Category Active Directory

13/02/2023

Get ACL Permissions for a specific OU

By Stephen Hackers in Active Directory, Batch Scripts and PowerShell, Cloud & Datacenter Management, Cyber Security, Microsoft, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Powershell Tag Active Directory, Identify Weakness, Improve Security, Monthly Security Checks, PowerShell, Query, Security

# Get ACL Permissions for a specific OU (Get-ACL "AD:$((Get-ADOrganizationalUnit -Identity 'OU=Computers,DC=Test,DC=LOCAL').distinguishedname)").access | Select IdentityReference,AccessControlType,ActiveDirectoryRights.IsInherited #Other examples available from https://www.easy365manager.com/how-to-document-ou-delegation/ https://shellgeek.com/get-ad-ou-permissions-report/

01/02/2023

Query Active Directory – Security Script

By Stephen Hackers in Active Directory, Batch Scripts and PowerShell, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Server 2016, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Powershell Tag Active Directory, Identify Weakness, Improve Security, Monthly Security Checks, PowerShell, Query, Security

PowerShell script to query active directory : Identify Accounts with Password expiring is disabled Identify Accounts have not logged on for 30 or 90 days and accounts have never logged…

21/01/2021

How to Enable “Security Defaults” in Azure and Office 365

By Steve in Active Directory, Azure AD, Azure Security, Cloud & Datacenter Management, Conditional Access, Enterprise Security, Microsoft Azure, Office 365, Office Apps & Services, Office365, Security & Compliance, Security & Compliance Tag 365, Azure, Azure AD Multi-Factor Authentication, Basic Auth, Blocking legacy authentication protocols, Defaults, Legacy, MFA, Modern Authentication, MS Azure, MS365, multi-factor authentication, Office 365, Org Settings, Protecting privileged activities, Security, Security Defaults

Security Defaults in Azure Portal. IMPORTANT, SECURITY DEFAULTS IS NOT ALWAYS ENABLED BY DEFAULT. YOU MUST CHECK YOUR SETTINGS What does Security Defaults give you? Security Defaults when enabled provide…

16/06/2020

MS365 – Azure AD – Dynamic Groups and Expiration Settings

By Steve in Active Directory, Azure AD, Azure Security, Cloud & Datacenter Management, Enterprise Security, Microsoft, Microsoft Azure, Office 365, Office Apps & Services, Roles, Users and Groups, Security & Compliance Tag -eq, Azure, Azure AD, Azure Security, Dynamic, Dynamic Groups, Expiration, Expresions, Expression, Group Liftime, Groups, Life Time, MS365, Office365, Rule, Syntax, user.department

Maintain groups in Azure AD with dynamic groups and set expiration settings. Example scenario : Controlling remote access to sub contractors working on a short term project. The project owner…

21/05/2020

Azure – Register An Application in AD and Generate App Password

By Steve in Active Directory, Azure AD, Azure Security, Cloud & Datacenter Management, Cyber Security, Developer Technologies, DevOps, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure Tag AD, App Password, App Registration, Authentication, Azure AD, Azure Security, Client Secret, Client Secrets

How to guide, in Azure register an application in AD and generate app password In the Azure portal, browse to Azure Active Directory > App Registrations New Registration Enter Application…

27/04/2020

Enhance Security : Enforce Mobile Devices to Use Encryption and Password Policy connecting to Exchange Online (O365)

By Steve in Active Directory, Business Applications, Cloud & Datacenter Management, Cloud Security, Enterprise Mobility, Exchange, Microsoft Azure Tag Device, Encryption, Exchange, Exchange Admin, Exchange Online, Mobile, Mobile Device Management, Passwords, Policy, Wipe Device

Features available to improve security with mobile devices by using encryption and a password policy when connecting to Exchange Online (O365). Anyone who has been a Active Directory Admin will…

24/04/2020

Office 365 Additional Security, Require MFA to Domain Join Devices in Azure Active Directory

By Steve in Active Directory, Cloud & Datacenter Management, Microsoft, Microsoft Azure, Office 365, Office Apps & Services Tag Active Directory, Admin Center, Azure, Device Settings, MFA, Windows 10

How to enable the feature to prompt for Multi Factor Authentication when joining a device to an Azure Active Directory domain. We would also like to limit the number of…

24/04/2020

Office 365 – Configure Users To Reset Non-Administrators Passwords

By Steve in Active Directory, Business Applications, Cloud & Datacenter Management, Microsoft, Microsoft Azure, Office 365, Office Apps & Services Tag Active Directory, Assign, Azure, How to, Office365, Password, Reset, Roles

The support desk will require the function to reset users passwords in your environment. Their is a pre-configured role already available in Office 365. Follow these basic steps to assign…

24/04/2020

Office 365 How To Configure External Collaboration Settings with Domain Restrictions

By Steve in Active Directory, Cloud & Datacenter Management, Microsoft, Microsoft Azure, Office 365, Office Apps & Services Tag Active Directory, Azure, block guests, block members, Collaboration, Domains, External, invite, Office365, Restrict, Secure, Security, target domains, Users

In Office 365, how do you configure external collaboration settings but restrict certain domains from collaboration. This is all configured under Azure Active Directory Admin Center. A few clicks and…

23/04/2020

Office 365 Password Protection – Custom Banned Passwords – Greyed Out

By Steve in Active Directory, Enterprise Mobility, Microsoft, Microsoft Azure, Office 365, Office Apps & Services Tag Active Directory, Azure, Banned, Enterprise Mobility, Greyed Out, Office365, Password, Password List, Passwords, Protection, Unavailable

So you have decided to increase security by adding a banned password list but the option in Azure Active Directory admin center is greyed out. Problem is licensing. This feature…