Quick Fix: New-FederationTrust 426 Upgrade Required

I am working on an Exchange migration project currently, and setting up some things in a lab. As part of that I am converting what was a Modern Hybrid setup with the Hybrid Agent, to a Classic Hybrid, using connectors and what not.

I was trying to use New-FederationTrust setup a Federation trust and received the following:

Unable to access the Federation Metadata document from the federation partner. Detailed information “The remote server returned an error: (426) Upgrade Required.”

Read more of this post

Quick Fix: Invalid overflow action target in Microsoft Teams

So, you want to automate the creation of Microsoft Teams Call Queues. You want to use Shared Voicemail and the target is a Unified Group. But wait, what’s this, invalid overflow action target?

As you can see above we are using a variable $unifiedGroup, and selecting the id of that object. This is derived from an earlier command ‘Get-UnifiedGroup‘.

Read more of this post

Azure APIM Override Header Value – JSON Content Type

This week I was working on an Azure Function Web Hook to receive data from a third party service.

The service I was receiving the data from was a little limited in that all I could provide was an endpoint where the data would be posted, and an example of how the data would be formatted.

Read more of this post

Office 365 Password Policy returns Empty Values in PowerShell

o365-logo1Regular readers will be aware of a script I wrote some time ago to remind people to change their password, sending them an email when it was due to be changed. I wanted to extend this up to Office 365 but at the time, when I checked it out the relevant data was not exposed by using the Get-MSOLPasswordPolicy cmdlet. Or so I thought.

Whilst chatting with co-conspirator Tim Barrett yesterday he sent me a link to Spice Works where someone named bbeckers had indeed published a modified version of my original script that was talking to Office 365, and, to my surprise was dated back in 2016.

Of course I wanted to try it out, but on my production tenant, the information returned from Get-MSOLPasswordPolicy was an error saying ‘You do not have permission to call this cmdlet’

Read more of this post

Quick Fix : Clean-up Duplicate Remote Web Access Certificates

SSLI noticed this thread in the forum a while ago, and setup a Lab network to reproduce it. Sure enough after a few days, my local machine certificate store is full of duplicated certificates.

The issue only seems to affect Essentials 2016 and only if you are using the free remotewebaccess.com certificates.

The issue is also discussed here on the MCB Systems blog.

Unfortunately for me work took over and i was not able to spend any more time on it, and with responses from Microsoft for any Essentials related issue being, shall we say, pedestrian, i wont be holding out any hope of a fix soon.

Read more of this post

Solarwinds MSP Script Check – Spectre

Ah, Mr Bond I have been.. no that’s a different Spectre.

If you are reading this then you will know what Spectre is. It is of course a new, vulnerability announced in nearly every device on the planet. Possibly some on Mars and the ISS as well. Definitely on many you look after.

Skipping over the technical details of the problem, which are covered in far greater detail and by those with far superior expertise elsewhere, I wanted to focus on a quick check I implemented for our MSP clients.

Read more of this post

WSUS 2012 R2 and Windows 10 1703

DKIMI have been working on WSUS and Windows 10 for the last few days, following some rather annoying updates to newly deployed Surface Pro devices, and more importantly a grumbling comment from a co-worker ‘can’t we automate this stuff anymore?’.

Well i have to say that was the final straw. Windows 10 and WSUS has been a pain for me since it was released.

With hotfixes, tweaks and dances required and failing to get Windows 10 talking and working with WSUS consistently it perhaps was no surprise that i had opted to point 10 directly to Windows update and only control the schedule and ring, rather than the more traditional granular approach taken with Windows 7 and 8.

So, Yes, the answer is we should be able to manage patching with Windows 10.

Yes, we are going to manage it.

Read more of this post