How to Assign Admin Roles to Azure AD Groups with Access Reviews and Just in Time Access?

As of July 31 2021, this feature in Generally Available and was notified in the M365 Admin Center with the message MC274516

This approach is how you assign roles to Azure AD Groups along with the Privileged Identity Management features Just in Time access and Access Reviews options.

Continue reading “How to Assign Admin Roles to Azure AD Groups with Access Reviews and Just in Time Access?”

How to analyze Conditional Access Policies with ‘Report Only’ Mode?

Conditional Access Polices can be setup in 3 main modes. On/ Off/ Report Only.

On and Off modes are self explanatory where “Report Only” mode needs additional work. This post will go in detail on how to use the Report Only mode before you actually switch to ON.

Continue reading “How to analyze Conditional Access Policies with ‘Report Only’ Mode?”

3 Ways to Enforce Azure AD MFA Registration in Azure AD/ M365 Tenant

Requirement of having MFA on Azure AD accounts are top priority at the moment and basically it has become a basic requirement.

There are couple of ways to enable MFA on to user accounts by default. This can make sure all users are protected without having t o run periodic reports etc.

Reason for collation of all the options in this article is the options are in few different locations and depending on your licensing tier (free or paid), the options are different

Continue reading “3 Ways to Enforce Azure AD MFA Registration in Azure AD/ M365 Tenant”

Edge Browser Apps – A simple solution for managing multiple Outlook accounts for Teams meetings and multiple Teams sessions!

With the current upraise of Teams usage for collaboration meetings have been simplified and gone up to the next level of features.

However, Microsoft still haven’t addressed the use case where users having multiple Mailboxes in Outlook added with delegation permissions (Shared mailboxes or User mailboxes) and to use the specific account’s Teams features when it comes to organizing meetings.

Noticed everyone is trying their own DIY methods to get around this challenge. Opening number of browsers for each profile and maybe incognito sessions etc.

These multiple browsers will hog the memory and often confusing users when they have to toggle between few different browsers.

I’m really hopeful that Microsoft will provide a solution for this soon, but until then, Edge browser apps along with the Edge profiles will do the needful

Continue reading “Edge Browser Apps – A simple solution for managing multiple Outlook accounts for Teams meetings and multiple Teams sessions!”

A Step-by Step Guide to a PST Free Environment

Limited mailbox size due to limited mailbox database size due to on-premises server’s disk space due to the number of users. Sound familiar?
On-premises Exchange servers always dictates the server disk space and that always comes down to proper user profiling and limiting the per user mailbox capacities.

Continue reading “A Step-by Step Guide to a PST Free Environment”

Azure AD Group Based Licensing

As opposed to adding cloud based licenses per user basis or via PowerShell to automate license assignment with a security group, Azure’s group based licensing is easy to do and will save a lot of time.
This setup is ideal for the organizations which has a number of licenses for different types of users. Also will be beneficial for the scenarios when not all the features needs to be activated for a given user group/ type to perform their specific role.

Continue reading “Azure AD Group Based Licensing”

Known Folder Move With OneDrive for Business

As Microsoft 365 evolves, to store user data and sync them easily across the devices, apply security, collaborate easily, OneDrive for Business (ODB) is the way. This article explains some basic operations you can perform to manage ODB drives in your tenant. This is my approach on making OneDrive for Business to replace user’s traditional AD mapped Home drive and folder redirection quotas. This article talks about the nitty-gritty of OneDrive for business and some of the things you need to check before implement the Known Folder Move.

Continue reading “Known Folder Move With OneDrive for Business”