https://gotoguy.blog/categories/powershell/PowerShell - Category - GoToGuy BlogHugo -- gohugo.ioen-usWed, 06 May 2020 13:04:40 +0000https://gotoguy.blog/2020/05/06/oauth-authentication-to-microsoft-graph-with-powershell-core/Wed, 06 May 2020 13:04:40 +0000Jan Vidar Elvenhttps://gotoguy.blog/2020/05/06/oauth-authentication-to-microsoft-graph-with-powershell-core/In this short blog post I will show you a really simple way to get started authenticating with Oauth to Microsoft Graph using PowerShell Core. As you might know, PowerShell Core is the open-source, cross-platform (Windows, macOS, and Linux) edition of PowerShell, with the latest version today being PowerShell 7.0 ( https://docs.microsoft.com/en-us/powershell/scripting/whats-new/what-s-new-in-powershell-70?view=powershell-7 ). The latest version of Windows PowerShell is 5.1, and runs side-by-side with PowerShell Core. I’ve been using Windows PowerShell mostly previously, as I’m running Windows 10 and use a lot of PowerShell modules that variously depend on SDKs or other Windows Components, but I’m increasingly using PowerShell Core in scenarios for example with Azure Functions PowerShell ( https://docs.https://gotoguy.blog/2019/11/22/how-to-use-azure-ad-privileged-identity-management-powershell-and-graph-api/Fri, 22 Nov 2019 12:00:58 +0000Jan Vidar Elvenhttps://gotoguy.blog/2019/11/22/how-to-use-azure-ad-privileged-identity-management-powershell-and-graph-api/A while back I wrote a blog post on how you could download, install and use a separate Azure AD PIM PowerShell Module for managing Privileged Roles, https://gotoguy.blog/2018/05/22/getting-started-with-azure-ad-pim-powershell-module/ . With the recent update of the AzureADPreview Module, the cmdlets for managing Privileged Roles are now included in the module, so there is no longer required to install a separate module for this! In this blog post I will explain and show how these commands can be used.https://gotoguy.blog/2018/07/11/using-the-azure-run-as-account-in-azure-automation-to-connect-to-azure-ad-with-a-service-principal/Wed, 11 Jul 2018 11:08:35 +0000Jan Vidar Elvenhttps://gotoguy.blog/2018/07/11/using-the-azure-run-as-account-in-azure-automation-to-connect-to-azure-ad-with-a-service-principal/If you are using Azure Automation and working with Runbooks for automating against your Azure subscription, you can create an Azure Run As Account for authenticating and logging in to your subscription. The Azure Run As Account is configured in your Automation Account, and will do the following: Creates an Azure AD application with a self-signed certificate, creates a service principal account for the application in Azure AD, and assigns the Contributor role for the account in your current subscription.https://gotoguy.blog/2018/07/09/azure-mfa-report-dashboard-in-azure-portal-the-good-the-bad-and-the-ugly/Mon, 09 Jul 2018 12:44:53 +0000Jan Vidar Elvenhttps://gotoguy.blog/2018/07/09/azure-mfa-report-dashboard-in-azure-portal-the-good-the-bad-and-the-ugly/If you are working with EMS and implementing Azure AD, Intune, MDM, MAM, Information Protection and more, you can build yourself some great dashboards in the Azure Portal using tiles and pin blades to your customized dashboard. This is an example from my own workplace: image Often when I work with projects implementing Identity & Access, Conditional Access and Azure MFA, I wish I could have a dashboard to report on MFA registration, and be able to pin that to my EMS dashboard as shown above.https://gotoguy.blog/2018/05/22/getting-started-with-azure-ad-pim-powershell-module/Tue, 22 May 2018 21:40:01 +0000Jan Vidar Elvenhttps://gotoguy.blog/2018/05/22/getting-started-with-azure-ad-pim-powershell-module/This is a short blog post showing how you can get started and some examples of using the PIM PowerShell Module for Azure AD Privileged Identity Management. You can read more about Azure AD Privileged Identity Management here: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-privileged-identity-management-configure , or by just using the following short URL: https://aka.ms/AzureADPIM ! Installing the Azure AD PIM PowerShell Module Since there are no PIM related commands in the AzureAD or AzureADPreview PowerShell Modules, we will have to install a separate module for PIM.https://gotoguy.blog/2018/01/17/shutdown-and-deallocate-an-azure-vm-using-managed-service-identity-and-instance-metadata-service/Wed, 17 Jan 2018 14:16:20 +0000Jan Vidar Elvenhttps://gotoguy.blog/2018/01/17/shutdown-and-deallocate-an-azure-vm-using-managed-service-identity-and-instance-metadata-service/The purpose of this blog post is to show how you can run a PowerShell script on an Azure VM that will shutdown and deallocate the actual VM the script is run on. First, kudos to Marcel Meurer (Azure MVP), that originated the idea of how to run a PowerShell script that will shut down and deallocate the VM from inside itself, this is a good read: https://www.sepago.de/blog/2018/01/16/deallocate-an-azure-vm-from-itself . Marcels blog learnt me of something I havent used before, Azure Instance Metadata Service, where I can get information on my current VM instance.https://gotoguy.blog/2017/09/21/using-azure-ad-managed-service-identity-to-access-microsoft-graph-with-azure-functions-and-powershell/Thu, 21 Sep 2017 13:01:47 +0000Jan Vidar Elvenhttps://gotoguy.blog/2017/09/21/using-azure-ad-managed-service-identity-to-access-microsoft-graph-with-azure-functions-and-powershell/Recently Microsoft released an exciting new preview in Azure AD: Managed Service Identity! You can go and read the details at the Enterprise Mobility + Security blog, and some examples of usage scenarios: https://azure.microsoft.com/en-us/blog/keep-credentials-out-of-code-introducing-azure-ad-managed-service-identity/ Managed Service Identity makes it possible to keep credentials out of code, and that is a very inviting prospect. As I have been exploring Microsoft Graph in different scenarios using PowerShell, I thought I should have a go at using Managed Service Identity in an Azure Function and run some PowerShell commands to get data from the Microsoft Graph.https://gotoguy.blog/2017/09/01/looking-in-to-the-changes-to-token-lifetime-defaults-in-azure-ad/Fri, 01 Sep 2017 12:33:30 +0000Jan Vidar Elvenhttps://gotoguy.blog/2017/09/01/looking-in-to-the-changes-to-token-lifetime-defaults-in-azure-ad/In a recent announcement at the Enterprise Mobility Blog, https://blogs.technet.microsoft.com/enterprisemobility/2017/08/31/changes-to-the-token-lifetime-defaults-in-azure-ad/ , there will be a change for default settings to the Token Lifetime Defaults in Azure Active Directory for New Tenants only. This change will not affect existing old Tenants. I have summarized the changes in this table: image This is great news for many customers to remove user frustration over authentication prompts when refresh tokens expired after a period of inactivity.https://gotoguy.blog/2017/08/28/experts-and-community-unite-again-at-experts-live-europe-in-berlin/Mon, 28 Aug 2017 18:50:40 +0000Jan Vidar Elvenhttps://gotoguy.blog/2017/08/28/experts-and-community-unite-again-at-experts-live-europe-in-berlin/Last week I was back at this great Community conference, previously known as System Center Universe Europe (SCU Europe), and this year for the first time under the name Experts Live Europe, part of the Experts Live network (http://www.expertslive.org ). This conference is well known for its great content, top speakers, sponsors and great community, where you meet friends old and new, and generally have a great time the 3 days the conference lasts.https://gotoguy.blog/2017/07/13/speaking-at-experts-live-europe-2017-berlin/Thu, 13 Jul 2017 11:40:59 +0000Jan Vidar Elvenhttps://gotoguy.blog/2017/07/13/speaking-at-experts-live-europe-2017-berlin/Once again I’m very proud and excited to announce that I will be speaking at Experts Live Europe 2017, in Berlin August 23rd to 25th. Experts Live Europe, previously known as System Center Universe Europe, is celebrating 5 years anniversary this year, after beeing arranged in Bern, Basel x 2, and last year moved to Berlin, where it was announced that the conference in the future would be part of the Experts Live Network!