All about Microsoft 365
Using the Graph API, we create a sample script to report on item count and size per year. The script can be run against multiple Exchange Online mailboxes at a time. …
Continue readingReporting on Microsoft 365 mailbox item count and size by year via the Graph API
Last week, we explored Entra ID’s app instance property lock feature. As part of the process, we examined one possible way that bad actors could take advantage of the convoluted nature of working with multi-tenant applications within Microsoft 365 and their in-tenant representation, the service principal. As the app instance …
Continue readingScript to review and remove service principal credentials
UPDATE: The property is now available in the /v1.0 version of the Graph API! Today’s article will be a short one. In a small, but meaningful update, Microsoft has released a new addition to the signInActivity resource, which allows us to determine the last time a given user was able …
Continue readingWe can finally report on last successful login timestamp in Entra ID
In this article, we demonstrate a somewhat convoluted method used by bad actors to obtain persistence and execute operations in the context of Entra ID multi-tenant applications, as well as the steps Microsoft is taking to address the issue. As the solution only covers part of the story, a follow up article and a PowerShell script will be needed to address it. …
In another “forgotten knowledge” topic, let’s discuss how to automatically clean up/remove items from the Deleted items folder in Exchange Online/Microsoft 365. Nothing has changed in this process for years now, but it looks like people online are still having a hard time finding proper instructions on how to configure …
Continue readingMake sure Deleted items are automatically removed from Microsoft 365 mailboxes