In a large corporate environment, it’s not unusual to have several Azure AD Named Locations (should it be trusted or not). It is even more challenging to keep track of these locations when there are several admins managing the environment. I thought it would be useful to have a script to determine if an IP […]
All posts in category AzureAD
Check if IP address is already an AzureAD Named Location using PowerShell
Posted by Daniel Kovacs on March 1, 2022
https://f12.hu/2022/03/01/check-if-ip-address-is-already-an-azuread-named-location-using-powershell/
Backup AzureAD Conditional Access Policies – a different approach
Update: as the AzureAD PowerShell is being deprecated, I made an updated version which can be found here Backing up AAD Conditional Access policies is relatively straightforward with Get-AzureADMSConditionalAccessPolicy cmdlet (don’t forget to update your AzureAD module if the cmdlet is not recognized). In this post, I want to share my own backup “solution” which […]
Posted by Daniel Kovacs on January 27, 2021
https://f12.hu/2021/01/27/backup-azuread-conditional-access-policies-a-different-approach/
Querying AzureAD App registration credential expiration
Recently, I came across an interesting post on monitoring Azure AD App registration expiration – link here. I made a simplified version which only generates a report on the expiration date of each credential. TL;DRRunning the script below will list each credential for AzureAD app registrations sorted by expiration date. To run the script, ensure […]
Posted by Daniel Kovacs on December 14, 2020
https://f12.hu/2020/12/14/querying-azuread-app-registration-credential-expiration/
Bug in Get-AzureMSConditionalAccessPolicy cmdlet?
Recently, I found an excellent blogpost on how to back up AzureAD Conditional Access policies (link) using the new AzureAD PowerShell module and decided to create my own when I encountered a little bug… TL;DRInstead of using ToJson() method use ConvertTo-Json cmdlet on the objects returned by Get-AzureMSConditionalAccessPolicy. ExplainedI was trying to create my own […]
Posted by Daniel Kovacs on November 23, 2020
https://f12.hu/2020/11/23/bug-in-get-azuremsconditionalaccesspolicy-cmdlet/
Retrieve Bitlocker keys stored in AzureAD with PowerShell
Bitlocker keys can be stored in Active Directory and in Azure Active Directory too – but querying the latter is a bit trickier than usual. The following script will export all Bitlocker recovery keys (from your Azure Active Directory tenant) to an HTML table. TL;DR1. Ensure that you meet the following prerequisites: – you have […]
Posted by Daniel Kovacs on November 11, 2020
https://f12.hu/2020/11/11/retrieve-bitlocker-keys-stored-in-azuread-with-powershell/