More secure version of the Bitlocker recovery keys export script

A Graph SDK for PowerShell based script to export all BItLocker Recovery keys backed up to your Entra ID tenant. Keys are securely stored in the output and can only be accessed by the same user and device. Optionally, you can “unscramble” the output and store the recovery keys in plain text. …

Continue readingMore secure version of the Bitlocker recovery keys export script

PSA: Microsoft deepens the disconnect between PowerShell and Purview UI

For years, we’ve been hearing how the Graph API is the de facto “control surface” of Microsoft 365 and should be used for all integrations/automations and apps. Yet, years down this journey, the real story still shows fragmented coverage across even the basic workloads (*cough* Exchange Online *cough*). On the …

Continue readingPSA: Microsoft deepens the disconnect between PowerShell and Purview UI

Free tool to manage Outlook delegates

If you miss the good old Outlook’s Delegate management dialog, or you want to use a similar UI-based tool to manage delegation settings on behalf of users, this is the tool for you. It is a WinForms-based tool that allows you to view, add or remove delegates for Microsoft 365 users, without having to worry about the underlying PowerShell cmdlets. In addition, the tool supports the undocumented CanManageCategories flag. Read the full article for more details and planned future improvements. …

Continue readingFree tool to manage Outlook delegates

PSA: More cmdlets require connecting to the SCC endpoint via the -EnableSearchOnlySession switch

We start the new year on a not so positive note. In short, Microsoft messed up the scope of impacted PowerShell cmdlets, as part of the connectivity changes introduced last August (MC1131771), which we initially covered here. After the initial rollout, many customers started noticing strange behavior with additional cmdlets, …

Continue readingPSA: More cmdlets require connecting to the SCC endpoint via the -EnableSearchOnlySession switch

Some lesser known Calendar-related PowerShell cmdlets and parameters

A short article showcasing some of the (not so) recent additions in the arsenal of the Exchange Online admin for combating Calendar (and delegate) related issues. You will learn where the delegate collection is stored, how to clear it via the Remove-MailboxFolderPermission cmdlet and the ResetDelegateUserCollection switch. Next we explore the new flag to manage delegate’s access to Categories, CanManageCategories. Lastly, we talk about the per-user (and tenant-wide) setting to control the behavior of declined meeting requests, PreserveDeclinedMeetings. …

Continue readingSome lesser known Calendar-related PowerShell cmdlets and parameters