Manage Admin Roles Using Microsoft Graph PowerShell

Managing admin roles efficiently is a critical responsibility for IT administrators in any Microsoft 365 environment. As organizations scale, administrators frequently need to adjust or remove elevated roles as users transition between projects or responsibilities. While you can assign admin roles in the Microsoft 365 admin center, PowerShell provides greater flexibility and automation to perform bulk operations. With the deprecation of Azure AD and MS Online modules, it’s time to switch to the modern solution, the Microsoft Graph PowerShell module. In this guide, let’s walk through how you can assign and manage admin role assignments... Read More Read More

How to Manage User Licenses Using Microsoft Entra PowerShell

Managing Microsoft 365 licenses means quickly identifying which users need which licenses and removing any that are no longer required. With the retirement of the MSOnline module, modern alternatives like Microsoft Graph API and Microsoft Graph PowerShell have become the preferred tools for admins. However, Graph PowerShell can be complex for common license management tasks, requiring multiple commands and deeper knowledge of Graph endpoints. Microsoft Entra PowerShell addresses these challenges by providing a simpler, more intuitive way to manage licenses,... Read More Read More

Manage Groups Using Microsoft Entra PowerShell Module

Managing groups in Microsoft 365 can get tricky as your organization grows and user roles constantly evolve. While the Microsoft 365 admin center provides the basics, it’s not suitable for automation or large-scale changes. That’s where PowerShell shines, giving admins precision and control. But with the deprecation of AzureAD and MSOnline modules, it’s time to switch to the modern solution, the Microsoft Entra PowerShell module. It delivers a unified and secure approach to manage users, groups, apps, licenses, and more. In this blog, we’ll explore how to manage groups using Entra PowerShell, helping you simplify group management.   Pre-requisites for Using Microsoft Entra PowerShell Module  Before... Read More Read More

How to Create and Manage Address Book Policies in Exchange Online

If you’ve ever worked in a large organization, you’ve likely noticed how cluttered and confusing the Global Address List (GAL) is. With hundreds or even thousands of users across departments, locating the right contact or ensuring communication stays within the right group can be challenging.  To address this, Exchange Online offers Address Book Policies (ABPs) — a powerful feature that allows administrators to logically segment address lists. This helps streamline communication, enhance privacy, and maintain clear boundaries between teams or... Read More Read More

How to Manage Mail Users in Exchange Online

External collaboration helps organizations expand their business reach by working closely with vendors, partners, and collaborators. Microsoft supports this through two types of external entities: Mail contacts and Mail users (also known as mail-enabled users). Although both appear in the Global Address List (GAL) and have external email addresses, mail users stand out because they have sign-in credentials to access resources. However, this added access can become a security risk if not managed properly. For instance, an inactive mail user... Read More Read More

Difference Between Share and Copy Link in SharePoint Online

One of the most common confusions in SharePoint Online is that you have both the Share button and the Copy link option to share files or folders. Since both actions result in a shareable link, many users mistakenly believe they work the same way. The truth is, while both “Share” and “Copy” link can technically generate an identical link, they represent two fundamentally different methods of granting and managing that access. Confusing these two functions is a frequent cause of accidental over-sharing or compliance headaches.... Read More Read More

Receive Emails on Unlicensed Admin Accounts Using Mail Flow Rules

When organizations create unlicensed admin accounts in Microsoft 365 to minimize license usage and reduce exposure to attacks, they often overlook that these accounts do not have active mailboxes. As a result, these accounts cannot receive important emails such as alerts, policy updates, service health reports, and more. That’s why it’s essential to configure alternate methods for admin accounts to receive emails. One of the effective methods is to use an Exchange Online mail flow rule for unlicensed admin accounts.... Read More Read More

Restore Deleted Objects Using Microsoft Entra PowerShell

Accidentally deleting a critical user account, application registration, or group in Microsoft Entra ID tenant can trigger a moment of panic. But fear not! Microsoft 365 deleted objects are not immediately gone forever. Microsoft Entra ID has a soft-delete mechanism, giving admins a 30-day window to restore them. Only after this period, the object is permanently deleted and cannot be restored.  Recently, Microsoft has also extended this capability to Conditional Access policies, allowing admins to restore soft-deleted CA policies.  You can manage object deletions in Microsoft 365 through the Entra admin center, but... Read More Read More

How to Add/Remove Users in Existing BookInPolicy and ResourceDelegates

Managing meeting rooms efficiently in Exchange Online is crucial to prevent booking conflicts and ensure smooth scheduling. A common challenge administrators face is adding users to an existing BookInPolicy. Attempting to add new users directly often triggers “overwritten” errors because the -BookInPolicy parameter replaces the existing list instead of appending to it. To avoid these issues, administrators need to understand how to safely manage existing BookInPolicy and ResourceDelegates using PowerShell!   Manage BookInPolicy and ResourceDelegates for Exchange Meeting Rooms In... Read More Read More

Manage Authentication Methods for A User Using PowerShell

Imagine a user suddenly locked out because they lost their phone, or needing urgent MFA resets in the middle of a workday. If you’re a Microsoft 365 admin, these scenarios are all too familiar. With Microsoft mandating MFA for all users, administrators must ensure that users can authenticate reliably, while also securing accounts from MFA registration attacks. This involves monitoring registered authentication methods, updating or resetting them when needed, and ensuring compliance.   Manually managing authentication methods for a handful of users may be feasible, but in... Read More Read More