nicolonsky

# Disable Office 365 Self-Servicing Purchases
# src: https://docs.microsoft.com/en-us/microsoft-365/commerce/subscriptions/allowselfservicepurchase-powershell?view=o365-worldwide

# Install abd connect MSCommerce services with PowerShell
Install-Module -Name MSCommerce -Scope CurrentUser
Connect-MSCommerce

Get-MSCommerceProductPolicies -PolicyId AllowSelfServicePurchase

# Disable Self-Servicing for all products

nicolonsky

$licenseAssignmentErrors = Get-MsolGroup -HasLicenseErrorsOnly $true | % {

    $groupId = $_.ObjectId

    Get-MsolGroupMember -All -GroupObjectId $groupId | 

        Get-MsolUser -ObjectId {$_.ObjectId} |

        Where {$_.IndirectLicenseErrors -and $_.IndirectLicenseErrors.ReferencedObjectId -eq $groupId} |

nicolonsky

servicePrincipalConnection = Get-AutomationConnection -Name "AzureRunAsConnection" -ErrorAction Stop

Update-MSGraphEnvironment -AuthUrl "https://login.microsoftonline.com/$($servicePrincipalConnection.TenantId)" -AppId $servicePrincipalConnection.ApplicationId

Connect-MSGraph -CertificateThumbprint $servicePrincipalConnection.CertificateThumbprint -Quiet

Get-DeviceManagement_ManagedDevices

nicolonsky

Connect-MSGraph
Update-MSGraphEnvironment -SchemaVersion "Beta" -Quiet
Connect-MSGraph -Quiet

# Get all autopilot devices (even if more than 1000)
$autopilotDevices = Invoke-MSGraphRequest -HttpMethod GET -Url "deviceManagement/windowsAutopilotDeviceIdentities" | Get-MSGraphAllPages

# Display gridview to show devices
$selectedAutopilotDevices =  $autopilotDevices | Out-GridView -OutputMode Multiple -Title "Select Windows Autopilot entities to update"

nicolonsky

Import-Module "$env:ProgramFiles\Microsoft Azure Active Directory Connect\AzureADSSO.psd1"

New-AzureADSSOAuthenticationContext

$creds = Get-Credential

Update-AzureADSSOForest -OnPremCredentials $creds

nicolonsky

Connect-AzureAD

$runAsAccountServicePrincipal = Get-AzureADServicePrincipal -ObjectId "497421d0-5b78-4cf1-bab1-6ad2e3d7f319"

$accountAdminDirectoryRole= Get-AzureADDirectoryRole | where-object {$_.DisplayName -eq "User Account Administrator"}

Add-AzureADDirectoryRoleMember -ObjectId $accountAdminDirectoryRole.ObjectId `
-RefObjectId $runAsAccountServicePrincipal.ObjectId

Get-AzureADDirectoryRoleMember -ObjectId $accountAdminDirectoryRole.ObjectId

nicolonsky

function New-Example{
    
    [CmdletBinding()]
        Param(
        [Parameter(
            Mandatory=$true,
            Position=0)]
        [ValidateScript({ 
            
            $requiredProperties=@("Property1","Property2","Property3", "Property4")

nicolonsky

[ValidateScript({ 
            
    $requiredProperties=@("Property1","Property2","Property3", "Property4")
 
    $members=Get-Member -InputObject $_ -MemberType NoteProperty
 
    $missingProperties=Compare-Object -ReferenceObject $requiredProperties -DifferenceObject $members.Name -PassThru -ErrorAction SilentlyContinue
 
    if (-not($missingProperties)){
                

nicolonsky

#Requieres -Version 5.0

<#

.SYNOPSIS 
    You can use this script for troubleshooting or engineering purposes to verify if TCP ports are opened.    

.DESCRIPTION
	With this Script you are able to specify server names and port numbers to check in a CSV File. 
    The Script generates an CSV output file as a report.

nicolonsky

#requires -Modules AzureAD

$UsageLocation = Get-AutomationVariable -Name "UsageLocation" -ErrorAction Stop

$servicePrincipalConnection = Get-AutomationConnection -Name "AzureRunAsConnection" -ErrorAction Stop

Connect-AzureAD -TenantId $servicePrincipalConnection.TenantId -ApplicationId $servicePrincipalConnection.ApplicationId `
-CertificateThumbprint $servicePrincipalConnection.CertificateThumbprint

Get-AzureADUser | Where-Object{$_.UsageLocation -ne $UsageLocation} | ForEach-Object {