Cloud Skills for the Future
Cloud Skills for the Future
To assign an Access Package to 1,000 users in Azure Active Directory (Entra ID) using Entitlement Management in Azure Identity Governance, you can either use the Azure Portal or automate it via PowerShell or Microsoft Graph API, which is more…
Managing user profile photos within Microsoft Entra ID (formerly Azure AD) can be tedious if done manually, especially for large organizations. In this post, I will walk you through automating two key tasks using PowerShell and the Microsoft Graph API:…
Here’s a PowerShell script that allows you to enable, check, disable, or uninstall TLS 1.2 on your Microsoft Entra Connect server. It prompts the user for an option and performs the corresponding action: Get-ADSyncToolsTls12RegValue { [CmdletBinding()] Param( [Parameter(Mandatory = $true,…
Enforcing TLS 1.2 in Microsoft Entra Connect involves configuring your server to use this secure communication protocol exclusively. This step is essential for environments using versions 2.3.20.0 or later of Microsoft Entra Connect, as these versions require TLS 1.2 for…
Convincing an organization to implement Multi-Factor Authentication (MFA) involves focusing on security, user experience, and compliance while addressing common concerns about cost, complexity, and user resistance. Below is a structured approach to convince and implement MFA within an organization: Step…
Implementing Privileged Identity Management (PIM) in an organization requires both technical justification and strategic communication to highlight the benefits. Convincing an organization to adopt PIM typically involves focusing on security, compliance, and operational efficiency while addressing potential concerns like costs…
In today’s post, I would like to explain how to properly remove a domain from the Azure AD Connect synchronization process without causing errors, such as the missing-partition-for-run-step error. Specifically, we’ll discuss removing contoso.com from the sync process in Azure…
This PowerShell script allows you to check if TLS 1.2 is enabled on both the client and server, and also verifies that strong cryptography is enabled for the .NET Framework. Additionally, the script checks for the latest installed .NET Framework…
1. Modify the Registry to Enable TLS 1.2 TLS 1.2 must be enabled for both client and server components in the Windows registry. These components determine whether applications and services running on your system can use TLS 1.2. You can…
What the Script Does: 1. Enable TLS 1.2 for the Server Side 2. Enable TLS 1.2 for the Client Side 3. Enable Strong Cryptography for .NET Framework 4. Output Confirmation Explanation of Registry Values: Conclusion: This script ensures that TLS…