipient Management? In Fact there are two Solutions: You install the Recipient Management PSSnapIn on the IAM Server (Management Tools)

Microsoft Azure Active Directory MFA Number matching comes in 2023

Andres Bohren
Hi All, Basic Authentication has been mostly disabled. And Attackers now search for new ways to compromise M365 Accounts. If you use Microsoft Authenticator Push Notifications - good for you. There is a thing called "MFA Fatique" that Attackers use to gain access. They send so many Push Requests until a user is annoyed and clicks on "Approve". As anounced in the Article below, the MFA Number Matching will be enabled for all M365 Tenants starting end of February 2023.

ExchangeOnlineManagement 3.0.1-Preview1 released

Andres Bohren
Hi All, Today Microsoft has released the ExchangeOnlineManagement-Preview1 PowerShell Module. ExchangeOnlineManagement 3.0.1-Preview1 https://www.powershellgallery.com/packages/ExchangeOnlineManagement/3.0.1-Preview1 Whats new in this release: v3.0.1-Preview1 : 1. Bug fixes in Connect-ExchangeOnline. 2. Bug fix in Connect-IPPSSession for connecting to Security and Compliance PowerShell using Certificate Thumbprint. 3. Mitigation for the known vulnerability in Newtonsoft.Json library. More details here: https://github.com/advisories/GHSA-5crp-9r3c-p9vr Check what Version is installed and what's available from the PowerShell Gallery Get-InstalledModule ExchangeOnlineManagement Find-Module ExchangeOnlineManagement -AllowPrerelease

MicrosoftTeams PowerShell Module 4.9.1 released as GA

Andres Bohren
Hi All, Today Microsoft has released a new Version of the MicrosoftTeams PowerShell Module to the PowerShell Gallery. MicrosoftTeams 4.9.1 https://www.powershellgallery.com/packages/MicrosoftTeams/4.9.1 Check installed Module and what's available in the PowerShell Gallery Get-InstalledModule MicrosoftTeams -AllVersions Find-Module MicrosoftTeams Uninstall the old Module and install the newest Module Uninstall-Module MicrosoftTeams Uninstall-Module MicrosoftTeams Install-Module MicrosoftTeams Testing Connect-MicrosoftTeams Get-Team Get-CsOnlineUser -Identity a.bohren@icewolf.ch | fl *Ent*,*host*,*voice*, *line* Regards Andres Bohren

Use Managed Identity with Exchange Online on Azure Automation

Andres Bohren
Hi All, With the ExchangeOnlineManagement PowerShell Module 3.0.0, Microsoft has providet the Ability to use Managed Identity in Azure. Time to test that on my own. ExchangeOnlineManagement 3.0.0 https://www.powershellgallery.com/packages/ExchangeOnlineManagement/3.0.0 v3.0.0 : 1. General Availability of REST-backed cmdlets for Exchange Online which do not require WinRM Basic Authentication to be enabled. 2. General Availability of Certificate Based Authentication for Security and Compliance PowerShell cmdlets. 3. Support for System-Assigned and User-Assigned ManagedIdentities to connect to ExchangeOnline from Azure VMs, Azure Virtual Machine Scale Sets and Azure Functions.