Recently, I came across an interesting post on monitoring Azure AD App registration expiration – link here. I made a simplified version which only generates a report on the expiration date of each credential. TL;DRRunning the script below will list each credential for AzureAD app registrations sorted by expiration date. To run the script, ensure […]
Querying AzureAD App registration credential expiration
Posted by Daniel Kovacs on December 14, 2020
https://f12.hu/2020/12/14/querying-azuread-app-registration-credential-expiration/
Bug in Get-AzureMSConditionalAccessPolicy cmdlet?
Recently, I found an excellent blogpost on how to back up AzureAD Conditional Access policies (link) using the new AzureAD PowerShell module and decided to create my own when I encountered a little bug… TL;DRInstead of using ToJson() method use ConvertTo-Json cmdlet on the objects returned by Get-AzureMSConditionalAccessPolicy. ExplainedI was trying to create my own […]
Posted by Daniel Kovacs on November 23, 2020
https://f12.hu/2020/11/23/bug-in-get-azuremsconditionalaccesspolicy-cmdlet/
Retrieve Bitlocker keys stored in AzureAD with PowerShell
Bitlocker keys can be stored in Active Directory and in Azure Active Directory too – but querying the latter is a bit trickier than usual. The following script will export all Bitlocker recovery keys (from your Azure Active Directory tenant) to an HTML table. TL;DR1. Ensure that you meet the following prerequisites: – you have […]
Posted by Daniel Kovacs on November 11, 2020
https://f12.hu/2020/11/11/retrieve-bitlocker-keys-stored-in-azuread-with-powershell/
Deploy Teams with custom settings (automatic login, run in background, etc.)
This blogpost is about deploying Teams with custom settings, like automatic startup, automatic login, open in background and so on. To make auto-logon work, AzureAD join is a prerequisite. TL;DR– Make sure AzureAD seamless SSO is set up (link)– Download Teams installers from here (link)– Create a folder in NETLOGON (or other share that can […]
Posted by Daniel Kovacs on October 31, 2020
https://f12.hu/2020/10/31/deploy-teams-with-custom-settings-automatic-login-run-in-background-etc/
Auditing Azure and Office365 administrator activity using PowerShell
Tracking changes made by administrators in Azure and/or Office365 can be difficult and I’m sure that there are a lot of alternatives to query this information – but I wanted to share this basic script, even though several parts of it may need improvement. TL;DR:1. Make sure you have ExchangeOnlineManagement PS module installed2. Check the […]
Posted by Daniel Kovacs on October 21, 2020
https://f12.hu/2020/10/21/auditing-azure-administrator-activity-using-powershell/
Deploy AlwaysOn VPN profiles as SCCM Application
The official Microsoft documentation (link) recommends deploying the connection scripts as packages, but I thought that it would be fancy to deploy them as applications – because the application model is more powerful and offers several features that can’t be achieved with packages. TL;DR: Device Tunnel (details) 1. Create the application which runs the configuration […]
Posted by Daniel Kovacs on October 11, 2020
https://f12.hu/2020/10/11/deploy-alwayson-vpn-profiles-as-sccm-application/
Restore deleted private Android application in Intune
This blogpost will describe the steps to restore a deleted Android private application in Intune. TL;DR:1. Login to https://play.google.com/work2. In Admin Settings, find your Organization ID and search by this ID on top of the page3. Click on the desired application and Approve it4. Intune – Apps – All apps – Add – Managed Google […]
Posted by Daniel Kovacs on October 2, 2020
https://f12.hu/2020/10/02/restore-deleted-private-android-application-in-intune/