Reporting on unlicensed OneDrive (for Business) accounts in Microsoft 365

Last year, Microsoft announced plans to start charging tenants for data stored in unlicensed OneDrives, that is drives that belong to unlicensed Microsoft 365 users. Unlike Exchange Online, where inactive mailboxes provide you with essentially free retention for the duration of any hold/policies assigned to the user, the functionality to …

Continue readingReporting on unlicensed OneDrive (for Business) accounts in Microsoft 365

Creating a Conditional access policy with Authentication strength control programmatically

I’ve seen a few questions lately on how to programmatically create a Conditional Access policy with Authentication strength  as one of the “grant” controls. For some reason, the documentation doesn’t directly address this scenario, and in turn people seem to get confused, when in fact, it’s rather simple. So in this …

Continue readingCreating a Conditional access policy with Authentication strength control programmatically

Microsoft adds more granular permissions for working with user objects via the Graph API

Just before Christmas 2024, Microsoft released a set of new, more granular Graph API permissions to address some of the most common user-related scenarios. It is the type of change I’d expect to read about in a blog article or something, but for some reason it was released without much …

Continue readingMicrosoft adds more granular permissions for working with user objects via the Graph API

Microsoft (unintentionally?) exposes inactive mailboxes content via the EWS API

In what seems like an “accidental feature release”, we can now leverage the EWS API methods to directly access content stored within inactive mailboxes in Exchange Online. I’d wager this to be a bug, but until we get some sort of official confirmation from Microsoft, all bets are off. Either way, I believe it is important for Microsoft 365 customers to known about this change in behavior, hence this short article. …

Continue readingMicrosoft (unintentionally?) exposes inactive mailboxes content via the EWS API

Create report schedules for Microsoft 365 reports via PowerShell

While the functionality to create report schedules for (handful of the) Microsoft 365 hasn’t received any love for years now, I want to remind you that it still exists. In this article, we will take a deeper look at the PowerShell cmdlets used to manage report schedules, as well as refresh your memory on some of the basics. And who knows, Microsoft might eventually remember this functionality exists and add support for more reports 🙂 …

Continue readingCreate report schedules for Microsoft 365 reports via PowerShell