nicolonsky

$licenseAssignmentErrors = Get-MsolGroup -HasLicenseErrorsOnly $true | % {

    $groupId = $_.ObjectId

    Get-MsolGroupMember -All -GroupObjectId $groupId | 

        Get-MsolUser -ObjectId {$_.ObjectId} |

        Where {$_.IndirectLicenseErrors -and $_.IndirectLicenseErrors.ReferencedObjectId -eq $groupId} |

nicolonsky

servicePrincipalConnection = Get-AutomationConnection -Name "AzureRunAsConnection" -ErrorAction Stop

Update-MSGraphEnvironment -AuthUrl "https://login.microsoftonline.com/$($servicePrincipalConnection.TenantId)" -AppId $servicePrincipalConnection.ApplicationId

Connect-MSGraph -CertificateThumbprint $servicePrincipalConnection.CertificateThumbprint -Quiet

Get-DeviceManagement_ManagedDevices

nicolonsky

Connect-MSGraph
Update-MSGraphEnvironment -SchemaVersion "Beta" -Quiet
Connect-MSGraph -Quiet

# Get all autopilot devices (even if more than 1000)
$autopilotDevices = Invoke-MSGraphRequest -HttpMethod GET -Url "deviceManagement/windowsAutopilotDeviceIdentities" | Get-MSGraphAllPages

# Display gridview to show devices
$selectedAutopilotDevices =  $autopilotDevices | Out-GridView -OutputMode Multiple -Title "Select Windows Autopilot entities to update"

nicolonsky

Import-Module "$env:ProgramFiles\Microsoft Azure Active Directory Connect\AzureADSSO.psd1"

New-AzureADSSOAuthenticationContext

$creds = Get-Credential

Update-AzureADSSOForest -OnPremCredentials $creds

nicolonsky

Connect-AzureAD

$runAsAccountServicePrincipal = Get-AzureADServicePrincipal -ObjectId "497421d0-5b78-4cf1-bab1-6ad2e3d7f319"

$accountAdminDirectoryRole= Get-AzureADDirectoryRole | where-object {$_.DisplayName -eq "User Account Administrator"}

Add-AzureADDirectoryRoleMember -ObjectId $accountAdminDirectoryRole.ObjectId `
-RefObjectId $runAsAccountServicePrincipal.ObjectId

Get-AzureADDirectoryRoleMember -ObjectId $accountAdminDirectoryRole.ObjectId

nicolonsky

function New-Example{
    
    [CmdletBinding()]
        Param(
        [Parameter(
            Mandatory=$true,
            Position=0)]
        [ValidateScript({ 
            
            $requiredProperties=@("Property1","Property2","Property3", "Property4")

nicolonsky

[ValidateScript({ 
            
    $requiredProperties=@("Property1","Property2","Property3", "Property4")
 
    $members=Get-Member -InputObject $_ -MemberType NoteProperty
 
    $missingProperties=Compare-Object -ReferenceObject $requiredProperties -DifferenceObject $members.Name -PassThru -ErrorAction SilentlyContinue
 
    if (-not($missingProperties)){
                

nicolonsky

#Requieres -Version 5.0

<#

.SYNOPSIS 
    You can use this script for troubleshooting or engineering purposes to verify if TCP ports are opened.    

.DESCRIPTION
	With this Script you are able to specify server names and port numbers to check in a CSV File. 
    The Script generates an CSV output file as a report.

nicolonsky

#requires -Modules AzureAD

$UsageLocation = Get-AutomationVariable -Name "UsageLocation" -ErrorAction Stop

$servicePrincipalConnection = Get-AutomationConnection -Name "AzureRunAsConnection" -ErrorAction Stop

Connect-AzureAD -TenantId $servicePrincipalConnection.TenantId -ApplicationId $servicePrincipalConnection.ApplicationId `
-CertificateThumbprint $servicePrincipalConnection.CertificateThumbprint

Get-AzureADUser | Where-Object{$_.UsageLocation -ne $UsageLocation} | ForEach-Object {

nicolonsky

Get-WinEvent -LogName "Microsoft-Windows-Windows Defender/Operational" | where {$_.ID -eq 1000} | Export-Csv "c:\mphistory.csv" -NoTypeInformation