Guest Access

Recently had to do a bunch of research into guest access in Azure AD. One of things I've been trying to wrap my head around recently is the move from federation access via legacy ADFS type connections. Moving those over to guest access to B2B. It really fixes some of the trust issues that would happen. It also allows the IAM part of the business to play catch up instead of trusting all domain users for example. I was at ignite this year, and it seemed to be the overall theme. Consuming content how you want to consume, via a B2B, and collaborate on the go. With all the updates to teams we've gotten in the last year, I am excited to see what this year has in store.

Ignite 2018 review

So Ignite has come and gone, and this would of been my 4th Microsoft conference.  The overwhelming theme this was was collaboration.  You would be hard pressed to find anything that doesn't tie back into collaboration.

Microsoft it seems really only cares about two productions, and if you don't tie into those two, you are getting little to no time.

Azure and Office365. They are linking everything in the entire stack back to those two products.  The have also even organized all the vendors by how they connect into those platforms.

I really enjoyed the sessions I attended these year, the sessions around the testing of the new AZ exams was incredibility insightful.  I tend to agree with Microsoft, make the certification path more job role based vs. overall Microsoft skill.

All I want for for my birthday is....

Microsoft certifications that stop changing names.  Here is a rough timeline of how being a professional with Microsoft has been

MCSA

MCSE

MCITP

MCSE

MCSA

Azure Architect

The names have changed back and forth so many times, and I just read yesterday that the names of them are being changed to more job specific titles. Please don't change your mind again next year. Although I have to admit I do like the newer testing format.

Assigning licenses in O365 via Okta

Recently had to set up Okta assign some O365 licenses. I wasn't aware at that time, that this also requires me to manage all the Azure AD roles thru Okta as well. This is a pain in the ass.

PowerShell for Intune Corp device enrollment

There are a bunch of new corporate device examples in the PowerShell github for Intune

Guy should get an award for updating this, its pretty much exactly what I've been looking for

https://github.com/microsoftgraph/powershell-intune-samples/blob/master/CorporateDeviceEnrollment/CorpDeviceEnrollment_Export.ps1


$FileName_CSV = "CorpDeviceIdentifiers" + "_" + $(get-date -f dd-MM-yyyy-H-mm-ss) + ".csv"

$CDI = Get-CorporateDeviceIdentifiers

    if($CDI){

        foreach($CD in $CDI){

        $IDI = $CD.importedDeviceIdentifier
        $Desc = $CD.description

        Write-Host "Adding '$IDI,$Desc' to '$FileName_CSV'..." -ForegroundColor Gray

        Add-Content -Value "$IDI,$Desc" -Path "$ExportPath\$FileName_CSV"

        }

    }

    else {

    Write-Host "No Corporate Device Identifiers found..." -ForegroundColor Red

    }

Write-Host

New InTune User Portal

From Microsoft

User experience update for the Company Portal app for iOS We've released a major user experience update to the Company Portal app for iOS. The update features a complete visual redesign that includes a modernized look and feel. We've maintained the functionality of the app, but increased its usability and accessibility. You'll also see: Support for iPhone X. Faster app launch and loading responses, to save users time. Additional progress bars to provide users with the most up-to-date status information. Improvements to the way users upload logs, so if something goes wrong, it's easier to report.

For awhile now, the Company portal has been lacking behind what you get from MobileIron and airwatch, with the release this week the portal feels more modern. This has been a sorely needed update for awhile now. With a lot of firms moving off of Airwatch and MobileIron when doing Microsoft renewals. We are getting weekly updates from Intune. It surely has come a long way.

Useful O365 Pro Plus

Useful little script that can help you see which license is applied to a pro plus user.

Get-MsolUser  | ? {$_.Licenses.ServiceStatus | ? {$_.ServicePlan.ServiceName -eq "OFFICESUBSCRIPTION" -and $_.ProvisioningStatus -eq "Success"}}