Manage Groups Using Microsoft Entra PowerShell Module

Managing groups in Microsoft 365 can get tricky as your organization grows and user roles constantly evolve. While the Microsoft 365 admin center provides the basics, it’s not suitable for automation or large-scale changes. That’s where PowerShell shines, giving admins precision and control. But with the deprecation of AzureAD and MSOnline modules, it’s time to switch to the modern solution, the Microsoft Entra PowerShell module. It delivers a unified and secure approach to manage users, groups, apps, and more. In this blog, we’ll explore how to manage groups using Entra PowerShell, helping you simplify group management.   Pre-requisites for Using Microsoft Entra PowerShell Module  Before you start... Read More Read More

How to Create and Manage Address Book Policies in Exchange Online

If you’ve ever worked in a large organization, you’ve likely noticed how cluttered and confusing the Global Address List (GAL) is. With hundreds or even thousands of users across departments, locating the right contact or ensuring communication stays within the right group can be challenging.  To address this, Exchange Online offers Address Book Policies (ABPs) — a powerful feature that allows administrators to logically segment address lists. This helps streamline communication, enhance privacy, and maintain clear boundaries between teams or... Read More Read More

How to Manage Mail Users in Exchange Online

External collaboration helps organizations expand their business reach by working closely with vendors, partners, and collaborators. Microsoft supports this through two types of external entities: Mail contacts and Mail users (also known as mail-enabled users). Although both appear in the Global Address List (GAL) and have external email addresses, mail users stand out because they have sign-in credentials to access resources. However, this added access can become a security risk if not managed properly. For instance, an inactive mail user... Read More Read More

Difference Between Share and Copy Link in SharePoint Online

One of the most common confusions in SharePoint Online is that you have both the Share button and the Copy link option to share files or folders. Since both actions result in a shareable link, many users mistakenly believe they work the same way. The truth is, while both “Share” and “Copy” link can technically generate an identical link, they represent two fundamentally different methods of granting and managing that access. Confusing these two functions is a frequent cause of accidental over-sharing or compliance headaches.... Read More Read More

Receive Emails on Unlicensed Admin Accounts Using Mail Flow Rules

When organizations create unlicensed admin accounts in Microsoft 365 to minimize license usage and reduce exposure to attacks, they often overlook that these accounts do not have active mailboxes. As a result, these accounts cannot receive important emails such as alerts, policy updates, service health reports, and more. That’s why it’s essential to configure alternate methods for admin accounts to receive emails. One of the effective methods is to use an Exchange Online mail flow rule for unlicensed admin accounts.... Read More Read More

Restore Deleted Objects Using Microsoft Entra PowerShell

Accidentally deleting a critical user account, application registration, or group in Microsoft Entra ID tenant can trigger a moment of panic. But fear not! Microsoft 365 deleted objects are not immediately gone forever. Microsoft Entra ID has a soft-delete mechanism, giving admins a 30-day window to restore them. Only after this period, the object is permanently deleted and cannot be restored.  Recently, Microsoft has also extended this capability to Conditional Access policies, allowing admins to restore soft-deleted CA policies.  You can manage object deletions in Microsoft 365 through the Entra admin center, but... Read More Read More

How to Add/Remove Users in Existing BookInPolicy and ResourceDelegates

Managing meeting rooms efficiently in Exchange Online is crucial to prevent booking conflicts and ensure smooth scheduling. A common challenge administrators face is adding users to an existing BookInPolicy. Attempting to add new users directly often triggers “overwritten” errors because the -BookInPolicy parameter replaces the existing list instead of appending to it. To avoid these issues, administrators need to understand how to safely manage existing BookInPolicy and ResourceDelegates using PowerShell!   Manage BookInPolicy and ResourceDelegates for Exchange Meeting Rooms In... Read More Read More

Manage Authentication Methods for A User Using PowerShell

Imagine a user suddenly locked out because they lost their phone, or needing urgent MFA resets in the middle of a workday. If you’re a Microsoft 365 admin, these scenarios are all too familiar. With Microsoft mandating MFA for all users, administrators must ensure that users can authenticate reliably, while also securing accounts from MFA registration attacks. This involves monitoring registered authentication methods, updating or resetting them when needed, and ensuring compliance.   Manually managing authentication methods for a handful of users may be feasible, but in... Read More Read More

How to Manage Named Locations Using Microsoft Entra PowerShell

Named locations in Microsoft Entra ID plays a crucial role in defining Conditional Access policies. They allow administrators to classify network locations as trusted or untrusted based on IP ranges or geographic locations. This helps in strengthening security by restricting or granting access to specific locations.  While you can configure named locations in Microsoft Entra admin center, PowerShell provides a faster way, especially when working with large environments. In this blog, we’ll walk through how to manage named locations using the Microsoft Entra PowerShell module.   How Named Locations Work in... Read More Read More

How to Set Immutable ID to Null Using MS Graph

When managing users in a hybrid setup, one attribute you’ll often hear about is the Immutable ID. This value acts as the unique bridge between your on-premises Active Directory (AD) account and its corresponding Microsoft Entra ID (Azure AD) cloud account.  There may be various scenarios where you want to set a user’s immutable ID to null, such as when migrating from a hybrid setup to a fully cloud-only environment. Therefore, knowing how to manage it is important. The good... Read More Read More