Author: Harri Jaakkonen

Migrate from Cloud identities to Azure AD Connect.

Hi, Customer has working tenant with data inside and you need to convert it from Cloud-Only to Synced. It can be done with the following choices: UPN-matcing https://support.microsoft.com/en-us/help/3164442/how-to-use-upn-matching-for-identity-synchronization-in-office-365,-azure,-or-intune SMTP-matching http://www.ivchenko.pro/Blog/Post/23/Merging-on-premises-and-Office-365-users HARD-matching https://dirteam.com/dave/2014/08/15/fixing-office-365-dirsync-account-matching-issues/ Or by using little bit more effort and…

Continue Reading Migrate from Cloud identities to Azure AD Connect.

ADFS-failover PrimaryServer to Secondary.

Active Directory Federation Services can be installed in a farm. There can be maximum of 5 ADFS-servers in a farm using locally installed SQL Express. When You add in the sixth, You will have to install Full SQL-Server instance for…

Continue Reading ADFS-failover PrimaryServer to Secondary.

Add Calendar permissions to mailboxes in Hybrid environments.

Hi again, Below script will add Reviewer permissons for DefaultCalendarShare group. This is needed for Hybrid environments and Cross-Premises calendar sharing. $allmailbox = Get-Mailbox -Resultsize Unlimited | where { $_.IsShared -eq $False -and $_.ArbitrationMailbox -eq $Null } $Logfile = “C:TempLogsadd-calendarPerm.log”…

Continue Reading Add Calendar permissions to mailboxes in Hybrid environments.

Export All Mailboxes Calendar permisson to CSV

Below is a script that will export calendar permissions to utf8-formatted csv-file. Works with Onpremise Exchange as well as Exchange Online.

Continue Reading Export All Mailboxes Calendar permisson to CSV

Java and Shibboleth authentication with Azure REST API and ADFS.

The last blog entry was about setting up Onpremise AD with Office 365 and ADFS. So now to the instresting part. I’m going a little bit awol with this, as I’m not a coder. First about Azure authentication. https://docs.microsoft.com/en-us/azure/app-service-api/app-service-api-whats-changed#authentication And specially…

Continue Reading Java and Shibboleth authentication with Azure REST API and ADFS.

Azure AD Connect with ADFS customization.

So scenario was this. Customer has an Office 365 tenant all ready in-place. The users in Onpremise AD have SamAccountNames as UserPrincipalNames. The next step Is obvious. Add UPN-suffix and change UserPrincipalName to match email address. Then add mail-attribute for…

Continue Reading Azure AD Connect with ADFS customization.

Skype For Business Hybrid and Get-Webticket error 0x80048257.

Hi all, Yesterday I saw an error I haven’t seen before. I was setting up a Shared Namespace Hybrid with S4B Server 2015 and this came by: I spent several hours solving this, but nothing was found. Until I found…

Continue Reading Skype For Business Hybrid and Get-Webticket error 0x80048257.

Assign Permissions to all mailboxes using Mail Enabled Security Group.

Hi, Add all users that need the following rights to a Mail Enabled Security Group. Then add permissions to calendars with this script: $allmailbox = Get-Mailbox -Resultsize Unlimited -Filter {RecipientTypeDetails -eq ‘usermailbox’} Foreach ($Mailbox in $allmailbox) {     $path =…

Continue Reading Assign Permissions to all mailboxes using Mail Enabled Security Group.

Find a User with certain SID.

Hi, Powershell is the way. Open powershell and type: import-module activedirectory  Then. $strSID=”Enter SID Here” $uSid = [ADSI]”LDAP://<SID=$strSID>” echo $uSid Have a nice one,

Continue Reading Find a User with certain SID.

How to find computers with a name starting with something and add them to a security group.

Dou, that was a long sentence 🙂 But here is how. $computers = get-adcomputer -ldapfilter “(name=name*)” $computers | foreach {Add-ADGroupMember -id name_of_the_group -MEMBERS $computers.samaccountname} Happy powershelling!

Continue Reading How to find computers with a name starting with something and add them to a security group.