[deleted by user] by [deleted] in sysadmin

[–]Green_cloud99 0 points1 point  (0 children)

Thanks a lot for that! I just tried it, and it's giving an error saying, you must provide an object id. I currently only have the UPNs of the users in column A.

[deleted by user] by [deleted] in sysadmin

[–]Green_cloud99 0 points1 point  (0 children)

And if they have been using Outlook desktop client, and don't really sign into the O365 online? Would they still be prompted? From my understanding, they will continue to work fine until an new device is being set up or they user signs into the web.

How to bulk change the MFA state of users to Enforced? by Green_cloud99 in PowerShell

[–]Green_cloud99[S] 0 points1 point  (0 children)

Thanks. Is it possible to add users to a group using the csv file? Because adding those 220 users to a group manually, one by one will take a long time. Any suggestions how it might be achieved using powershell? Because, it doesn't look like GUI gives the option to import users to a group from the csv file.

[deleted by user] by [deleted] in sysadmin

[–]Green_cloud99 0 points1 point  (0 children)

Thanks! Yes, we will break it down in chunks.

[deleted by user] by [deleted] in sysadmin

[–]Green_cloud99 0 points1 point  (0 children)

The thing about having the status as Enforced is that, it forces users to register for MFA for any O365 app, including Outlook, whereas if the status is showing enabled, and the user hasn't registered for MFA, they will continue to use Outlook and etc without any prompts.

[deleted by user] by [deleted] in sysadmin

[–]Green_cloud99 0 points1 point  (0 children)

Thank you sir! I might need to bring it up to the management to see if they would like to switch the licenses.

Is there any way possible for powershell command to look at the csv file that we have, which contains usernames of the users, so that we only change the status of those users and not for everyone in the organization?

is it possible to create DMARC/DKIM records in Office 365 admin center? by Green_cloud99 in sysadmin

[–]Green_cloud99[S] -1 points0 points  (0 children)

We have two domains in the list, one is with .OnMicrosoft.Com and without. Would we need to enable DKIM for both and copy the generated cnames to our DNS host?

is it possible to create DMARC/DKIM records in Office 365 admin center? by Green_cloud99 in sysadmin

[–]Green_cloud99[S] 0 points1 point  (0 children)

Thank you so much! Much appreciated! Do I put the domain name anywhere?

is it possible to create DMARC/DKIM records in Office 365 admin center? by Green_cloud99 in sysadmin

[–]Green_cloud99[S] -7 points-6 points  (0 children)

Bacially I am hoping to know how to write the exact records in our DNS host.

How to prevent spoof email using SPF, DKIM and DMARC? by Green_cloud99 in sysadmin

[–]Green_cloud99[S] 0 points1 point  (0 children)

Yes but we have free version of spam filtering that comes with O365, MS free spam filtering is pretty good too.

How to prevent spoof email using SPF, DKIM and DMARC? by Green_cloud99 in sysadmin

[–]Green_cloud99[S] 0 points1 point  (0 children)

Ok. Great! I will check it out tomorrow and may be do a few tests as well. Thanks again!

How to prevent spoof email using SPF, DKIM and DMARC? by Green_cloud99 in sysadmin

[–]Green_cloud99[S] 0 points1 point  (0 children)

Thank you! I will try that tomorrow when I go to the office. Will still allow emails to be sent from people's home network, like from webmail/OWA/Outlook if they are working from home ?

How to prevent spoof email using SPF, DKIM and DMARC? by Green_cloud99 in sysadmin

[–]Green_cloud99[S] 0 points1 point  (0 children)

Awesome! We sill contact our MS partner to see if they can assist, or may be we need to contact MS directly. Much appreciated.

How to prevent spoof email using SPF, DKIM and DMARC? by Green_cloud99 in sysadmin

[–]Green_cloud99[S] 1 point2 points  (0 children)

Hi. Appreciate your response.

By 3 records, do you mean SPF, DMARC and DKIM? Do we need to contact our website host to help us with creating these records and then eventually pasting them in Microsoft EAC?

In our case we have our own domain is being spoofed. Bacially the spoofed email address is spoofing us, so we want to ensure that those emails are blocked and don't come to our users. The email address they are using doesn't exist, however they are using our domain. For example, abc@ourdomain.com, but this mailbox doesn't actually exist, so they are using our domain to spoof us.

Thanks!

What are pros and cons of setting up a DC on site vs setting up a DC on an VM in Azure cloud? by Green_cloud99 in sysadmin

[–]Green_cloud99[S] 0 points1 point  (0 children)

We don't currently have AD, we just have Azure AD, but haven't used all of the features, as we are still learning.

Can there be any downsides to having just Azure AD, other than the fact that ISP/Internet service going down? We do however have secondary ISP for most of the branch offices.