QuickFix: New-MgUser -AccountEnabled

If like me you just spent twenty minutes trying to make sense of this:

https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.users/new-mguser?view=graph-powershell-1.0#-accountenabled

Read more of this post

Efficiently Finding Graph API Permission Guids using PowerShell Script

I have been writing some tools recently that use Application Authentication to connect to Microsofts Graph API. Part of the tool installation process is that it requests access to the various API permissions, there is a great resource for finding those here: Graph Permissions

The difficulty I found though, was when requesting permissions programmatically, you do not use the familiar name like ‘Sites.Read.All’ instead you use a resource access object which contains some guids.

Read more of this post

Quick Fix: New-FederationTrust 426 Upgrade Required

I am working on an Exchange migration project currently, and setting up some things in a lab. As part of that I am converting what was a Modern Hybrid setup with the Hybrid Agent, to a Classic Hybrid, using connectors and what not.

I was trying to use New-FederationTrust setup a Federation trust and received the following:

Unable to access the Federation Metadata document from the federation partner. Detailed information “The remote server returned an error: (426) Upgrade Required.”

Read more of this post

Quick Fix: Invalid overflow action target in Microsoft Teams

So, you want to automate the creation of Microsoft Teams Call Queues. You want to use Shared Voicemail and the target is a Unified Group. But wait, what’s this, invalid overflow action target?

As you can see above we are using a variable $unifiedGroup, and selecting the id of that object. This is derived from an earlier command ‘Get-UnifiedGroup‘.

Read more of this post

Azure APIM Override Header Value – JSON Content Type

This week I was working on an Azure Function Web Hook to receive data from a third party service.

The service I was receiving the data from was a little limited in that all I could provide was an endpoint where the data would be posted, and an example of how the data would be formatted.

Read more of this post

Office 365 Password Policy returns Empty Values in PowerShell

o365-logo1Regular readers will be aware of a script I wrote some time ago to remind people to change their password, sending them an email when it was due to be changed. I wanted to extend this up to Office 365 but at the time, when I checked it out the relevant data was not exposed by using the Get-MSOLPasswordPolicy cmdlet. Or so I thought.

Whilst chatting with co-conspirator Tim Barrett yesterday he sent me a link to Spice Works where someone named bbeckers had indeed published a modified version of my original script that was talking to Office 365, and, to my surprise was dated back in 2016.

Of course I wanted to try it out, but on my production tenant, the information returned from Get-MSOLPasswordPolicy was an error saying ‘You do not have permission to call this cmdlet’

Read more of this post

Quick Fix : Clean-up Duplicate Remote Web Access Certificates

SSLI noticed this thread in the forum a while ago, and setup a Lab network to reproduce it. Sure enough after a few days, my local machine certificate store is full of duplicated certificates.

The issue only seems to affect Essentials 2016 and only if you are using the free remotewebaccess.com certificates.

The issue is also discussed here on the MCB Systems blog.

Unfortunately for me work took over and i was not able to spend any more time on it, and with responses from Microsoft for any Essentials related issue being, shall we say, pedestrian, i wont be holding out any hope of a fix soon.

Read more of this post